$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json) Hash identifier: 2vWB0lDEWrSw4vjc9dHLag+Bh1hZeMbYcebLHOmNDMc= Subject key identifier: DF:56:8A:0D:AB:02:20:E4:67:77:0E:48:5E:F8:95:0B:66:A5:F0:E5 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F20F7ABB86AD6021D04B5D9C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 66.96.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ab:b8:6a:d6:02:1d:04:b5:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=17f1cbd9-9990-45ec-8659-56390ee6861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:05:09:64:f7:3b:8b:b9:e5:c5:ca:68:9d: f1:15:2e:2b:ce:ee:f7:9d:5c:6f:99:d8:a1:5a:a3: 28:ef:c4:5b:6b:47:28:db:a2:06:f1:2b:a1:18:7b: 03:2e:8e:75:a4:7a:18:6a:c4:ef:c1:f4:31:9f:7f: 28:06:5e:96:d0:8b:69:12:ff:bb:a7:b3:fc:f3:80: f3:17:10:c9:99:75:f2:da:7d:1e:a4:c5:f3:e8:83: aa:57:87:a1:23:4f:a8:b2:7b:7b:56:85:02:73:75: f5:b0:69:a0:0e:bd:f7:f5:15:c9:3a:71:f9:b6:0d: 1a:de:e4:d1:5a:8f:55:fa:76:7e:08:bc:03:0d:97: fd:19:8d:3a:84:eb:40:8d:e7:a9:5a:db:f0:50:e5: 0e:29:2e:f3:21:5e:74:fa:8b:15:80:8c:91:7d:91: 76:77:31:c2:9a:fb:c9:36:8e:e1:2e:81:76:14:3f: 0f:d9:05:85:fa:7f:10:99:be:c9:f2:44:56:25:e0: 65:c5:14:d4:fb:5b:14:78:af:f5:b3:52:70:14:7a: 40:5e:17:84:1b:6e:5c:b1:74:3a:b3:0a:4b:72:73: 15:0d:cd:75:10:db:b8:79:a7:92:45:e9:f1:d1:52: 8d:ff:0f:8d:ae:72:ea:7f:59:50:67:58:f4:1a:4e: 98:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:56:8A:0D:AB:02:20:E4:67:77:0E:48:5E:F8:95:0B:66:A5:F0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:90:7a:68:d0:59:e2:e0:ad:32:85:79:b0:6e:5a:59:10:2b: 21:53:05:16:40:8b:8d:09:04:a5:c1:7d:e0:41:b2:a6:00:4c: 6e:b8:e1:58:00:81:12:cc:ac:12:70:cc:2d:5e:ec:68:f2:e1: a8:a5:82:41:9c:61:e6:6c:8b:2b:b4:47:bf:1e:3a:25:e1:a9: 48:20:44:9d:21:69:b1:27:39:f4:bd:9a:dd:46:22:44:01:c1: 3f:d4:34:4d:e5:2a:42:91:5e:7a:98:e3:0e:69:37:87:33:92: 6a:8b:a7:a4:96:be:fe:b2:17:ee:15:37:c3:21:0f:a4:95:bb: be:ec:86:6f:a7:69:b0:1f:45:3a:3c:d6:f8:a7:c8:3b:02:40: 70:de:e4:73:fe:00:2a:e0:c3:68:ab:d4:2e:7a:14:fa:6c:64: 1a:6d:d9:f2:41:ed:4e:c0:73:b7:69:b2:92:85:29:dc:2c:a5: 9b:7b:28:37:c5:8f:59:73:cc:48:d0:3a:bf:1b:49:b5:c6:3c: 98:e6:12:d9:ea:8f:d4:1a:5a:83:47:41:dd:5e:c3:7b:fd:7f: 3f:f7:03:ca:2e:8a:85:6d:25:d2:b1:9c:ad:44:0f:c2:af:71: d0:80:b1:1f:6b:9b:a2:e4:58:20:ca:24:68:8b:53:b8:de:14: 07:da:3a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96u4atYCHQS12cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTdmMWNiZDktOTk5MC00NWVjLTg2NTktNTYzOTBlZTY4NjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXkFCWT3O4u55cXKaJ3xFS4rzu73nVxvmdih WqMo78Rba0co26IG8SuhGHsDLo51pHoYasTvwfQxn38oBl6W0ItpEv+7p7P884Dz FxDJmXXy2n0epMXz6IOqV4ehI0+osnt7VoUCc3X1sGmgDr339RXJOnH5tg0a3uTR Wo9V+nZ+CLwDDZf9GY06hOtAjeepWtvwUOUOKS7zIV50+osVgIyRfZF2dzHCmvvJ No7hLoF2FD8P2QWF+n8Qmb7J8kRWJeBlxRTU+1sUeK/1s1JwFHpAXheEG25csXQ6 swpLcnMVDc11ENu4eaeSRenx0VKN/w+NrnLqf1lQZ1j0Gk6YiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Wig2rAiDkZ3cOSF74lQtmpfDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDExZTBhNmQtOTI2Mi0z YzMxLTgxNjYtZWJhN2UyY2IxNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqQemjQWeLgrTKFebBuWlkQKyFTBRZAi40JBKXBfeBBsqYATG644VgA gRLMrBJwzC1e7Gjy4ailgkGcYeZsiyu0R78eOiXhqUggRJ0habEnOfS9mt1GIkQB wT/UNE3lKkKRXnqY4w5pN4czkmqLp6SWvv6yF+4VN8MhD6SVu77shm+nabAfRTo8 1vinyDsCQHDe5HP+ACrgw2ir1C56FPpsZBpt2fJB7U7Ac7dpspKFKdwspZt7KDfF j1lzzEjQOr8bSbXGPJjmEtnqj9QaWoNHQd1ew3v9fz/3A8ouioVtJdKxnK1ED8Kv cdCAsR9rm6LkWCDKJGiLU7jeFAfaOtA= -----END CERTIFICATE-----Generated at Thu Sep 24 15:53:45 2026 by rpki-client