$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa File: f5f4a6f1-995d-3517-a463-04c47c4433da.roa (raw, json) Hash identifier: BXWVqKdAVnDixTzTG2imVUqJVa1tBSJu5gipy1hcxyY= Subject key identifier: C2:38:A3:C3:46:03:0C:8D:54:4A:C6:8A:FE:E2:E7:7D:AC:F3:8D:52 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9E500B5E86B0B10D69F44800 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29802 IP address blocks: 23.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0b:5e:86:b0:b1:0d:69:f4:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=92435739-9fb4-441d-9cfe-86a5d1c360dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:c6:77:27:a1:42:b3:1d:8c:b9:37:8e:7d: f5:62:70:21:ff:b7:a5:22:bc:6e:59:6b:27:6b:a4: 51:e9:d5:2e:e1:8c:ee:64:f5:52:9a:66:29:21:e5: 96:d7:1f:68:73:99:d8:2d:1c:19:42:41:5c:7e:fe: 6e:c1:0d:de:af:29:b3:74:bc:68:69:dc:0e:88:8a: 2b:35:aa:cf:d5:a5:60:1b:df:a3:67:4f:df:e5:59: 76:d1:36:51:2b:c4:78:1a:46:19:4e:44:b3:0e:2b: f8:73:25:f7:e3:76:af:30:e6:09:10:5d:c1:26:9d: 1a:cb:04:c7:74:bd:89:73:70:de:a3:5a:0a:e9:0f: 6e:e2:6b:14:3e:63:38:76:26:5d:7a:b4:0c:0d:47: 8e:a9:65:7e:3a:61:0f:68:1d:71:95:6a:7f:75:c8: 80:85:35:fb:84:90:10:c7:69:44:2a:5f:01:4f:e5: 83:74:9b:9e:eb:82:1b:19:96:b5:01:e9:ff:d2:e9: 0c:42:46:05:3d:06:5f:5a:31:63:e8:24:7d:02:1e: 7b:5b:0c:3a:9b:bb:8f:06:6b:f7:81:01:58:75:d4: 3f:02:49:dd:f2:01:91:0d:9a:63:1a:c1:f5:60:cf: de:b8:9f:b5:27:d7:a4:8a:a8:f9:4e:2c:69:60:ac: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:A3:C3:46:03:0C:8D:54:4A:C6:8A:FE:E2:E7:7D:AC:F3:8D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b2:90:3c:7f:d8:d6:83:c8:61:35:0e:f8:d3:00:17:63:96: c9:4f:86:bb:23:43:7c:59:1c:f9:59:ec:9e:2d:75:4a:78:e9: d6:87:36:28:23:c4:a0:5c:cd:77:2c:50:3c:57:c5:fd:a8:b3: 83:62:72:8b:4d:f7:91:77:21:a3:29:c3:08:ac:88:23:3b:45: a4:7e:82:c4:c4:ef:c2:ca:4a:19:e0:83:f5:03:c9:09:b0:56: ca:49:c6:0b:d0:53:1d:d3:a9:4a:75:08:4c:8f:bd:28:10:f0: 87:3f:62:8c:aa:32:07:70:c1:e6:54:7f:17:2c:ea:c9:50:75: 88:ed:43:05:60:59:f2:60:b0:05:cd:3c:30:cb:58:2f:3b:0e: 9a:b2:52:3f:3d:9c:cf:77:7e:7d:20:9f:3c:85:6d:b1:ec:5c: 1c:65:22:cd:ec:8b:04:59:85:f1:9e:f8:4c:e9:ca:b7:b9:01: d7:06:54:2d:30:10:50:49:0a:dd:6f:f8:02:60:91:e0:00:7b: 02:d6:41:70:34:c2:f6:d1:a1:f1:07:43:fb:41:be:16:91:cd: 63:02:aa:66:c1:ed:20:a5:1d:4d:1f:e5:ee:47:78:31:d3:0e: ac:66:20:35:39:55:f2:86:3f:d4:07:b4:5d:9d:24:c2:ab:f7: 02:ba:98:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAtehrCxDWn0SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTI0MzU3MzktOWZiNC00NDFkLTljZmUtODZhNWQxYzM2MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7zGdyehQrMdjLk3jn31YnAh/7elIrxuWWsn a6RR6dUu4YzuZPVSmmYpIeWW1x9oc5nYLRwZQkFcfv5uwQ3erymzdLxoadwOiIor NarP1aVgG9+jZ0/f5Vl20TZRK8R4GkYZTkSzDiv4cyX343avMOYJEF3BJp0aywTH dL2Jc3Deo1oK6Q9u4msUPmM4diZderQMDUeOqWV+OmEPaB1xlWp/dciAhTX7hJAQ x2lEKl8BT+WDdJue64IbGZa1Aen/0ukMQkYFPQZfWjFj6CR9Ah57Www6m7uPBmv3 gQFYddQ/Aknd8gGRDZpjGsH1YM/euJ+1J9ekiqj5TixpYKz+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI4o8NGAwyNVErGiv7i532s841SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjVmNGE2ZjEtOTk1ZC0z NTE3LWE0NjMtMDRjNDdjNDQzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGF2+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6ykDx/2NaDyGE1DvjTABdjlslPhrsjQ3xZHPlZ7J4tdUp46daHNigj xKBczXcsUDxXxf2os4NicotN95F3IaMpwwisiCM7RaR+gsTE78LKShngg/UDyQmw VspJxgvQUx3TqUp1CEyPvSgQ8Ic/YoyqMgdwweZUfxcs6slQdYjtQwVgWfJgsAXN PDDLWC87DpqyUj89nM93fn0gnzyFbbHsXBxlIs3siwRZhfGe+Ezpyre5AdcGVC0w EFBJCt1v+AJgkeAAewLWQXA0wvbRofEHQ/tBvhaRzWMCqmbB7SClHU0f5e5HeDHT DqxmIDU5VfKGP9QHtF2dJMKr9wK6mP8= -----END CERTIFICATE-----Generated at Wed May 13 11:58:16 2026 by rpki-client