$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa File: ca20e3b8-3942-3788-9a05-d3584af53e7f.roa (raw, json) Hash identifier: LwnD9ZO8CNQlSA6DRrKQyE4uXyoAyGefqGN6F04w/9E= Subject key identifier: C4:05:DE:32:D7:33:82:8E:1D:83:C1:73:0B:10:05:BF:2B:D1:BB:F3 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9E500B4EC84D10407DBC3D40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29802 IP address blocks: 23.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0b:4e:c8:4d:10:40:7d:bc:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=ab325c31-1f3f-434c-a4b5-3699b801ace6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:62:ce:36:c4:8d:8b:d5:c7:bd:4d:fa:35: 3f:e8:14:7d:dd:3a:e4:68:ed:95:3d:26:a3:2e:80: 23:e9:5d:05:b9:2f:4c:40:00:b5:8b:0b:5d:47:c0: 6f:c1:0d:f1:69:81:55:03:80:e0:5f:80:7d:76:77: 4f:7f:e4:15:ce:c3:0d:08:d3:5d:c2:a5:05:42:61: 86:24:f9:44:f0:fc:4d:4c:dd:38:2d:98:5b:95:d2: 7c:a2:33:ac:1c:f7:c4:af:f3:8c:2f:18:e9:3e:33: 42:5f:fe:45:a1:2b:ba:dc:23:af:75:c5:2c:68:a9: f7:55:fd:62:30:de:b6:98:eb:28:6b:10:b1:ac:8d: d2:cb:de:cc:7c:16:9d:6a:09:84:57:af:6b:f0:13: 3f:48:a4:0e:d0:56:d9:17:f3:b4:90:96:99:3a:3a: 1e:e2:5a:6c:b1:0b:09:eb:b3:02:10:80:83:18:69: 49:ef:fc:9d:84:79:96:95:a6:54:8b:53:a1:b4:e0: 57:be:dc:c2:10:7d:73:d5:1b:6c:58:99:87:66:84: 25:1e:7b:ef:52:ff:61:cb:0d:d9:4f:5d:ec:c6:62: e5:d3:0e:a3:fe:3c:1b:8c:12:f1:11:4f:8e:bd:b9: 22:b9:04:9b:33:0a:fb:0e:3e:16:d5:1f:08:eb:75: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:DE:32:D7:33:82:8E:1D:83:C1:73:0B:10:05:BF:2B:D1:BB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c5:a3:87:1f:64:d3:24:92:db:1b:cb:d5:19:58:27:86:b8: 93:98:a1:3e:cc:5e:49:3b:39:c0:a1:a8:9f:00:32:03:52:7d: 10:9d:d4:4a:39:87:4a:36:ef:a2:cc:f7:52:e9:d4:e3:56:4a: c4:7a:7b:2f:09:9d:6f:c8:cd:ea:26:5b:ad:c8:62:b8:ac:ae: da:be:47:b5:de:65:6c:de:44:51:ab:07:29:73:9d:ac:4e:20: c9:7f:8f:bd:3f:41:3e:a4:10:ee:d6:4c:08:90:46:02:d8:00: eb:a6:9b:7d:03:c8:54:6d:99:05:9f:b5:b2:30:a9:bf:ca:38: 47:fb:90:42:2d:47:cb:21:e7:38:fd:64:a5:c8:f7:86:19:aa: ad:3a:a2:27:cc:f0:08:5b:b4:3a:2f:2b:02:5f:20:a4:68:10: c7:41:7d:89:3f:ff:18:7f:9f:5f:46:7c:f1:c3:72:73:da:c1: 50:27:40:de:50:78:e5:d0:25:7f:b9:a2:1f:1a:9c:cf:75:79: 03:51:89:26:25:4d:c2:e6:58:ed:81:79:f1:82:14:e4:2b:bc: 7d:cd:1a:60:1d:95:6b:9b:a2:ec:06:75:80:4a:c0:3f:cf:07: df:6d:f4:3b:45:45:8f:ab:6d:6c:7d:b3:89:a5:72:7f:5d:e7: 3e:03:1b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAtOyE0QQH28PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWIzMjVjMzEtMWYzZi00MzRjLWE0YjUtMzY5OWI4MDFhY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszpizjbEjYvVx71N+jU/6BR93TrkaO2VPSaj LoAj6V0FuS9MQAC1iwtdR8BvwQ3xaYFVA4DgX4B9dndPf+QVzsMNCNNdwqUFQmGG JPlE8PxNTN04LZhbldJ8ojOsHPfEr/OMLxjpPjNCX/5FoSu63COvdcUsaKn3Vf1i MN62mOsoaxCxrI3Sy97MfBadagmEV69r8BM/SKQO0FbZF/O0kJaZOjoe4lpssQsJ 67MCEICDGGlJ7/ydhHmWlaZUi1OhtOBXvtzCEH1z1RtsWJmHZoQlHnvvUv9hyw3Z T13sxmLl0w6j/jwbjBLxEU+OvbkiuQSbMwr7Dj4W1R8I63WP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQF3jLXM4KOHYPBcwsQBb8r0bvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2EyMGUzYjgtMzk0Mi0z Nzg4LTlhMDUtZDM1ODRhZjUzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzFo4cfZNMkktsby9UZWCeGuJOYoT7MXkk7OcChqJ8AMgNSfRCd1Eo5 h0o276LM91Lp1ONWSsR6ey8JnW/IzeomW63IYrisrtq+R7XeZWzeRFGrBylznaxO IMl/j70/QT6kEO7WTAiQRgLYAOumm30DyFRtmQWftbIwqb/KOEf7kEItR8sh5zj9 ZKXI94YZqq06oifM8AhbtDovKwJfIKRoEMdBfYk//xh/n19GfPHDcnPawVAnQN5Q eOXQJX+5oh8anM91eQNRiSYlTcLmWO2BefGCFOQrvH3NGmAdlWubouwGdYBKwD/P B99t9DtFRY+rbWx9s4mlcn9d5z4DG88= -----END CERTIFICATE-----Generated at Wed May 13 11:30:48 2026 by rpki-client