$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa File: aaf21659-8159-32b2-b827-a6622e0a9495.roa (raw, json) Hash identifier: WXrP321Y2ue1+PRBp4sbXJi2y16t3sTg5EIBDipsXwc= Subject key identifier: 85:2E:3F:72:62:50:2A:80:53:81:D3:7D:C5:B5:07:86:BA:BD:73:05 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F497314555A372CD99F1F2600 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 61317 IP address blocks: 96.31.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:14:55:5a:37:2c:d9:9f:1f:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=abd350de-46d2-494f-93e6-0d9c26b26316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:0a:11:3a:4c:0f:62:57:1c:3c:5f:fe:80: 4c:42:4c:78:0a:19:8d:b7:38:83:80:5e:a4:33:50: 38:99:23:f5:47:af:1c:21:87:33:30:47:92:10:8f: 43:c1:fe:70:13:70:c9:f9:34:6c:a2:bd:7a:a6:e0: ba:c4:32:46:77:58:ca:c9:5f:07:f4:9f:54:2f:1e: 11:5e:81:20:e0:f1:85:3b:51:69:b6:61:4f:04:f8: 7c:2f:49:61:9d:a4:a3:a2:69:0c:f5:33:77:ad:8a: 4b:ca:69:cb:f8:f5:6d:ba:c7:df:c0:54:e4:79:19: fa:c3:6e:97:b2:8c:af:88:f7:07:d8:f6:92:f8:0a: 73:74:d5:75:2f:17:d6:be:d1:57:3f:97:31:0f:07: b9:98:7f:b3:d5:96:39:f8:93:36:33:0e:0d:10:f8: 31:35:90:a4:93:b3:a2:85:78:d3:a8:b0:19:c5:cf: 1f:fa:f1:d5:cd:e1:37:65:7c:38:68:aa:a6:12:d7: 94:a8:d0:ae:2b:a7:15:eb:b3:24:0f:36:48:68:51: 13:96:7c:00:53:47:38:45:c0:b2:27:15:3a:33:70: ff:b1:15:85:55:f6:20:25:ae:eb:cf:0a:85:d0:35: 62:e2:2e:49:70:97:15:eb:1a:fe:cb:14:e5:af:e0: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:3F:72:62:50:2A:80:53:81:D3:7D:C5:B5:07:86:BA:BD:73:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/aaf21659-8159-32b2-b827-a6622e0a9495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 96.31.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9a:18:1d:80:a7:59:e0:0a:03:11:3a:a3:88:87:2e:f6:42: 1b:f7:ba:5e:3e:69:46:e5:4b:27:b3:40:85:ad:da:59:49:0a: c9:63:a7:e7:21:30:e3:99:22:c0:54:f5:5f:c6:e7:fe:88:60: bc:d3:4a:ac:b8:0f:7f:e0:cd:ba:4e:8a:40:af:52:99:31:e3: 2e:9e:d7:eb:9b:06:cf:df:6e:59:87:3c:a4:cc:48:29:99:c3: 4b:44:9a:de:39:d4:a7:50:1d:53:3c:d5:ab:d5:43:22:da:8a: b9:60:c5:ad:05:e5:6b:29:d2:d2:8f:82:62:c6:34:50:58:37: 90:56:e8:2e:69:6f:a6:a6:5e:e2:26:e6:ca:14:33:68:3f:c9: 2c:41:22:e7:4e:5f:66:ef:8a:e0:fb:28:32:12:97:ee:b9:c6: 0e:02:f6:7c:6b:da:13:69:cc:7a:9b:d2:91:86:75:b2:40:fd: 52:9d:f9:5d:e3:ba:6e:a2:b6:39:5a:78:e1:f9:86:28:8c:08: dc:be:68:b6:60:6e:8b:ac:f8:dc:49:a4:6f:58:04:80:9c:8f: 34:5d:31:47:ea:d7:8e:3e:2c:1b:8e:0c:4a:95:25:b5:9f:24: 4f:d0:bd:88:b3:fe:17:b1:ed:c2:71:ff:e1:8f:22:5a:93:44: 2a:02:5a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxRVWjcs2Z8fJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWJkMzUwZGUtNDZkMi00OTRmLTkzZTYtMGQ5YzI2YjI2MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwMKETpMD2JXHDxf/oBMQkx4ChmNtziDgF6k M1A4mSP1R68cIYczMEeSEI9Dwf5wE3DJ+TRsor16puC6xDJGd1jKyV8H9J9ULx4R XoEg4PGFO1FptmFPBPh8L0lhnaSjomkM9TN3rYpLymnL+PVtusffwFTkeRn6w26X soyviPcH2PaS+ApzdNV1LxfWvtFXP5cxDwe5mH+z1ZY5+JM2Mw4NEPgxNZCkk7Oi hXjTqLAZxc8f+vHVzeE3ZXw4aKqmEteUqNCuK6cV67MkDzZIaFETlnwAU0c4RcCy JxU6M3D/sRWFVfYgJa7rzwqF0DVi4i5JcJcV6xr+yxTlr+CqVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUuP3JiUCqAU4HTfcW1B4a6vXMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYWFmMjE2NTktODE1OS0z MmIyLWI4MjctYTY2MjJlMGE5NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYB9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSaGB2Ap1ngCgMROqOIhy72Qhv3ul4+aUblSyezQIWt2llJCsljp+ch MOOZIsBU9V/G5/6IYLzTSqy4D3/gzbpOikCvUpkx4y6e1+ubBs/fblmHPKTMSCmZ w0tEmt451KdQHVM81avVQyLairlgxa0F5Wsp0tKPgmLGNFBYN5BW6C5pb6amXuIm 5soUM2g/ySxBIudOX2bviuD7KDISl+65xg4C9nxr2hNpzHqb0pGGdbJA/VKd+V3j um6itjlaeOH5hiiMCNy+aLZgbous+NxJpG9YBICcjzRdMUfq144+LBuODEqVJbWf JE/QvYiz/hex7cJx/+GPIlqTRCoCWtU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:21:03 2026 by rpki-client