$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa File: 01549ba4-9860-36fa-802e-973645dc8779.roa (raw, json) Hash identifier: LfdhjbA6KVPYANVtK34gwA579ENGJiUSlFJ00Z47X4g= Subject key identifier: 7D:A8:7D:EE:20:53:3D:CE:38:73:10:22:22:46:CA:1F:C0:72:A0:19 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F20F7ABD049B777264A538200 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 68.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ab:d0:49:b7:77:26:4a:53:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=34ebc238-2e2e-4e66-96cf-98299a7f037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:56:c1:45:d1:ad:f9:b6:6f:af:df:51:84: b0:d0:ce:f1:6a:eb:0b:e1:ed:f3:a1:35:eb:3f:1e: ca:86:59:ed:e6:e8:53:c9:c8:50:04:90:ea:38:26: 9d:31:e0:2c:6d:6f:2b:1f:fa:72:15:8e:0f:a6:6e: 80:de:d3:90:39:6c:07:78:b6:47:1b:61:21:f5:de: 32:23:9e:7a:95:38:a2:4c:cb:27:17:37:bd:df:b7: ce:27:0a:3d:17:9f:19:08:ea:03:30:df:2b:fb:da: 7f:10:d9:60:9b:59:dc:83:e5:d8:43:5c:b7:ac:e6: 0b:1a:10:63:2f:63:38:92:de:03:3f:50:f5:36:f7: 0d:1e:00:6e:76:77:b0:91:9c:9e:f6:72:87:38:9c: dc:5a:68:59:5f:b1:a1:57:30:31:0c:f1:0c:80:21: 00:59:5d:4c:37:2b:73:4e:7d:3e:ba:79:e9:02:c5: 28:a4:d9:ac:06:a9:d1:f9:3e:d1:64:89:63:86:eb: b2:9a:d5:19:e1:7d:ce:c1:36:96:d2:6e:98:b0:5c: c6:54:a7:8d:6f:6d:7e:28:30:cf:82:98:5b:95:32: 27:7e:a2:9a:2a:be:d6:53:6e:f9:2e:02:17:f4:31: 1c:51:2a:c7:10:eb:c9:96:ef:f4:93:10:1e:af:a7: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:7D:EE:20:53:3D:CE:38:73:10:22:22:46:CA:1F:C0:72:A0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 68.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3c:1c:21:d8:d7:8a:30:a7:ea:7e:ab:43:73:89:a3:56:47: 6a:9f:75:72:e3:09:40:66:79:50:e0:36:d1:42:d4:68:03:ab: 98:f0:00:94:f2:25:fe:04:e8:1b:fb:f1:dd:6f:40:b9:2f:da: 0e:9b:78:c3:22:c6:8e:fe:fd:0c:c8:14:d6:1e:f9:8c:c0:ca: 84:a5:2b:c7:ec:37:ce:6d:3f:0e:58:99:9d:9d:3f:b3:32:7c: 82:19:3b:82:ce:08:43:a5:fb:df:b4:17:1c:22:cb:c7:72:a5: b1:1d:74:e5:01:db:a0:00:9d:11:fe:b6:8a:52:79:37:01:94: ca:1a:a3:22:42:3f:3a:80:f6:4d:04:59:56:2e:05:a2:0b:cb: 1f:f4:d2:cd:0b:32:39:62:d9:ba:38:35:03:fa:a8:e1:8d:24: b2:10:e8:47:35:f0:77:81:9d:19:fe:c9:9c:14:34:df:17:84: 23:03:b8:76:12:39:14:21:c3:a1:38:89:0a:6b:74:a6:55:2a: 96:58:87:ef:ca:7c:47:19:7c:b0:fb:e9:94:6f:9e:64:93:d8: d3:50:55:51:8d:15:ad:48:e1:92:83:fa:0b:08:51:4b:8d:f0: 09:b3:70:ab:54:e5:9c:97:7c:ec:9b:0c:b6:6e:2c:90:e0:09: db:6e:eb:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96vQSbd3JkpTggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzRlYmMyMzgtMmUyZS00ZTY2LTk2Y2YtOTgyOTlhN2YwMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJWwUXRrfm2b6/fUYSw0M7xausL4e3zoTXr Px7Khlnt5uhTychQBJDqOCadMeAsbW8rH/pyFY4Ppm6A3tOQOWwHeLZHG2Eh9d4y I556lTiiTMsnFze937fOJwo9F58ZCOoDMN8r+9p/ENlgm1ncg+XYQ1y3rOYLGhBj L2M4kt4DP1D1NvcNHgBudnewkZye9nKHOJzcWmhZX7GhVzAxDPEMgCEAWV1MNytz Tn0+unnpAsUopNmsBqnR+T7RZIljhuuymtUZ4X3OwTaW0m6YsFzGVKeNb21+KDDP gphblTInfqKaKr7WU275LgIX9DEcUSrHEOvJlu/0kxAer6cwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2ofe4gUz3OOHMQIiJGyh/AcqAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDE1NDliYTQtOTg2MC0z NmZhLTgwMmUtOTczNjQ1ZGM4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs8HCHY14owp+p+q0NziaNWR2qfdXLjCUBmeVDgNtFC1GgDq5jwAJTy Jf4E6Bv78d1vQLkv2g6beMMixo7+/QzIFNYe+YzAyoSlK8fsN85tPw5YmZ2dP7My fIIZO4LOCEOl+9+0Fxwiy8dypbEddOUB26AAnRH+topSeTcBlMoaoyJCPzqA9k0E WVYuBaILyx/00s0LMjli2bo4NQP6qOGNJLIQ6Ec18HeBnRn+yZwUNN8XhCMDuHYS ORQhw6E4iQprdKZVKpZYh+/KfEcZfLD76ZRvnmST2NNQVVGNFa1I4ZKD+gsIUUuN 8AmzcKtU5ZyXfOybDLZuLJDgCdtu63Q= -----END CERTIFICATE-----Generated at Mon Sep 21 18:40:42 2026 by rpki-client