$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/b0d42c08-c69f-39e4-ada5-b66a45c4f023.roa File: b0d42c08-c69f-39e4-ada5-b66a45c4f023.roa (raw, json) Hash identifier: fNhUbmpObWNn2ki/EvpBKKzHiMcMelf8QZ0PbbVjMZg= Subject key identifier: 1B:6C:9F:78:A1:1B:8C:C1:1D:89:50:3B:61:85:FA:23:39:13:58:17 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F4973ADBA16215FFBB8EAF080 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/b0d42c08-c69f-39e4-ada5-b66a45c4f023.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 94.72.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ad:ba:16:21:5f:fb:b8:ea:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7aa235d-ee94-47d6-8275-0b8e4412d271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:73:da:19:95:18:40:e4:53:64:9e:42:a2: f1:6a:83:04:7e:72:8c:f1:1d:80:1f:44:e5:99:7a: 64:71:03:fe:b9:7b:e9:48:0f:54:85:03:98:75:f2: 3c:2c:4c:f6:4b:b6:7e:00:c8:2b:82:9a:cd:ee:cb: 5a:26:ea:52:05:5a:42:26:69:82:9d:30:b5:f5:ce: 94:3f:27:79:41:f7:db:75:eb:a6:8a:36:af:29:30: 8d:75:9c:8c:53:20:df:e7:c9:e9:61:92:56:ce:1f: 72:54:50:a2:99:d5:c8:43:0a:c2:b5:db:89:a9:07: 2c:87:7a:be:13:5e:23:a0:fc:ed:22:f5:31:88:0d: fc:b0:3d:ce:5b:8e:12:fc:5b:f4:6b:45:c0:e4:e7: f8:5c:aa:19:72:f3:eb:74:b7:69:6d:05:c6:0a:80: 38:54:29:6a:22:f7:5e:8c:03:fb:2d:66:84:15:31: 36:83:8d:30:a1:bc:e0:8f:a4:f8:79:53:df:82:67: 12:5a:da:b9:4c:25:16:ce:e1:10:8d:ee:e7:9d:71: 82:dc:b4:8c:9a:ca:92:a4:a0:cb:6a:93:b3:f3:d2: 26:dc:c6:36:32:9c:f0:bc:c3:57:da:43:29:46:b5: 5f:8b:b7:06:99:6a:b4:3d:a2:7f:a9:af:f4:63:2b: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6C:9F:78:A1:1B:8C:C1:1D:89:50:3B:61:85:FA:23:39:13:58:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/b0d42c08-c69f-39e4-ada5-b66a45c4f023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 94.72.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b0:f9:05:6e:17:0f:1c:9c:a6:8c:2e:d0:28:74:4d:ae:22: 28:65:83:a0:1d:be:ce:61:fc:ea:84:4f:52:05:64:d8:c9:f8: d4:08:85:6a:c8:d2:dd:19:0b:68:f3:75:f2:d1:b6:52:58:2e: a1:58:0b:79:e9:6e:4e:4d:dc:f3:48:d1:60:8b:5f:15:c2:03: e8:1f:62:d6:e6:cb:0a:3b:cc:83:c9:e9:37:0b:47:dc:2c:8e: 0d:d7:75:39:e7:80:8c:70:f3:a5:98:71:fa:55:d0:c2:a1:06: e5:8a:a6:d4:76:2c:2c:d5:98:a3:55:40:56:1c:c3:34:db:07: 61:b4:c7:80:5c:a4:9f:e3:62:cf:bb:e4:c1:77:a9:50:aa:7d: 4f:98:41:83:27:f6:8f:e9:91:74:4f:30:d8:b9:79:f2:5d:37: 2d:2d:2f:0f:8f:19:98:5e:85:91:fa:a8:d8:b5:b4:e3:5c:6c: 52:54:5b:f8:50:01:bb:1f:ec:ce:6c:e3:8b:a2:45:09:13:d1: 0a:6d:63:a0:c8:60:17:59:89:20:6c:61:fa:4a:31:76:16:c0: e7:48:71:d5:59:7d:ac:14:eb:01:ad:ac:28:e1:0e:2b:4e:e2: e0:c0:4a:f9:c2:02:37:bf:4a:8b:51:b0:81:c1:8f:41:ba:f5: 34:20:5f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc626FiFf+7jq8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjdhYTIzNWQtZWU5NC00N2Q2LTgyNzUtMGI4ZTQ0MTJkMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirdz2hmVGEDkU2SeQqLxaoMEfnKM8R2AH0Tl mXpkcQP+uXvpSA9UhQOYdfI8LEz2S7Z+AMgrgprN7staJupSBVpCJmmCnTC19c6U Pyd5QffbdeumijavKTCNdZyMUyDf58npYZJWzh9yVFCimdXIQwrCtduJqQcsh3q+ E14joPztIvUxiA38sD3OW44S/Fv0a0XA5Of4XKoZcvPrdLdpbQXGCoA4VClqIvde jAP7LWaEFTE2g40wobzgj6T4eVPfgmcSWtq5TCUWzuEQje7nnXGC3LSMmsqSpKDL apOz89Im3MY2MpzwvMNX2kMpRrVfi7cGmWq0PaJ/qa/0Yyvq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtsn3ihG4zBHYlQO2GF+iM5E1gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYjBkNDJjMDgtYzY5Zi0z OWU0LWFkYTUtYjY2YTQ1YzRmMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXkiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSw+QVuFw8cnKaMLtAodE2uIihlg6Advs5h/OqET1IFZNjJ+NQIhWrI 0t0ZC2jzdfLRtlJYLqFYC3npbk5N3PNI0WCLXxXCA+gfYtbmywo7zIPJ6TcLR9ws jg3XdTnngIxw86WYcfpV0MKhBuWKptR2LCzVmKNVQFYcwzTbB2G0x4BcpJ/jYs+7 5MF3qVCqfU+YQYMn9o/pkXRPMNi5efJdNy0tLw+PGZhehZH6qNi1tONcbFJUW/hQ Absf7M5s44uiRQkT0QptY6DIYBdZiSBsYfpKMXYWwOdIcdVZfawU6wGtrCjhDitO 4uDASvnCAje/SotRsIHBj0G69TQgX1c= -----END CERTIFICATE-----Generated at Fri Sep 25 18:10:51 2026 by rpki-client