$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa File: 8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa (raw, json) Hash identifier: 25p2CQNoRhMXN72ekfQmtpTMflSpFYKd1MROH2P9sSQ= Subject key identifier: 70:3B:9E:64:5E:67:AC:9E:40:38:29:81:A1:35:FE:B0:5E:C6:A8:4B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9FB56B7A76CA29AE07C39280 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 54540 IP address blocks: 144.168.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6b:7a:76:ca:29:ae:07:c3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=4f19c48f-0c07-4b9e-ba46-f89c86546ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:0e:4c:61:af:05:08:3d:84:db:ae:54:78: 2b:47:bf:a7:04:64:49:e9:76:ec:1a:66:17:c5:9b: 43:fc:b7:5e:7e:dc:53:6d:39:82:1b:d0:e3:40:a5: 00:99:92:7e:e0:2b:59:74:67:99:ab:9b:26:5e:cf: 69:ab:08:cf:e9:7b:79:35:14:15:19:12:d5:3b:97: 8f:e5:cc:01:6f:5f:2a:2d:aa:5a:49:96:de:6a:a2: 5f:ab:ca:a0:37:21:17:8c:c7:59:c7:db:aa:a4:16: 94:59:7b:66:b9:bb:84:bd:06:79:f0:e8:69:1b:f7: 02:5a:65:e3:f8:0a:01:9c:04:c4:4c:11:df:d9:59: 65:f1:69:d3:ae:b0:89:2f:d7:01:83:0b:8d:59:da: 79:8e:73:5d:cb:c3:36:8d:cc:50:12:11:9e:37:36: c0:2c:f8:cf:d1:8c:d2:41:f6:ae:18:60:3f:c7:a5: 06:bb:4b:eb:f0:8c:7f:2b:2e:66:bb:be:bb:3a:42: f4:2a:50:c0:ef:a2:ec:fd:74:70:b2:54:5d:5d:26: ae:4f:80:87:e7:b0:b1:33:80:23:e6:f4:5b:ea:5c: a1:7f:50:27:bc:bf:2c:f3:c8:47:f8:7c:f5:e3:8c: f8:89:93:47:6c:73:22:4f:78:8a:3c:b8:46:c8:48: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3B:9E:64:5E:67:AC:9E:40:38:29:81:A1:35:FE:B0:5E:C6:A8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1d:c4:1a:65:0e:6a:f2:39:de:d0:52:9d:95:dc:1e:0f:a0: 0a:ab:62:e4:cb:b4:4b:63:2c:09:41:03:50:cc:2f:86:1b:1e: 7d:21:44:c9:09:28:47:c4:e2:0a:7e:10:d7:0e:47:0c:c5:ff: 02:29:ca:a2:d2:51:3e:89:80:a0:1c:c6:7f:2d:83:39:52:5e: 7f:1c:42:15:e2:41:6a:ee:4e:f9:d0:5c:b9:04:91:3a:78:3b: 99:21:df:90:b3:19:a1:cc:4e:fa:4f:a5:d3:ed:3d:0c:44:49: ba:dc:e1:26:f3:70:f4:7b:79:74:8e:de:70:43:8c:d1:90:4a: 3e:b0:8f:4f:ba:6a:a8:c2:6a:db:15:a9:f0:38:2f:4c:71:6d: 2f:2e:05:6b:4f:a4:e7:69:d3:4a:c4:9f:e7:9a:d7:de:4a:78: 96:64:b3:35:71:6d:fe:55:ec:6f:a2:b3:8f:94:ca:95:61:f7: 3c:07:f3:02:66:cd:0e:7d:6d:15:a0:53:3b:7a:17:ee:87:b0: b5:85:13:bb:05:82:68:1a:3a:c8:20:77:01:67:c7:5a:09:1f: 58:1d:82:e0:d7:31:2f:5b:c3:60:11:25:b4:89:e7:2e:74:60: 39:25:58:14:88:ff:75:85:7a:da:f4:95:d2:85:aa:69:4f:ab: 21:fa:8d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWt6dsoprgfDkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NGYxOWM0OGYtMGMwNy00YjllLWJhNDYtZjg5Yzg2NTQ2ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6gOTGGvBQg9hNuuVHgrR7+nBGRJ6XbsGmYX xZtD/LdeftxTbTmCG9DjQKUAmZJ+4CtZdGeZq5smXs9pqwjP6Xt5NRQVGRLVO5eP 5cwBb18qLapaSZbeaqJfq8qgNyEXjMdZx9uqpBaUWXtmubuEvQZ58OhpG/cCWmXj +AoBnATETBHf2Vll8WnTrrCJL9cBgwuNWdp5jnNdy8M2jcxQEhGeNzbALPjP0YzS QfauGGA/x6UGu0vr8Ix/Ky5mu767OkL0KlDA76Ls/XRwslRdXSauT4CH57CxM4Aj 5vRb6lyhf1AnvL8s88hH+Hz144z4iZNHbHMiT3iKPLhGyEh/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA7nmReZ6yeQDgpgaE1/rBexqhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGFlNmNhOTQtMmZhNi0z YTVjLTk1NDgtY2RkNWYzOTcwODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYdxBplDmryOd7QUp2V3B4PoAqrYuTLtEtjLAlBA1DML4YbHn0hRMkJ KEfE4gp+ENcORwzF/wIpyqLSUT6JgKAcxn8tgzlSXn8cQhXiQWruTvnQXLkEkTp4 O5kh35CzGaHMTvpPpdPtPQxESbrc4SbzcPR7eXSO3nBDjNGQSj6wj0+6aqjCatsV qfA4L0xxbS8uBWtPpOdp00rEn+ea195KeJZkszVxbf5V7G+is4+UypVh9zwH8wJm zQ59bRWgUzt6F+6HsLWFE7sFgmgaOsggdwFnx1oJH1gdguDXMS9bw2ARJbSJ5y50 YDklWBSI/3WFetr0ldKFqmlPqyH6jSE= -----END CERTIFICATE-----Generated at Wed May 13 08:43:58 2026 by rpki-client