$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/4834e49c-8d36-38ed-a466-fda6fd8fd424.roa File: 4834e49c-8d36-38ed-a466-fda6fd8fd424.roa (raw, json) Hash identifier: jPiHzPRg5VCqh1/CAdCJLMmRwqD8bRy9/Oj3N5e+k/k= Subject key identifier: C1:6B:D0:0D:CD:F4:C0:C1:78:DE:24:BE:77:63:E1:4D:02:57:BD:8C Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584F42E280A798F3FAB427E215A0 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/4834e49c-8d36-38ed-a466-fda6fd8fd424.roa Signing time: Tue 22 Sep 2026 16:35:11 +0000 ROA not before: Tue 22 Sep 2026 16:35:11 +0000 ROA not after: Mon 14 Dec 2026 21:11:22 +0000 asID: 27338 IP address blocks: 50.21.144.0/20 maxlen: 24 2607:4a00:8000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:e2:80:a7:98:f3:fa:b4:27:e2:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Sep 22 16:35:11 2026 GMT Not After : Dec 14 21:11:22 2026 GMT Subject: CN=423797c3-fda8-4a57-ae59-8874a60b1f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:80:6b:c5:07:d5:75:85:1b:c2:44:50:3c: d3:94:02:a5:6a:15:5a:32:bc:4e:78:96:4b:25:57: b0:5a:72:51:5d:ea:2d:e9:48:ee:cc:ae:54:62:13: 77:6a:01:e7:9f:bb:60:8a:c4:ba:b7:26:3a:3a:bf: a2:c4:b4:74:13:54:db:04:a2:bf:8a:e6:f0:da:86: 97:61:fe:a7:ff:28:98:01:0b:6e:48:cd:8f:e2:a8: 55:89:44:f1:84:6f:81:52:9e:4a:9d:9f:b0:d5:f0: 8b:48:99:7c:70:7b:aa:04:da:26:bb:ad:24:a1:ca: f6:90:68:41:29:cc:d4:00:43:d0:19:2d:1a:f1:07: 30:54:23:e2:86:88:8a:ec:a0:96:7a:b4:94:70:e2: b8:de:96:d0:e1:e1:74:fb:cc:1b:04:3a:e1:56:b5: dd:9f:bb:46:2c:38:51:d8:86:aa:f9:a1:d3:3a:70: 23:ba:5d:7c:07:b5:0c:d4:a1:65:a1:eb:1a:63:8b: 82:40:51:c2:f1:d3:fc:5e:92:22:72:b1:6d:ad:15: f6:9c:a0:b0:02:7d:74:52:0c:7b:23:4f:ae:56:12: 65:fd:47:7b:d8:85:e1:76:86:60:2b:52:3f:9a:f8: 75:88:15:09:8f:0d:fe:56:47:e7:fe:51:52:05:bd: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:D0:0D:CD:F4:C0:C1:78:DE:24:BE:77:63:E1:4D:02:57:BD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/4834e49c-8d36-38ed-a466-fda6fd8fd424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 50.21.144.0/20 IPv6: 2607:4a00:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f9:25:f1:dd:c4:56:4b:6d:fe:c7:03:ed:c6:b3:82:84:af: 48:a7:8d:a9:31:05:28:5e:5e:04:7b:71:97:f2:4b:45:7e:bd: 5e:75:d0:e5:6b:af:79:9a:37:b8:64:fc:f3:79:e1:52:27:86: 80:7c:ff:4e:57:13:d8:46:b0:13:33:74:88:d8:b6:f1:15:08: 98:ac:8b:c2:f0:d5:a4:eb:3c:3a:42:82:23:84:16:34:63:bf: 57:8a:33:6f:34:b6:32:41:7a:fc:46:a7:a1:7a:05:a6:61:85: d3:40:66:de:5c:3d:d4:b5:5b:38:f5:40:bf:0c:14:92:7c:f7: 87:90:d5:2c:18:2c:0a:d6:29:55:54:0e:35:04:03:1c:83:7f: b4:65:31:dd:52:7d:88:99:b0:cf:c8:c2:99:e2:b5:09:57:c3: f0:39:bd:36:77:7c:b9:ff:a9:f1:9a:af:c8:21:c3:59:54:43: e9:9f:5d:f4:34:cc:c8:be:de:e6:50:6e:43:6e:6e:4e:32:31: 9e:52:d6:d3:4e:91:8d:68:ac:80:9d:a9:42:87:77:37:95:55: 47:4a:42:81:2a:f1:5f:10:3a:76:e9:51:a8:f0:7b:05:c3:7e: 8b:16:7d:4f:fc:47:da:55:cf:66:59:3d:17:a8:54:11:15:e7: 4a:6b:fd:0b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9C4oCnmPP6tCfiFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDkyMjE2MzUxMVoXDTI2MTIxNDIxMTEyMlowLzEtMCsGA1UEAxMk NDIzNzk3YzMtZmRhOC00YTU3LWFlNTktODg3NGE2MGIxZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggmAa8UH1XWFG8JEUDzTlAKlahVaMrxOeJZL JVewWnJRXeot6UjuzK5UYhN3agHnn7tgisS6tyY6Or+ixLR0E1TbBKK/iubw2oaX Yf6n/yiYAQtuSM2P4qhViUTxhG+BUp5KnZ+w1fCLSJl8cHuqBNomu60kocr2kGhB KczUAEPQGS0a8QcwVCPihoiK7KCWerSUcOK43pbQ4eF0+8wbBDrhVrXdn7tGLDhR 2Iaq+aHTOnAjul18B7UM1KFloesaY4uCQFHC8dP8XpIicrFtrRX2nKCwAn10Ugx7 I0+uVhJl/Ud72IXhdoZgK1I/mvh1iBUJjw3+Vkfn/lFSBb3tQQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMFr0A3N9MDBeN4kvndj4U0CV72MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvNDgzNGU0OWMtOGQzNi0z OGVkLWE0NjYtZmRhNmZkOGZkNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEMhWQMA4E AgACMAgDBgUmB0oAgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd+SXx3cRWS23+xwPtxrOChK9Ip42pMQUo Xl4Ee3GX8ktFfr1eddDla695mje4ZPzzeeFSJ4aAfP9OVxPYRrATM3SI2LbxFQiY rIvC8NWk6zw6QoIjhBY0Y79XijNvNLYyQXr8RqehegWmYYXTQGbeXD3UtVs49UC/ DBSSfPeHkNUsGCwK1ilVVA41BAMcg3+0ZTHdUn2ImbDPyMKZ4rUJV8PwOb02d3y5 /6nxmq/IIcNZVEPpn130NMzIvt7mUG5Dbm5OMjGeUtbTTpGNaKyAnalCh3c3lVVH SkKBKvFfEDp26VGo8HsFw36LFn1P/EfaVc9mWT0XqFQRFedKa/0L -----END CERTIFICATE-----Generated at Thu Sep 24 08:48:13 2026 by rpki-client