$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa File: cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa (raw, json) Hash identifier: XGhAdD5t/24PD7ttKDPhVqCrRYCJm1owLhKN7GFac8A= Subject key identifier: 15:D4:B7:53:3D:AB:CC:ED:AA:56:A6:0F:1B:CF:16:CF:DF:54:92:FB Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9FB56B88033A50FC4EBD5380 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 54540 IP address blocks: 144.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6b:88:03:3a:50:fc:4e:bd:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=5645d24a-2826-49b2-b7f0-750927a59ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:c0:c9:47:b6:ba:d7:33:87:12:e7:29:ac: a8:48:82:76:52:f9:79:0a:80:cd:45:f1:4f:34:52: 5a:30:4b:77:e7:be:c9:ce:10:64:45:87:86:b5:d6: 7f:dd:05:3b:82:00:97:e7:90:f9:8a:36:c0:62:61: e9:d7:66:bb:64:a6:91:a4:0d:53:4e:05:a1:c2:70: d6:81:b8:73:a9:0e:70:08:dc:29:64:ce:f2:22:42: 02:54:c4:08:eb:01:be:ec:b8:97:99:ec:91:2b:08: f3:d3:bc:cb:86:41:be:e5:3a:5d:ca:e6:f9:a7:f6: 75:dd:47:55:d7:26:71:56:40:4d:30:1d:ed:12:7c: e3:77:ab:9b:d3:ac:38:61:bf:18:4f:c2:22:37:2d: c4:ff:68:d7:14:c4:c6:d9:da:71:d2:45:f3:3a:c3: b7:32:76:62:b7:12:2f:06:83:df:e7:eb:58:92:7e: 10:29:d5:10:2a:a2:a7:f3:37:77:36:a2:f2:6b:b4: d4:30:b9:cd:1b:29:76:7a:b2:df:72:aa:02:9a:86: 3e:7b:df:4b:79:4f:b1:7f:bc:6f:2c:38:af:6f:ea: ee:b0:e0:f2:fd:8c:a0:ab:1b:94:7e:9a:3e:60:af: 5d:11:14:19:fb:fd:cb:df:51:ea:f4:b9:c1:ed:ae: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:B7:53:3D:AB:CC:ED:AA:56:A6:0F:1B:CF:16:CF:DF:54:92:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:91:2e:65:fd:21:3c:ce:80:5b:84:a2:38:78:c8:c8:05:f5: d8:67:66:f7:d2:45:71:f9:37:56:0a:97:49:27:fa:5d:70:05: 21:cd:59:77:4a:ef:08:a1:b9:24:dc:cd:b3:1c:d5:8a:67:a3: e3:9c:be:d7:eb:0f:bf:be:47:3d:c7:f7:60:59:27:e2:03:b2: 08:ce:55:23:1c:ec:64:66:38:dc:25:bc:9f:54:3e:bf:10:44: bb:bc:cf:27:6b:fb:ec:48:5a:cf:76:04:c7:5e:f4:13:63:fc: 1d:b8:8e:9d:65:03:fb:9f:ab:32:74:16:21:46:26:f0:df:b5: c6:78:da:90:d5:f9:46:d9:fb:01:94:f5:e6:80:d3:7d:03:32: df:d1:3f:8e:0c:33:98:8c:e1:74:f7:9d:a4:62:df:ae:5c:20: d9:a7:d8:bd:92:2c:2f:51:07:55:0b:68:66:fe:39:4a:d2:33: b2:d0:6c:03:68:84:78:41:db:10:46:e4:f0:b9:07:07:53:e9: 05:ab:4a:57:32:d6:30:a4:3e:b4:a0:41:56:a4:01:5d:e3:c7: 3d:c5:2a:80:da:39:8f:41:44:c9:1e:a0:ff:42:aa:1a:26:b3: 63:7a:2b:23:1c:49:a4:32:f0:e9:0a:93:fd:7a:ce:60:20:72: 35:2a:50:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWuIAzpQ/E69U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NTY0NWQyNGEtMjgyNi00OWIyLWI3ZjAtNzUwOTI3YTU5ZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEbAyUe2utczhxLnKayoSIJ2Uvl5CoDNRfFP NFJaMEt3577JzhBkRYeGtdZ/3QU7ggCX55D5ijbAYmHp12a7ZKaRpA1TTgWhwnDW gbhzqQ5wCNwpZM7yIkICVMQI6wG+7LiXmeyRKwjz07zLhkG+5Tpdyub5p/Z13UdV 1yZxVkBNMB3tEnzjd6ub06w4Yb8YT8IiNy3E/2jXFMTG2dpx0kXzOsO3MnZitxIv BoPf5+tYkn4QKdUQKqKn8zd3NqLya7TUMLnNGyl2erLfcqoCmoY+e99LeU+xf7xv LDivb+rusODy/YygqxuUfpo+YK9dERQZ+/3L31Hq9LnB7a5OXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXUt1M9q8ztqlamDxvPFs/fVJL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2RhMGZhNWUtNmQ1ZC0z NzY4LWEzZGEtMjhjM2U3Yjk0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6RLmX9ITzOgFuEojh4yMgF9dhnZvfSRXH5N1YKl0kn+l1wBSHNWXdK 7wihuSTczbMc1Ypno+OcvtfrD7++Rz3H92BZJ+IDsgjOVSMc7GRmONwlvJ9UPr8Q RLu8zydr++xIWs92BMde9BNj/B24jp1lA/ufqzJ0FiFGJvDftcZ42pDV+UbZ+wGU 9eaA030DMt/RP44MM5iM4XT3naRi365cINmn2L2SLC9RB1ULaGb+OUrSM7LQbANo hHhB2xBG5PC5BwdT6QWrSlcy1jCkPrSgQVakAV3jxz3FKoDaOY9BRMkeoP9Cqhom s2N6KyMcSaQy8OkKk/16zmAgcjUqUJs= -----END CERTIFICATE-----Generated at Wed May 13 08:44:13 2026 by rpki-client