$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa File: 3539c781-77b7-3d87-9f79-249dab3df0e0.roa (raw, json) Hash identifier: GQbQb9LTUhi/qGlSfx07gyhqpaZSLwfko0uA1aNXTPg= Subject key identifier: 79:B7:7C:AC:B7:67:23:69:2F:AC:34:75:07:FE:F0:93:99:8E:60:64 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F2ABD1439E8C17CE4E9760B80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 199.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:14:39:e8:c1:7c:e4:e9:76:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=8f1a1719-0a3d-4bb6-b4dd-74d4ad0a10b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:a8:d4:0a:a1:2f:41:4b:ca:6c:9a:eb:10: c9:7e:db:c9:ab:54:59:e4:60:11:72:e0:b8:7a:18: 7d:c2:8c:4e:3d:8b:85:1e:7e:68:da:01:89:b1:1c: f5:09:c8:35:2e:46:ad:f6:0e:df:9f:0b:6f:7a:72: 37:a3:67:e8:3d:b2:da:19:0b:dd:41:60:e1:62:a5: fb:b6:32:f2:3f:b8:08:9f:87:bf:fc:7c:f8:11:d6: d8:0c:ab:b9:6b:bd:a8:7d:b5:8a:2d:eb:d7:61:1b: 45:81:b0:67:8a:54:58:cb:f5:ce:ae:92:7d:6a:04: 63:d5:e0:f9:c3:14:ff:af:48:bf:2a:5f:54:fc:90: f1:d2:5f:df:bd:13:77:de:23:50:b9:4f:31:aa:4d: 44:cd:d5:10:4c:c7:b5:ab:7b:d0:19:00:c1:61:87: 4e:38:36:57:83:a9:26:0d:f2:17:be:fb:7b:e9:73: b3:a9:5d:c6:57:8f:59:fe:3d:af:1e:ab:58:8e:56: bc:fb:12:ca:21:0a:27:36:71:40:03:4b:11:74:34: 53:d3:1f:42:f3:80:7f:3e:67:3b:83:4c:14:47:d5: 9e:7a:7c:b2:cd:ea:1c:ac:66:e3:f1:99:1f:14:3c: f6:fc:72:6f:e7:da:5e:1f:76:54:31:ce:4d:6e:a5: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B7:7C:AC:B7:67:23:69:2F:AC:34:75:07:FE:F0:93:99:8E:60:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.119.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:38:dd:95:54:c7:ae:70:96:f6:3c:20:f4:f8:2a:38:f9:12: 35:ad:be:cd:5d:4e:5d:90:9d:68:29:8c:63:07:63:7f:15:c1: 28:40:44:18:aa:a3:eb:7e:7b:d2:92:09:81:32:df:83:fc:30: 7a:9c:50:d0:43:77:21:c6:fd:3f:06:bd:a2:8d:6c:01:08:68: e2:eb:af:ac:ba:5b:b7:a8:e7:c9:27:ec:66:38:30:fc:e1:3b: 2c:a5:dc:ab:b4:7d:f9:dd:6e:7a:8f:ea:e2:26:05:be:b9:90: a3:e0:03:81:1d:70:a6:0d:19:80:fe:94:78:d6:7a:b9:2b:fe: ee:d2:67:e0:77:0b:1c:88:87:80:1d:c6:d3:84:4e:f5:34:88: a1:61:51:1e:32:ea:18:b0:f4:95:10:71:0a:1b:07:41:75:2a: 93:28:7a:17:bf:a5:e0:43:bc:0b:cb:96:98:b0:0f:47:08:ac: 36:40:d4:7a:e4:19:ba:5e:57:1e:60:6d:d7:05:73:d7:51:21: 55:df:be:b1:bc:cf:33:ba:3d:d7:3f:40:a4:6d:e2:5d:5b:69: 81:08:0e:68:5c:0d:0a:60:38:16:75:ed:6c:81:64:39:db:a7: 12:24:63:8b:e5:c7:50:d5:38:83:46:b4:b9:ff:c3:31:94:ab: 7a:f1:52:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRQ56MF85Ol2C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OGYxYTE3MTktMGEzZC00YmI2LWI0ZGQtNzRkNGFkMGExMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFio1AqhL0FLymya6xDJftvJq1RZ5GARcuC4 ehh9woxOPYuFHn5o2gGJsRz1Ccg1Lkat9g7fnwtvenI3o2foPbLaGQvdQWDhYqX7 tjLyP7gIn4e//Hz4EdbYDKu5a72ofbWKLevXYRtFgbBnilRYy/XOrpJ9agRj1eD5 wxT/r0i/Kl9U/JDx0l/fvRN33iNQuU8xqk1EzdUQTMe1q3vQGQDBYYdOODZXg6km DfIXvvt76XOzqV3GV49Z/j2vHqtYjla8+xLKIQonNnFAA0sRdDRT0x9C84B/Pmc7 g0wUR9WeenyyzeocrGbj8ZkfFDz2/HJv59peH3ZUMc5NbqUt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm3fKy3ZyNpL6w0dQf+8JOZjmBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzUzOWM3ODEtNzdiNy0z ZDg3LTlmNzktMjQ5ZGFiM2RmMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ043ZVUx65wlvY8IPT4Kjj5EjWtvs1dTl2QnWgpjGMHY38VwShARBiq o+t+e9KSCYEy34P8MHqcUNBDdyHG/T8GvaKNbAEIaOLrr6y6W7eo58kn7GY4MPzh Oyyl3Ku0ffndbnqP6uImBb65kKPgA4EdcKYNGYD+lHjWerkr/u7SZ+B3CxyIh4Ad xtOETvU0iKFhUR4y6hiw9JUQcQobB0F1KpMoehe/peBDvAvLlpiwD0cIrDZA1Hrk GbpeVx5gbdcFc9dRIVXfvrG8zzO6Pdc/QKRt4l1baYEIDmhcDQpgOBZ17WyBZDnb pxIkY4vlx1DVOINGtLn/wzGUq3rxUjI= -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:20 2026 by rpki-client