$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: Cp9oYKlsXBTd3EdJPFddwZplK/7De/YrIiAAj1le884= Subject key identifier: 92:36:CE:CB:F8:0E:FF:2F:D5:94:D5:CF:7B:B6:11:7A:92:E8:AA:B9 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584DA11AB4F94424250569502D00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b4:f9:44:24:25:05:69:50:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=21f6532b-23d8-4764-94ef-0fbb364efc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2a:e9:7e:33:c0:20:40:9a:7d:a2:54:70:b4: a5:14:4e:55:39:ce:a6:de:4f:b7:e0:73:57:f6:22: 2c:ef:c7:ff:f5:73:e4:5f:51:de:71:fc:32:51:97: fb:8c:95:e9:e5:57:cc:de:a9:a6:94:ad:0f:ae:15: 30:49:07:9e:e6:a8:b6:cc:3c:01:a5:e2:ca:1e:e0: 0e:e9:22:c0:a1:16:f5:9c:2a:88:5c:64:9d:5e:1b: 11:a5:b2:2a:9a:98:09:79:46:60:af:5c:31:35:07: 6a:c2:fd:c6:8f:3a:9e:82:d0:e0:6d:c6:de:dd:0e: ea:d7:1b:c2:3a:c1:ef:51:a1:ab:44:17:e7:63:71: 9d:12:13:b9:e3:61:c2:e1:c6:09:ce:d0:14:f7:a8: c1:b2:ae:b7:ce:55:c9:97:d3:2c:ba:5f:02:7d:b3: 05:d0:26:5b:e2:28:52:ba:d5:f1:f2:03:8a:ae:f2: 98:4f:30:c8:49:b0:a5:d4:34:60:34:6e:6d:60:78: 3f:a1:2e:f3:f2:fa:af:bd:60:01:df:fc:97:78:7b: ed:0b:b9:cb:0a:77:31:9c:79:7f:d1:71:8f:e6:8b: 75:bd:1a:2c:59:bc:dc:03:b9:ea:d9:c0:66:79:c2: b3:9b:e1:91:8d:55:74:77:95:65:cd:77:62:8e:4d: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:CE:CB:F8:0E:FF:2F:D5:94:D5:CF:7B:B6:11:7A:92:E8:AA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a0:37:5d:91:59:9c:be:0a:cf:60:f3:5d:25:5b:63:eb:23: 85:a6:4d:fe:b7:29:64:b1:23:fe:e0:f3:98:00:5a:d6:91:2f: 0b:78:11:43:e3:12:b0:97:88:b6:17:06:ac:21:2c:f9:95:5a: aa:39:d8:b7:fb:d2:7d:bd:20:70:1b:5f:e9:b9:59:3e:5a:86: fe:e8:03:a2:96:ba:65:46:7e:55:ea:5b:8a:62:74:79:3f:bf: d2:32:93:90:f2:38:fc:72:8a:58:88:c0:51:75:61:40:12:d0: 5e:47:4d:e2:9d:bd:be:71:35:2d:47:2a:e2:35:45:5e:67:59: ad:6c:c3:4d:86:a1:86:52:74:f8:f4:22:39:e7:f4:a8:52:de: 47:b7:dd:a5:75:f4:b1:76:a1:95:d3:86:ff:55:64:99:57:ef: 0a:2a:4c:bf:5a:4b:9a:fb:06:d0:70:8d:7e:d5:df:d1:91:43: ef:a8:1e:1f:20:9c:a8:cb:49:b1:f8:68:cc:83:79:c9:94:72: b2:fb:e2:34:10:3a:ba:4c:72:b7:56:76:28:f5:6e:de:1b:3c: ee:76:07:db:4b:6c:db:3c:dd:73:8f:dd:6f:09:a9:43:6e:e1: fa:69:79:8a:32:76:40:7b:d2:47:f9:d1:4f:52:d3:2e:56:6e: fd:60:02:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrT5RCQlBWlQLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MjFmNjUzMmItMjNkOC00NzY0LTk0ZWYtMGZiYjM2NGVmYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyrpfjPAIECafaJUcLSlFE5VOc6m3k+34HNX 9iIs78f/9XPkX1HecfwyUZf7jJXp5VfM3qmmlK0PrhUwSQee5qi2zDwBpeLKHuAO 6SLAoRb1nCqIXGSdXhsRpbIqmpgJeUZgr1wxNQdqwv3GjzqegtDgbcbe3Q7q1xvC OsHvUaGrRBfnY3GdEhO542HC4cYJztAU96jBsq63zlXJl9Msul8CfbMF0CZb4ihS utXx8gOKrvKYTzDISbCl1DRgNG5tYHg/oS7z8vqvvWAB3/yXeHvtC7nLCncxnHl/ 0XGP5ot1vRosWbzcA7nq2cBmecKzm+GRjVV0d5VlzXdijk1ILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI2zsv4Dv8v1ZTVz3u2EXqS6Kq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABegN12RWZy+Cs9g810lW2PrI4WmTf63KWSxI/7g85gAWtaRLwt4EUPj ErCXiLYXBqwhLPmVWqo52Lf70n29IHAbX+m5WT5ahv7oA6KWumVGflXqW4pidHk/ v9Iyk5DyOPxyiliIwFF1YUAS0F5HTeKdvb5xNS1HKuI1RV5nWa1sw02GoYZSdPj0 Ijnn9KhS3ke33aV19LF2oZXThv9VZJlX7woqTL9aS5r7BtBwjX7V39GRQ++oHh8g nKjLSbH4aMyDecmUcrL74jQQOrpMcrdWdij1bt4bPO52B9tLbNs83XOP3W8JqUNu 4fppeYoydkB70kf50U9S0y5Wbv1gArA= -----END CERTIFICATE-----Generated at Wed May 13 09:18:59 2026 by rpki-client