$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa File: aaf21659-8159-32b2-b827-a6622e0a9495.roa (raw, json) Hash identifier: WDmSbKyCmsEkFEhIz82OA3XjHqiqSX6+sHKcgV9oKW0= Subject key identifier: F3:07:F0:B7:7C:91:A8:DD:86:42:51:3B:BB:B4:D4:8F:A8:5F:97:D8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D12D798FEBE2E49FD1F7B9600 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa Signing time: Fri 06 Mar 2026 02:00:31 +0000 ROA not before: Fri 06 Mar 2026 02:00:31 +0000 ROA not after: Thu 04 Jun 2026 01:00:31 +0000 asID: 61317 IP address blocks: 96.31.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d7:98:fe:be:2e:49:fd:1f:7b:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 6 02:00:31 2026 GMT Not After : Jun 4 01:00:31 2026 GMT Subject: CN=fdddad6f-b77f-42f2-bc8a-2e2ba24e18b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7a:94:72:03:84:47:3d:e8:89:00:1d:e7:9b: 3e:27:b0:f7:1e:33:66:5e:f4:7a:7c:0a:22:64:ea: 43:37:df:fc:af:95:a7:40:74:5e:77:57:bd:c7:cb: 85:d8:68:78:56:0b:71:9e:c3:b6:d5:46:e1:64:30: 1c:95:67:3c:37:27:db:57:03:44:f3:25:49:02:79: bc:95:81:6e:31:c8:28:5a:ac:6f:f3:8a:10:5a:70: 2e:a6:35:7d:1c:ee:d0:6c:4d:a3:18:c1:27:21:ce: 48:44:7a:e5:6a:1f:c0:fa:30:0d:82:b5:26:28:f2: ce:b2:fe:e4:61:12:16:92:c5:9a:5c:26:be:53:e0: 55:b1:4a:0c:84:20:cb:b0:ce:4a:45:c9:1f:ce:40: f8:8e:b5:e5:1b:14:b6:1f:63:80:46:97:f5:74:f9: b2:80:24:da:e5:71:6d:99:b9:f8:2d:f5:68:f9:b6: 47:5b:f4:63:c8:7e:c0:e6:ad:83:a8:07:40:76:6f: 96:d3:25:82:35:52:77:fa:33:c0:68:10:d5:b3:3e: 2e:61:ab:07:9b:eb:ff:c9:2c:a6:71:c7:b9:92:40: f6:95:d9:07:09:7b:7c:8c:42:a3:a0:39:45:b7:c5: d1:eb:4c:50:99:af:26:07:4d:e6:0f:ef:98:a1:13: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:07:F0:B7:7C:91:A8:DD:86:42:51:3B:BB:B4:D4:8F:A8:5F:97:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 96.31.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:af:15:85:9b:10:e9:9c:e8:f9:77:d5:76:2b:ab:12:36:c5: 6d:73:d5:7b:17:87:d0:22:51:d6:df:e3:d5:a7:cc:ae:88:2b: a5:89:91:e7:ab:a3:18:67:c0:ad:d1:fd:27:a3:96:dd:b3:ec: e5:26:e0:e3:3c:f6:65:fe:a7:bd:d7:bc:9f:7b:24:7a:7d:1c: 3b:e3:4b:c7:d4:c9:78:30:ad:cb:ca:45:3a:74:c4:65:18:6a: 00:3d:16:4b:00:f5:03:4d:b1:4b:a5:d2:04:e3:02:9c:6c:f7: 73:9a:5a:48:dc:2a:d5:f8:e8:c0:33:2e:b3:be:35:b2:a9:03: 0d:fc:82:f2:50:bb:94:23:01:42:d6:6c:30:77:85:31:d0:0f: b5:88:15:a9:9d:f4:e5:3f:eb:f8:60:8b:05:87:f7:87:2d:70: 58:87:7e:98:2f:91:80:bf:09:f3:04:21:ea:02:13:36:45:52: 32:b7:ee:19:51:ca:31:a4:d7:5c:f5:13:f3:0b:f7:29:54:7d: eb:32:8f:e9:d4:dc:c8:a5:b0:36:40:5a:6b:86:05:d6:49:cd: b6:51:43:2a:bd:d4:9e:8f:d1:59:1a:d5:73:86:7e:24:5e:6a: ed:12:2f:af:11:2e:fd:c9:12:68:56:51:c0:9c:a6:85:39:cd: dc:77:31:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0S15j+vi5J/R97lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDMwNjAyMDAzMVoXDTI2MDYwNDAxMDAzMVowLzEtMCsGA1UEAxMk ZmRkZGFkNmYtYjc3Zi00MmYyLWJjOGEtMmUyYmEyNGUxOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HqUcgOERz3oiQAd55s+J7D3HjNmXvR6fAoi ZOpDN9/8r5WnQHRed1e9x8uF2Gh4VgtxnsO21UbhZDAclWc8NyfbVwNE8yVJAnm8 lYFuMcgoWqxv84oQWnAupjV9HO7QbE2jGMEnIc5IRHrlah/A+jANgrUmKPLOsv7k YRIWksWaXCa+U+BVsUoMhCDLsM5KRckfzkD4jrXlGxS2H2OARpf1dPmygCTa5XFt mbn4LfVo+bZHW/RjyH7A5q2DqAdAdm+W0yWCNVJ3+jPAaBDVsz4uYasHm+v/ySym cce5kkD2ldkHCXt8jEKjoDlFt8XR60xQma8mB03mD++YoRPIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMH8Ld8kajdhkJRO7u01I+oX5fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYWFmMjE2NTktODE1OS0z MmIyLWI4MjctYTY2MjJlMGE5NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYB9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCvFYWbEOmc6Pl31XYrqxI2xW1z1XsXh9AiUdbf49WnzK6IK6WJkeer oxhnwK3R/Sejlt2z7OUm4OM89mX+p73XvJ97JHp9HDvjS8fUyXgwrcvKRTp0xGUY agA9FksA9QNNsUul0gTjApxs93OaWkjcKtX46MAzLrO+NbKpAw38gvJQu5QjAULW bDB3hTHQD7WIFamd9OU/6/hgiwWH94ctcFiHfpgvkYC/CfMEIeoCEzZFUjK37hlR yjGk11z1E/ML9ylUfesyj+nU3MilsDZAWmuGBdZJzbZRQyq91J6P0Vka1XOGfiRe au0SL68RLv3JEmhWUcCcpoU5zdx3MR4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:56 2026 by rpki-client