$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa File: 916c3f1d-1340-37a7-8106-fdf9db78a154.roa (raw, json) Hash identifier: H1guJS9BWvp2nWQwnkqusTgN+nP3xxaM0YolXIBNAs8= Subject key identifier: CA:36:AD:DA:8D:CC:BA:44:D4:18:E9:7B:11:60:57:69:D1:C5:5D:59 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584DA11AB797D7D727694BDBEA80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 29802 IP address blocks: 198.178.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b7:97:d7:d7:27:69:4b:db:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=bd777f17-07c3-43a0-b074-23e923ed408b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:ec:b9:ca:f5:9a:12:96:95:45:9c:0a:3a: 68:bd:0f:cd:46:da:8b:d9:ed:5c:9d:8b:f1:7e:fe: 62:cb:62:76:96:10:e0:43:ee:60:fc:a9:ee:91:84: f5:9f:bc:54:32:d3:84:00:7d:64:00:89:14:6f:db: be:e5:50:16:c6:0c:ec:8a:ed:80:f2:f7:7f:23:ad: 56:5f:00:5d:17:f6:7c:73:8e:9c:38:90:13:06:70: 38:3b:5b:af:6f:98:88:de:e9:a3:a1:79:08:52:74: 7d:59:72:f2:7f:c4:48:04:bf:29:ef:5b:8f:fa:e6: 0a:98:37:3a:e1:18:34:06:de:e5:51:01:a8:d3:c5: dc:2b:6e:a5:f3:c0:64:05:62:98:3e:89:14:11:db: 4c:11:be:e9:2a:96:27:1c:ba:91:1a:38:bf:a6:cc: 79:bc:ce:b9:8d:83:43:98:e2:49:be:35:de:86:76: 30:75:42:37:26:1e:98:74:e4:67:33:9f:a0:f1:ac: 83:31:b8:7d:9b:fd:8c:51:75:ec:eb:00:c0:2f:cb: 15:7c:0f:7a:14:d3:e4:7c:75:63:c9:9e:dd:fd:56: 60:a5:2c:70:e8:87:c6:c9:be:6f:c3:6e:23:7d:77: 13:4b:6c:d5:2e:ee:a8:85:b3:4b:b6:dd:27:04:7c: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:36:AD:DA:8D:CC:BA:44:D4:18:E9:7B:11:60:57:69:D1:C5:5D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.178.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ae:73:7a:ce:4d:84:65:00:62:72:b7:d0:a8:90:46:c2:4e: 4c:e0:f4:3c:71:30:4a:31:21:3d:75:f8:92:98:60:89:bb:ab: 40:de:f5:9a:b1:6c:27:62:0f:d4:d1:93:7b:88:cb:71:36:5d: 77:94:c0:c2:99:32:85:ba:94:60:04:88:9f:02:1e:5d:bc:6a: 93:c9:14:3e:08:cb:c8:86:63:dc:6c:7e:c8:7f:c3:bb:5e:52: 58:55:0e:a4:86:36:cc:2c:13:d7:8e:21:06:ca:69:c5:75:92: 58:38:49:ea:50:19:f0:6e:e4:35:0d:34:cb:3d:55:49:5e:0a: f4:94:36:46:1f:5f:34:1a:b8:bc:48:67:29:a4:c3:1a:3d:30: 2d:95:39:01:83:8a:6c:e8:35:b2:28:9a:4e:7f:5a:0f:c3:f9: 41:ed:71:6a:2f:fa:fc:f4:6a:5c:7c:56:38:de:3e:64:a6:b4: d1:36:49:8d:e8:cc:63:56:e6:68:a7:67:48:5c:10:4f:45:dd: 2c:7a:19:64:bd:09:08:bc:7e:8f:f7:56:f5:c7:37:da:01:cc: e7:88:02:df:24:1f:b2:fa:00:57:9a:67:33:ad:83:c3:a4:96: c7:2a:26:49:31:05:08:d7:e6:55:78:f4:dd:ea:18:66:e6:79: 6d:2f:0c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGreX19cnaUvb6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk YmQ3NzdmMTctMDdjMy00M2EwLWIwNzQtMjNlOTIzZWQ0MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpnsucr1mhKWlUWcCjpovQ/NRtqL2e1cnYvx fv5iy2J2lhDgQ+5g/KnukYT1n7xUMtOEAH1kAIkUb9u+5VAWxgzsiu2A8vd/I61W XwBdF/Z8c46cOJATBnA4O1uvb5iI3umjoXkIUnR9WXLyf8RIBL8p71uP+uYKmDc6 4Rg0Bt7lUQGo08XcK26l88BkBWKYPokUEdtMEb7pKpYnHLqRGji/psx5vM65jYND mOJJvjXehnYwdUI3Jh6YdORnM5+g8ayDMbh9m/2MUXXs6wDAL8sVfA96FNPkfHVj yZ7d/VZgpSxw6IfGyb5vw24jfXcTS2zVLu6ohbNLtt0nBHwpGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo2rdqNzLpE1BjpexFgV2nRxV1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTE2YzNmMWQtMTM0MC0z N2E3LTgxMDYtZmRmOWRiNzhhMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxrJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGuc3rOTYRlAGJyt9CokEbCTkzg9DxxMEoxIT11+JKYYIm7q0De9Zqx bCdiD9TRk3uIy3E2XXeUwMKZMoW6lGAEiJ8CHl28apPJFD4Iy8iGY9xsfsh/w7te UlhVDqSGNswsE9eOIQbKacV1klg4SepQGfBu5DUNNMs9VUleCvSUNkYfXzQauLxI Zymkwxo9MC2VOQGDimzoNbIomk5/Wg/D+UHtcWov+vz0alx8VjjePmSmtNE2SY3o zGNW5minZ0hcEE9F3Sx6GWS9CQi8fo/3VvXHN9oBzOeIAt8kH7L6AFeaZzOtg8Ok lscqJkkxBQjX5lV49N3qGGbmeW0vDA4= -----END CERTIFICATE-----Generated at Wed May 13 16:17:37 2026 by rpki-client