$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa File: 8a510825-83bf-3885-90a1-e8e8bfb13779.roa (raw, json) Hash identifier: i9tyVmJA33gn5cV0heDkjHc2aVtSYcrEUqGV80hI7aY= Subject key identifier: 6D:08:46:48:4E:DE:AB:20:D7:9D:53:16:98:89:B4:7E:AF:43:0C:32 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F20F7AF753CFF0E4E3296AD00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 23.227.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:af:75:3c:ff:0e:4e:32:96:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=590b1fcc-96c2-49f3-8629-a4ce0df46887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:6b:20:4e:e3:0b:fc:a1:48:b4:ca:b3:04: 14:9e:30:31:8a:94:8c:39:50:0e:88:29:36:8c:6c: 29:35:a3:74:cc:fa:66:01:b0:b0:34:ad:90:ab:02: 0c:35:58:be:64:f3:8d:b6:ca:d2:68:00:8f:59:75: a4:5c:d5:f5:30:8b:6a:66:65:33:cc:0a:b9:2c:9d: 05:4c:f5:b3:07:a3:6b:fe:e7:1d:7a:fe:bd:b0:e0: 19:25:b6:de:83:0e:ca:af:d1:a8:4d:31:31:f3:73: 28:37:82:bb:e0:31:ae:f5:52:35:6d:ee:33:74:2f: be:a6:cd:32:a3:df:5e:72:7c:49:29:32:f2:6b:ee: ac:4c:24:29:c0:72:94:75:7c:47:f1:01:69:08:06: 36:54:e5:38:f3:18:7b:f3:f2:3a:93:44:69:d4:91: 2c:28:88:e4:8e:10:2c:57:83:84:77:68:58:cd:08: 9e:0b:6d:c1:d3:49:3a:a9:93:2c:19:30:d5:c9:e5: b3:1c:5d:1f:8b:93:26:67:f1:96:9a:3a:58:ec:74: 10:4e:e6:f4:aa:f4:6d:ad:e0:c7:4a:66:df:76:13: 47:f9:3b:17:bb:82:68:07:28:5a:5a:24:c2:3b:fc: b9:80:7a:42:0b:27:07:e7:1a:83:76:8e:ee:1f:ab: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:46:48:4E:DE:AB:20:D7:9D:53:16:98:89:B4:7E:AF:43:0C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3c:17:b0:1f:9a:bd:34:13:6f:56:70:0b:f1:00:4b:49:d0: 69:9e:67:e5:3b:ee:7b:30:b3:c4:f3:87:ee:31:8e:45:13:1f: 9a:61:41:80:f9:e5:2c:18:8f:dc:2d:51:ba:33:bb:20:6a:f2: 13:c5:d5:d6:62:11:a0:27:e1:0f:b4:0d:d8:a8:87:51:6c:64: a0:f8:20:77:96:f4:3d:29:ca:26:34:c1:bf:02:76:8b:85:df: e6:f4:0e:16:eb:6c:e1:26:df:74:be:0f:6c:9c:21:b2:29:48: d3:65:66:b1:a3:2c:5f:b8:bc:4a:8b:61:20:fa:21:08:41:19: 43:50:9d:9e:a5:86:58:02:b9:cc:10:85:91:f9:97:44:15:65: a5:bb:41:b7:9a:1e:af:7e:26:3b:7d:cb:24:51:29:b4:fb:74: e4:4e:65:f0:e1:c3:d5:82:ca:2e:d2:73:ad:c5:cb:8c:4f:ce: 28:55:25:4d:32:3b:89:df:0d:7a:ce:3d:f1:35:c5:ce:1a:5f: e3:cd:c4:a4:5c:af:96:1a:80:9b:b7:51:9e:13:2f:e4:ac:a0: fc:5b:ca:a1:ca:0f:b4:d0:24:59:73:26:b0:67:80:58:3c:e3: 5f:a8:cb:04:08:3d:c4:a8:37:79:40:e4:26:e6:d8:99:96:a5: 44:e3:a4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g9691PP8OTjKWrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTkwYjFmY2MtOTZjMi00OWYzLTg2MjktYTRjZTBkZjQ2ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNrIE7jC/yhSLTKswQUnjAxipSMOVAOiCk2 jGwpNaN0zPpmAbCwNK2QqwIMNVi+ZPONtsrSaACPWXWkXNX1MItqZmUzzAq5LJ0F TPWzB6Nr/ucdev69sOAZJbbegw7Kr9GoTTEx83MoN4K74DGu9VI1be4zdC++ps0y o99ecnxJKTLya+6sTCQpwHKUdXxH8QFpCAY2VOU48xh78/I6k0Rp1JEsKIjkjhAs V4OEd2hYzQieC23B00k6qZMsGTDVyeWzHF0fi5MmZ/GWmjpY7HQQTub0qvRtreDH SmbfdhNH+TsXu4JoByhaWiTCO/y5gHpCCycH5xqDdo7uH6sNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0IRkhO3qsg151TFpiJtH6vQwwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGE1MTA4MjUtODNiZi0z ODg1LTkwYTEtZThlOGJmYjEzNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY8F7Afmr00E29WcAvxAEtJ0GmeZ+U77nsws8Tzh+4xjkUTH5phQYD5 5SwYj9wtUbozuyBq8hPF1dZiEaAn4Q+0Ddioh1FsZKD4IHeW9D0pyiY0wb8CdouF 3+b0DhbrbOEm33S+D2ycIbIpSNNlZrGjLF+4vEqLYSD6IQhBGUNQnZ6lhlgCucwQ hZH5l0QVZaW7QbeaHq9+Jjt9yyRRKbT7dOROZfDhw9WCyi7Sc63Fy4xPzihVJU0y O4nfDXrOPfE1xc4aX+PNxKRcr5YagJu3UZ4TL+SsoPxbyqHKD7TQJFlzJrBngFg8 41+oywQIPcSoN3lA5Cbm2JmWpUTjpH8= -----END CERTIFICATE-----Generated at Mon Sep 21 04:17:22 2026 by rpki-client