$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: BMoy6YMJegPi1hp+RMrOGJ9dJIAFpVDbjz4naJ55D5c= Subject key identifier: 41:44:EA:ED:BA:64:6E:31:93:59:47:CC:42:39:C7:3E:E5:59:94:CB Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584E815F8CF2EB311BC4BF602700 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:8c:f2:eb:31:1b:c4:bf:60:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=1d9e261c-d3e5-4520-845d-a3d607c79a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:f2:e1:bd:81:fe:c9:4a:a8:91:aa:6f:f8: d7:9c:bb:19:17:8f:79:ae:df:41:ab:86:a4:02:94: 73:c7:b2:c7:e5:e2:e3:cf:bc:b8:c9:7e:5f:34:1c: 72:db:e9:12:1c:03:c6:86:40:4f:a3:33:b1:10:3e: c4:55:70:e3:2e:96:a0:ce:5a:48:da:36:ea:b8:a3: 20:d9:ea:2c:19:85:33:61:cc:ea:b0:ac:6d:89:45: 99:94:47:ce:77:bc:b8:15:81:f3:d1:87:bf:1c:c7: 8f:18:68:62:d4:a9:c2:22:be:9f:24:28:f0:8e:25: 51:f2:bf:04:3f:23:4d:f2:44:7c:58:4d:d4:8e:fb: 2e:bc:ac:e1:64:cd:5c:c6:a9:3d:41:7c:9f:11:c8: 32:4f:7a:81:2b:f5:67:f9:6d:5c:61:22:c7:2f:c8: a1:83:3a:b1:5b:13:bb:dc:14:89:18:7f:c1:a8:ac: fb:4e:50:79:25:c6:cd:66:4d:6c:21:10:4d:36:64: 8b:0b:c9:08:01:a8:18:a4:5d:74:03:37:8d:32:9c: 04:81:c1:19:9e:19:7e:a2:04:f2:89:fc:b3:1d:f5: 0b:ee:65:90:9c:d4:05:0e:89:34:16:18:32:c2:1b: 45:84:7e:88:fa:48:81:0f:b8:ca:50:c0:b2:21:83: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:44:EA:ED:BA:64:6E:31:93:59:47:CC:42:39:C7:3E:E5:59:94:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f8:80:1c:9f:cc:e4:4a:2e:9b:33:4c:bf:69:2f:a5:16:b4: c9:b3:6e:e1:5f:97:23:c4:48:7c:94:2c:a6:0a:a7:c7:cb:2c: 2b:a3:4d:51:62:92:38:be:ca:f2:83:85:71:10:53:61:86:2e: b6:d9:47:1d:27:97:68:8c:60:79:2f:0c:9c:a7:5d:dc:47:df: 86:8b:b6:ca:d1:27:a1:4f:d7:97:0d:a3:ce:72:e3:6f:8f:7a: f1:e3:e9:58:74:33:c0:f4:57:36:a6:d8:ee:cc:b8:d5:d7:75: ed:56:17:73:4e:31:97:7f:7b:5f:57:16:5d:86:cf:83:b4:bb: 80:b2:2f:8e:36:d9:b5:7a:76:24:57:01:ae:10:7f:e0:c0:61: fd:c0:a5:bc:1b:09:11:c5:f4:77:ba:ef:f2:b0:20:c3:4a:a3: 95:43:34:6b:a8:4a:09:3c:d3:14:b4:f4:9f:e2:27:5d:a2:c0: 53:74:23:64:30:9d:41:7b:32:d5:c4:59:9f:e2:f9:61:2e:02: f2:0a:bd:b0:13:b4:f7:18:44:89:3b:47:e9:bd:ff:39:30:09: d3:40:d0:74:6f:b4:9b:71:f2:86:c4:ce:ac:f2:d6:5b:3d:29: 57:88:fc:c9:bd:d7:8b:ac:c6:06:a5:01:8f:54:d9:11:5c:3a: 51:20:bf:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX4zy6zEbxL9gJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MWQ5ZTI2MWMtZDNlNS00NTIwLTg0NWQtYTNkNjA3Yzc5YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX3y4b2B/slKqJGqb/jXnLsZF495rt9Bq4ak ApRzx7LH5eLjz7y4yX5fNBxy2+kSHAPGhkBPozOxED7EVXDjLpagzlpI2jbquKMg 2eosGYUzYczqsKxtiUWZlEfOd7y4FYHz0Ye/HMePGGhi1KnCIr6fJCjwjiVR8r8E PyNN8kR8WE3UjvsuvKzhZM1cxqk9QXyfEcgyT3qBK/Vn+W1cYSLHL8ihgzqxWxO7 3BSJGH/BqKz7TlB5JcbNZk1sIRBNNmSLC8kIAagYpF10AzeNMpwEgcEZnhl+ogTy ifyzHfUL7mWQnNQFDok0FhgywhtFhH6I+kiBD7jKUMCyIYPCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFE6u26ZG4xk1lHzEI5xz7lWZTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/4gByfzORKLpszTL9pL6UWtMmzbuFflyPESHyULKYKp8fLLCujTVFi kji+yvKDhXEQU2GGLrbZRx0nl2iMYHkvDJynXdxH34aLtsrRJ6FP15cNo85y42+P evHj6Vh0M8D0Vzam2O7MuNXXde1WF3NOMZd/e19XFl2Gz4O0u4CyL4422bV6diRX Aa4Qf+DAYf3ApbwbCRHF9He67/KwIMNKo5VDNGuoSgk80xS09J/iJ12iwFN0I2Qw nUF7MtXEWZ/i+WEuAvIKvbATtPcYRIk7R+m9/zkwCdNA0HRvtJtx8obEzqzy1ls9 KVeI/Mm914usxgalAY9U2RFcOlEgv9A= -----END CERTIFICATE-----Generated at Fri Jul 24 02:10:01 2026 by rpki-client