$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa File: d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa (raw, json) Hash identifier: qcrLcWyDTtACkLGSCJbxPdJl8CWkEvX22vj+fv49zp8= Subject key identifier: D9:B5:34:02:33:97:77:D8:6B:1E:6C:08:91:71:E2:AE:F9:94:2A:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CC34732285C6D001D27C6D300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 19905 IP address blocks: 50.81.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:32:28:5c:6d:00:1d:27:c6:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=cdd0af5b-4871-47c1-8c70-f42cab1c56c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:a1:0c:45:98:60:26:fd:71:31:4f:85:e6: 1d:d6:18:6f:bc:1d:2f:87:d2:ba:ac:bf:8b:92:ae: 1f:df:59:db:2c:8e:da:7d:a7:36:d2:86:fd:77:a1: a9:f7:c5:49:31:aa:a4:db:a4:02:b9:de:c1:8c:a9: 2b:a3:36:34:a7:8b:46:3c:22:00:d3:62:bd:06:67: 59:e0:0f:5a:77:3f:b3:06:cb:31:39:0c:6b:e0:7e: bc:85:0f:61:9e:9a:a0:a9:d9:36:3b:fa:49:f8:a3: f9:1b:ec:e3:e4:7c:2c:78:6c:96:5c:36:d6:24:e5: 80:2d:fb:f4:aa:60:83:af:02:4d:66:5e:4c:3a:f9: 3e:9b:99:a2:a1:d8:3f:e8:aa:73:2f:03:03:1f:3c: 64:6d:56:bf:24:e9:ec:cd:83:28:f7:37:fd:ab:95: 64:c2:9b:52:26:a3:65:16:b1:86:87:95:e7:78:cf: 1a:0e:a4:63:d8:97:b1:37:c5:ca:56:be:83:49:ab: 6b:51:60:6c:a2:22:87:e9:ab:88:8d:08:fa:5e:34: 1b:95:30:9a:d6:44:c5:94:4b:84:b4:b0:d8:57:a0: 76:ab:54:44:47:07:ba:33:2b:3d:25:ba:db:b5:b3: 86:16:19:b6:c5:4d:26:3f:cd:55:47:02:10:1c:23: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:34:02:33:97:77:D8:6B:1E:6C:08:91:71:E2:AE:F9:94:2A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4d:c5:3a:4c:94:7e:e2:89:67:31:c2:fc:1e:ad:d4:ca:4f: e6:67:56:e0:b4:f6:7e:f3:e4:7e:a1:f6:9e:49:b3:af:6f:a6: ec:26:cf:be:38:53:05:de:d5:6c:bd:26:c1:88:e5:2e:2d:01: 96:47:03:69:48:99:89:4a:81:23:29:80:c6:c7:6d:86:8a:45: de:41:19:d0:2e:21:bb:e6:d8:d0:c0:40:40:8d:54:26:f4:20: 8b:2d:24:5b:96:34:43:ac:d4:39:24:b7:2c:ba:32:c8:fe:29: 64:64:dd:06:f1:85:31:82:cb:d4:0a:9c:d1:18:e1:43:46:2a: e3:0b:6e:f0:eb:21:ce:87:a7:00:19:00:fe:3a:7c:b0:12:c0: 48:5f:72:53:80:a8:6a:6e:5b:0e:f3:46:6d:1c:8e:2f:ea:4f: 03:48:7f:f3:c6:bc:fc:1d:3a:37:6d:7c:59:cf:a7:41:20:3d: 46:34:8d:5d:83:20:69:45:cc:ae:e5:fc:24:71:0b:de:9f:78: 34:18:d4:7d:cb:7f:c7:65:71:81:62:cc:c2:b0:e1:ec:1d:9b: b0:27:42:a5:ed:09:b0:b1:5d:55:09:2e:ee:df:82:1d:7c:4c: f5:c3:93:5b:17:31:2a:1b:b5:bd:23:55:4c:64:29:b7:89:b3: 24:6e:c7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRzIoXG0AHSfG0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2RkMGFmNWItNDg3MS00N2MxLThjNzAtZjQyY2FiMWM1NmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlChDEWYYCb9cTFPheYd1hhvvB0vh9K6rL+L kq4f31nbLI7afac20ob9d6Gp98VJMaqk26QCud7BjKkrozY0p4tGPCIA02K9BmdZ 4A9adz+zBssxOQxr4H68hQ9hnpqgqdk2O/pJ+KP5G+zj5HwseGyWXDbWJOWALfv0 qmCDrwJNZl5MOvk+m5miodg/6KpzLwMDHzxkbVa/JOnszYMo9zf9q5VkwptSJqNl FrGGh5XneM8aDqRj2JexN8XKVr6DSatrUWBsoiKH6auIjQj6XjQblTCa1kTFlEuE tLDYV6B2q1RERwe6Mys9JbrbtbOGFhm2xU0mP81VRwIQHCPtqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm1NAIzl3fYax5sCJFx4q75lCo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDlkNzE5MzctNGJmNS0z NDBiLWFkNjAtYTZjYWJkZWFiMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNNxTpMlH7iiWcxwvwerdTKT+ZnVuC09n7z5H6h9p5Js69vpuwmz744 UwXe1Wy9JsGI5S4tAZZHA2lImYlKgSMpgMbHbYaKRd5BGdAuIbvm2NDAQECNVCb0 IIstJFuWNEOs1Dkktyy6Msj+KWRk3QbxhTGCy9QKnNEY4UNGKuMLbvDrIc6HpwAZ AP46fLASwEhfclOAqGpuWw7zRm0cji/qTwNIf/PGvPwdOjdtfFnPp0EgPUY0jV2D IGlFzK7l/CRxC96feDQY1H3Lf8dlcYFizMKw4ewdm7AnQqXtCbCxXVUJLu7fgh18 TPXDk1sXMSobtb0jVUxkKbeJsyRux2M= -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:16 2026 by rpki-client