$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa File: 9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa (raw, json) Hash identifier: dywsoXj0M1JLGM6pNzMsP2UQRsAOAi1+W0EFn/TwrK8= Subject key identifier: 6B:90:8B:3A:9F:3E:59:98:04:5D:A0:CA:4E:2E:52:9D:CC:E1:BE:6A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F4976E1C941A35966E52A8C00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401299 IP address blocks: 66.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:e1:c9:41:a3:59:66:e5:2a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cb8a5d31-e728-474e-81b3-934a4ad9f837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:31:81:3f:f6:61:2b:79:aa:8c:4a:46:d9: 58:ad:44:f2:63:4b:0a:1d:b1:df:df:b8:26:22:cb: 99:f6:d9:35:d6:d0:b5:b0:5b:b8:3e:42:dd:ed:16: 1b:55:98:54:35:d5:78:ad:53:c4:5f:73:04:94:f8: ae:42:c8:82:a1:07:7e:12:8c:22:f5:0e:1b:e4:ee: 16:da:6b:52:ed:8d:b6:38:8c:72:e2:30:89:27:31: bd:1a:9d:1f:f8:d5:bd:99:fd:5b:6f:f3:5f:10:77: ac:23:09:dd:da:e8:03:f7:ac:1c:08:c8:19:bb:38: 1a:be:8c:e3:dc:aa:f0:2e:1c:06:54:ae:5d:e7:c4: 22:53:0d:9c:38:e0:99:c3:48:18:40:2f:31:1f:56: f0:37:d5:d4:c7:62:22:6a:06:18:88:79:cf:29:f2: 0c:12:5d:3f:83:b4:71:3f:ed:43:94:54:46:28:e2: ec:af:12:bf:b2:d4:82:52:a8:8a:56:09:4d:f8:4a: e3:81:fc:08:4f:35:2b:5d:02:db:e7:2f:a6:69:c5: 39:e1:2e:36:16:84:0b:c2:15:e5:57:04:cb:d9:55: d6:b7:27:69:e3:e9:09:2d:e7:76:00:9a:61:fe:c8: 3c:e5:84:20:0d:47:00:b5:9f:95:93:e3:1c:97:85: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:90:8B:3A:9F:3E:59:98:04:5D:A0:CA:4E:2E:52:9D:CC:E1:BE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:4c:5a:c9:a3:ef:5e:a6:7f:82:e0:a1:7b:bd:1e:ff:85: d6:45:02:61:2d:76:83:5d:d4:49:6b:5a:ca:10:53:83:91:dd: 93:34:e4:b6:9e:c5:ef:3d:69:64:2a:cc:d9:a5:9a:b4:f2:ce: d7:85:a9:21:55:03:c9:fe:1e:9c:ea:91:9f:cb:05:e9:e3:8c: 63:5f:c8:75:f0:36:6d:16:9b:a9:00:d0:f0:a5:96:a2:32:64: bc:13:e0:73:52:40:a0:3b:d9:38:29:3e:95:af:e4:3c:be:18: d9:9f:4e:f4:e1:4f:74:a7:c1:43:fe:5b:a0:48:1b:3b:0a:43: 3a:6b:21:a1:93:d6:2c:08:38:65:1b:cb:98:d3:8f:c9:33:40: 7b:e4:de:3a:3b:f5:d7:ea:b8:b9:d7:67:47:c0:82:25:a8:59: cc:48:81:6f:50:b6:c3:26:d0:0f:bb:e0:5d:9f:d2:1c:07:cd: a3:c3:9b:26:20:26:9c:03:4c:99:3e:d1:be:95:f8:ec:2c:f9: 3c:79:48:a3:6c:f2:0f:35:6a:c4:0f:61:c9:95:3d:ed:27:74: 5e:df:4c:48:28:2d:ae:46:b6:89:92:34:5c:45:d1:83:98:85: d1:bd:ca:0e:da:35:5b:89:4a:76:cd:28:67:a8:d6:80:70:24: ee:68:d9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduHJQaNZZuUqjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2I4YTVkMzEtZTcyOC00NzRlLTgxYjMtOTM0YTRhZDlmODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFIxgT/2YSt5qoxKRtlYrUTyY0sKHbHf37gm IsuZ9tk11tC1sFu4PkLd7RYbVZhUNdV4rVPEX3MElPiuQsiCoQd+Eowi9Q4b5O4W 2mtS7Y22OIxy4jCJJzG9Gp0f+NW9mf1bb/NfEHesIwnd2ugD96wcCMgZuzgavozj 3KrwLhwGVK5d58QiUw2cOOCZw0gYQC8xH1bwN9XUx2IiagYYiHnPKfIMEl0/g7Rx P+1DlFRGKOLsrxK/stSCUqiKVglN+ErjgfwITzUrXQLb5y+macU54S42FoQLwhXl VwTL2VXWtydp4+kJLed2AJph/sg85YQgDUcAtZ+Vk+Mcl4XChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuQizqfPlmYBF2gyk4uUp3M4b5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOWU3ZTA1N2EtZDA3Zi0z NTFkLWIyODEtYTJjNmNmNzEzYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHUTFrJo+9epn+C4KF7vR7/hdZFAmEtdoNd1ElrWsoQU4OR3ZM05Lae xe89aWQqzNmlmrTyzteFqSFVA8n+HpzqkZ/LBenjjGNfyHXwNm0Wm6kA0PCllqIy ZLwT4HNSQKA72TgpPpWv5Dy+GNmfTvThT3SnwUP+W6BIGzsKQzprIaGT1iwIOGUb y5jTj8kzQHvk3jo79dfquLnXZ0fAgiWoWcxIgW9QtsMm0A+74F2f0hwHzaPDmyYg JpwDTJk+0b6V+Ows+Tx5SKNs8g81asQPYcmVPe0ndF7fTEgoLa5GtomSNFxF0YOY hdG9yg7aNVuJSnbNKGeo1oBwJO5o2YU= -----END CERTIFICATE-----Generated at Sun Sep 27 05:47:14 2026 by rpki-client