$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d061227c-68f7-3356-a9a0-420f983a08ad.roa File: d061227c-68f7-3356-a9a0-420f983a08ad.roa (raw, json) Hash identifier: Jr0obgSb5mdRVyDGt5yHi0MFnxblucwnY29wMqniQNs= Subject key identifier: 4B:84:FC:1E:8E:22:B2:9D:38:5D:5B:18:D8:E8:AD:AE:5D:C6:31:EF Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F0D6CD8915320CBDED586C300 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d061227c-68f7-3356-a9a0-420f983a08ad.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 40244 IP address blocks: 199.193.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d8:91:53:20:cb:de:d5:86:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=35c3b3f0-77b7-4405-8918-3b7c7d7663b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:8f:56:12:06:b9:f8:02:d1:24:b8:8a:42: 09:67:ff:9e:b0:45:c9:fe:01:4e:2e:b6:74:ed:08: bc:85:71:9b:2a:57:d3:fb:51:9f:2b:47:07:51:f2: 15:f9:ee:78:4a:69:db:2f:10:ce:8e:b1:27:ca:ec: 2b:6c:9f:f2:b4:c8:22:25:f0:cc:3e:80:e7:78:60: ae:7c:b7:08:23:ae:92:b7:66:dd:33:74:fd:53:68: 58:c9:40:33:d7:a3:bd:1e:7b:23:73:89:1a:2a:32: df:e3:27:aa:3e:fb:ca:8b:58:d3:64:32:7f:1a:fb: 84:1f:f5:cb:70:94:59:2b:da:e7:be:1e:0a:bd:64: cb:7c:08:86:bc:c1:42:7d:91:9d:9c:96:1f:a1:67: b0:6c:0c:76:93:1a:b3:96:b6:92:57:4f:57:bd:19: 51:19:9b:50:83:f8:09:0b:a1:94:a3:e3:f9:bb:31: e2:b9:8d:14:2e:54:fe:00:62:01:dc:ce:f3:a3:da: cc:e8:78:90:7f:60:d7:ce:76:68:1d:d2:a1:33:78: 59:8e:45:7c:1e:58:a1:b9:41:cf:4c:fe:5b:45:ae: be:75:ae:9e:28:a1:26:8d:e4:b8:8e:e1:bd:12:18: 2e:7b:f1:76:ff:b8:d4:08:4b:53:1a:79:a0:62:b9: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:84:FC:1E:8E:22:B2:9D:38:5D:5B:18:D8:E8:AD:AE:5D:C6:31:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d061227c-68f7-3356-a9a0-420f983a08ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.193.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:36:4c:0a:64:80:ed:61:51:c7:52:4d:2e:3c:48:ac:41:6e: c2:cb:4a:ba:37:15:42:89:9a:a0:f1:a0:e2:a9:a4:30:9c:33: 4c:53:42:23:ff:04:b2:fc:a8:43:02:03:36:f5:12:db:81:25: b4:c3:e3:c0:ba:4c:c1:45:24:86:a1:90:aa:3a:10:26:c5:84: 3c:31:bb:24:cd:c7:aa:66:6a:b3:b6:fa:3f:ee:cd:b8:53:45: da:73:e9:8d:18:87:20:00:25:c8:44:64:fd:6e:93:72:8d:ac: dd:d7:e4:80:2e:0c:48:9d:02:14:d3:de:b1:c3:8c:56:70:c6: 34:e6:70:2b:91:30:f1:5c:6a:2f:27:7b:65:f4:0f:d6:6f:b3: 69:f9:af:05:34:f0:26:02:2f:a6:ce:ef:79:ee:0a:99:e8:90: 56:85:f5:7d:30:3b:6c:d9:e0:b1:c1:c2:e7:49:fa:4b:a1:43: 7a:14:bd:ea:b3:68:ee:38:74:2d:9f:3c:b7:02:12:ac:7f:3a: 3c:86:3f:7f:dc:46:cc:6c:db:d9:4f:a7:de:6e:e1:e4:02:db: fc:a0:9c:f8:d8:0a:15:fc:cb:c0:15:3d:72:57:fd:af:d3:12: 04:b2:00:e3:bc:11:95:a4:87:c8:07:06:0a:e5:5f:ca:93:af: 2c:ec:30:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNiRUyDL3tWGwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MzVjM2IzZjAtNzdiNy00NDA1LTg5MTgtM2I3YzdkNzY2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSWPVhIGufgC0SS4ikIJZ/+esEXJ/gFOLrZ0 7Qi8hXGbKlfT+1GfK0cHUfIV+e54SmnbLxDOjrEnyuwrbJ/ytMgiJfDMPoDneGCu fLcII66St2bdM3T9U2hYyUAz16O9Hnsjc4kaKjLf4yeqPvvKi1jTZDJ/GvuEH/XL cJRZK9rnvh4KvWTLfAiGvMFCfZGdnJYfoWewbAx2kxqzlraSV09XvRlRGZtQg/gJ C6GUo+P5uzHiuY0ULlT+AGIB3M7zo9rM6HiQf2DXznZoHdKhM3hZjkV8HlihuUHP TP5bRa6+da6eKKEmjeS4juG9Ehgue/F2/7jUCEtTGnmgYrmPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuE/B6OIrKdOF1bGNjora5dxjHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDA2MTIyN2MtNjhmNy0z MzU2LWE5YTAtNDIwZjk4M2EwOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8FyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo2TApkgO1hUcdSTS48SKxBbsLLSro3FUKJmqDxoOKppDCcM0xTQiP/ BLL8qEMCAzb1EtuBJbTD48C6TMFFJIahkKo6ECbFhDwxuyTNx6pmarO2+j/uzbhT Rdpz6Y0YhyAAJchEZP1uk3KNrN3X5IAuDEidAhTT3rHDjFZwxjTmcCuRMPFcai8n e2X0D9Zvs2n5rwU08CYCL6bO73nuCpnokFaF9X0wO2zZ4LHBwudJ+kuhQ3oUveqz aO44dC2fPLcCEqx/OjyGP3/cRsxs29lPp95u4eQC2/ygnPjYChX8y8AVPXJX/a/T EgSyAOO8EZWkh8gHBgrlX8qTryzsMKo= -----END CERTIFICATE-----Generated at Mon Sep 28 19:41:56 2026 by rpki-client