$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json) Hash identifier: kIJlrnPvpM5NLXIFDnHfAb9z0lC8/S2DWj6LWL3kpAM= Subject key identifier: 23:D4:35:30:DF:AA:16:C8:BE:C1:D6:75:1A:D4:AF:7E:36:07:D5:23 Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Certificate serial: 010D0C9F4328584F497523FAD6E1D1237141C390 Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 64227 IP address blocks: 50.20.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:23:fa:d6:e1:d1:23:71:41:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cd514e26-4b9d-4075-abf5-ef5e219b3bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:f7:e1:1b:6b:3c:f8:c1:ab:c0:b5:b6:2e: 42:49:d5:76:99:8b:3a:a4:38:e1:c6:d0:2b:fd:00: 9c:39:73:0c:df:4e:ae:57:b8:39:51:b4:da:97:c5: 03:0a:15:bb:55:42:67:5b:52:37:a8:57:ab:92:44: c7:3a:04:38:f8:8e:37:b0:f3:f9:71:68:a2:18:3d: 48:cc:4f:c3:fb:25:5d:89:d4:f4:89:78:28:e7:4c: eb:cb:61:13:d3:a7:6b:a1:17:6b:cc:2b:4d:3c:dd: f3:8b:de:55:66:d1:df:46:4b:f7:ce:50:dc:6b:9c: 5a:98:01:86:60:a7:ab:58:95:85:6f:47:0b:a6:b0: 1f:8f:31:5a:37:6c:e5:f7:5b:b3:79:61:a4:3e:0d: 84:b4:68:26:67:d6:94:ba:09:26:65:53:29:6c:f8: e0:08:00:13:88:0b:65:03:28:55:75:f0:14:f7:9f: 61:69:2f:67:b9:5e:d2:25:9d:8d:b3:84:08:ad:67: 00:69:34:62:df:e5:69:8f:7b:14:7a:5d:e3:57:fa: 85:ef:63:54:79:59:31:34:4d:3a:2d:25:32:d4:d3: 16:6c:f3:92:49:89:fb:83:67:93:2d:4b:7b:0a:dd: e1:a2:d5:25:ac:38:cf:ac:1b:ca:67:ee:3a:a5:e1: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:35:30:DF:AA:16:C8:BE:C1:D6:75:1A:D4:AF:7E:36:07:D5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl X509v3 Authority Key Identifier: keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer sbgp-ipAddrBlock: critical IPv4: 50.20.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:b6:78:cd:d1:07:a0:2b:23:2c:9b:b0:52:d4:7f:6a:64: 77:ff:0b:9e:da:24:4f:a6:a5:f4:d9:41:f7:d6:dc:6b:da:44: 7c:cb:07:53:e0:fd:3c:92:90:c8:86:a2:a3:07:27:f2:83:b0: 6b:70:34:09:1b:6b:8a:61:7c:de:98:16:98:36:15:6f:bf:e5: e7:18:e3:48:aa:c2:b6:86:2f:32:74:ab:b2:45:20:d2:28:0f: d1:93:23:c6:b6:da:3b:05:29:55:09:90:23:9d:ae:ec:4e:84: a2:91:5b:25:3f:37:1c:c3:c0:4b:5f:c8:94:07:33:9c:f5:60: 77:87:c5:d3:aa:48:f2:31:14:5f:8e:be:50:0b:ff:45:02:13: 79:d3:51:4e:e2:a6:0d:98:88:ef:e1:4a:1b:22:bd:a5:8a:27: de:52:75:1a:7f:e1:07:36:28:ba:88:8d:53:85:ec:49:97:45: ab:56:17:e2:1e:32:32:b2:62:b6:65:1c:e4:02:26:7f:c1:72: 1d:71:40:53:d4:2f:11:02:69:e4:08:35:95:68:0c:a4:d3:69: 73:4a:07:08:32:24:b4:75:15:fe:01:3a:a7:1a:31:3b:d2:8e: 2e:70:c6:bd:66:4b:41:a2:71:35:3d:91:7f:83:62:ac:fd:c5: 65:3a:93:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdSP61uHRI3FBw5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk ZjNmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Q1MTRlMjYtNGI5ZC00MDc1LWFiZjUtZWY1ZTIxOWIzYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9P34RtrPPjBq8C1ti5CSdV2mYs6pDjhxtAr /QCcOXMM306uV7g5UbTal8UDChW7VUJnW1I3qFerkkTHOgQ4+I43sPP5cWiiGD1I zE/D+yVdidT0iXgo50zry2ET06droRdrzCtNPN3zi95VZtHfRkv3zlDca5xamAGG YKerWJWFb0cLprAfjzFaN2zl91uzeWGkPg2EtGgmZ9aUugkmZVMpbPjgCAATiAtl AyhVdfAU959haS9nuV7SJZ2Ns4QIrWcAaTRi3+Vpj3sUel3jV/qF72NUeVkxNE06 LSUy1NMWbPOSSYn7g2eTLUt7Ct3hotUlrDjPrBvKZ+46peHp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPUNTDfqhbIvsHWdRrUr342B9UjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvNWFmNmMzYTQtZGU0Yy0z NTUzLTgxYzYtNjAwNDFiMGEyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2 ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIBtnjN0QegKyMsm7BS1H9qZHf/C57aJE+mpfTZQffW3GvaRHzLB1Pg /TySkMiGoqMHJ/KDsGtwNAkba4phfN6YFpg2FW+/5ecY40iqwraGLzJ0q7JFINIo D9GTI8a22jsFKVUJkCOdruxOhKKRWyU/NxzDwEtfyJQHM5z1YHeHxdOqSPIxFF+O vlAL/0UCE3nTUU7ipg2YiO/hShsivaWKJ95SdRp/4Qc2KLqIjVOF7EmXRatWF+Ie MjKyYrZlHOQCJn/Bch1xQFPULxECaeQINZVoDKTTaXNKBwgyJLR1Ff4BOqcaMTvS ji5wxr1mS0GicTU9kX+DYqz9xWU6k0o= -----END CERTIFICATE-----Generated at Fri Sep 25 19:45:26 2026 by rpki-client