$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa File: 12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa (raw, json) Hash identifier: hv8SPSjJEpx/fjupgrXaVS4QONlrdftVSckonVpmX9c= Subject key identifier: 2E:49:F0:1C:0B:EA:C7:06:51:D2:42:4C:2B:DA:75:A7:79:EE:0B:59 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F2957B4261A9FFD5BF9892E70 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 29802 IP address blocks: 209.133.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b4:26:1a:9f:fd:5b:f9:89:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=432c762e-e6e2-40c6-b9e2-b8f78d84c15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:c5:19:5e:64:1e:ba:a7:20:d6:3e:d4:e5: 59:79:73:82:1c:06:2e:cc:c0:c3:ed:81:d3:91:ae: b6:9a:7f:cc:84:e8:f1:73:a7:5e:34:fe:e1:d9:5f: 63:7f:4b:9f:5f:13:91:94:5f:0c:4e:6d:80:e5:8f: ef:7d:a4:1f:47:a5:e6:28:03:82:be:c6:6b:86:82: ce:91:29:a3:09:27:7e:df:a3:40:57:27:92:a0:de: 4b:cd:bc:6c:54:ef:bb:a4:51:34:2d:8c:cb:99:71: 46:46:68:18:dd:89:7a:92:36:32:b8:dc:08:a5:8b: 87:77:21:cf:41:f9:da:f7:a5:d0:97:5c:79:52:dc: 8a:20:dd:78:13:4a:da:7e:b6:ae:6e:74:29:04:2d: 55:86:4c:3d:3a:52:b3:09:3e:80:00:98:74:a9:98: fa:93:30:7b:e3:2d:23:56:23:5d:02:61:52:8a:e3: 70:1e:f6:60:e4:e9:e3:1b:e7:20:ef:89:12:ff:51: 9c:dc:d6:79:83:6d:dd:cf:53:eb:29:6c:8c:c0:f0: cd:55:a8:11:dd:5c:b4:07:a8:84:b8:ab:92:77:9d: da:ab:58:d3:9b:c1:ab:08:f5:6b:f7:48:cf:47:c1: 7c:04:86:ab:6d:80:1a:ba:9c:5e:bf:69:15:f9:8a: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:49:F0:1C:0B:EA:C7:06:51:D2:42:4C:2B:DA:75:A7:79:EE:0B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 209.133.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9c:b3:ea:b8:05:9c:44:72:71:06:3b:99:58:dd:6f:35:30: 4c:c4:26:ee:19:6f:d4:46:88:a9:d4:fa:7d:46:0b:9c:10:83: 09:cf:f1:98:57:d8:2a:7f:13:0f:3f:eb:b5:b1:ad:74:15:10: 13:0d:e7:4c:8d:fd:de:a4:fc:f2:03:7c:58:bc:16:8f:0f:4c: 30:15:aa:fc:75:43:41:36:bf:d0:44:1b:75:83:26:c2:34:fb: b0:06:87:cc:4e:7c:3a:db:43:ac:4c:61:a9:db:dc:54:ed:ee: 6a:d0:d6:49:d0:69:8c:26:96:09:06:c9:6f:15:ed:97:21:4b: 88:7f:03:0a:3d:e8:89:11:0e:02:19:e0:ba:56:25:b2:10:a3: 73:d5:29:9d:86:5f:6f:cb:ca:a0:03:21:89:bb:6c:24:7f:f8: dc:df:62:0d:d4:75:1e:55:3a:46:c9:70:46:ab:ca:6f:76:6c: 59:88:b5:06:d1:b1:f8:d1:f9:33:4b:35:aa:1b:3f:7c:77:bc: 41:c4:ba:1f:70:fd:d0:c3:f5:f0:df:54:29:58:00:eb:5d:d3: ee:f6:20:17:ee:b5:3e:70:2a:2a:db:86:e4:6c:4a:23:fd:df: 6d:a2:6e:3a:1a:35:52:95:9a:0a:d8:2f:bc:a9:0a:47:a8:b4: bc:c7:4d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7QmGp/9W/mJLnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NDMyYzc2MmUtZTZlMi00MGM2LWI5ZTItYjhmNzhkODRjMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ7FGV5kHrqnINY+1OVZeXOCHAYuzMDD7YHT ka62mn/MhOjxc6deNP7h2V9jf0ufXxORlF8MTm2A5Y/vfaQfR6XmKAOCvsZrhoLO kSmjCSd+36NAVyeSoN5LzbxsVO+7pFE0LYzLmXFGRmgY3Yl6kjYyuNwIpYuHdyHP Qfna96XQl1x5UtyKIN14E0rafraubnQpBC1Vhkw9OlKzCT6AAJh0qZj6kzB74y0j ViNdAmFSiuNwHvZg5OnjG+cg74kS/1Gc3NZ5g23dz1PrKWyMwPDNVagR3Vy0B6iE uKuSd53aq1jTm8GrCPVr90jPR8F8BIarbYAaupxev2kV+YoMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5J8BwL6scGUdJCTCvadad57gtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTJlOGFiZDgtMmNmYy0z ZTUxLWI1M2MtZDE1MmYyYjNhMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6cs+q4BZxEcnEGO5lY3W81MEzEJu4Zb9RGiKnU+n1GC5wQgwnP8ZhX 2Cp/Ew8/67WxrXQVEBMN50yN/d6k/PIDfFi8Fo8PTDAVqvx1Q0E2v9BEG3WDJsI0 +7AGh8xOfDrbQ6xMYanb3FTt7mrQ1knQaYwmlgkGyW8V7ZchS4h/Awo96IkRDgIZ 4LpWJbIQo3PVKZ2GX2/LyqADIYm7bCR/+NzfYg3UdR5VOkbJcEarym92bFmItQbR sfjR+TNLNaobP3x3vEHEuh9w/dDD9fDfVClYAOtd0+72IBfutT5wKirbhuRsSiP9 322ibjoaNVKVmgrYL7ypCkeotLzHTUk= -----END CERTIFICATE-----Generated at Sun Sep 20 15:53:43 2026 by rpki-client