$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa File: ba2b926e-249a-331a-846b-391c0445c8d4.roa (raw, json) Hash identifier: e+6pZZ6A2MirpeX5NUoNq8wExP3wCDhvM9O3k9Xjwwk= Subject key identifier: B1:2F:2F:92:A4:EA:94:DC:6B:67:37:A5:81:18:A3:DA:59:0A:78:7B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F23C255D0F245CA513B836300 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 394727 IP address blocks: 23.227.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:55:d0:f2:45:ca:51:3b:83:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=e467197e-0659-460d-99ce-4721c36eb2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:19:e6:b4:d6:c5:ab:50:4b:ac:59:a6:a1: fb:66:dd:64:1f:2b:97:93:47:e4:ae:eb:72:0c:07: 58:8e:a9:50:9d:bc:16:cf:13:3b:c0:70:9b:99:3e: 17:33:0a:54:45:70:f6:56:7d:e4:7f:bd:ea:6f:48: 11:ae:1e:86:33:7c:ed:a0:ae:68:cd:02:5d:8b:18: 14:2a:69:6a:20:54:d9:92:c0:c6:a4:6c:bc:02:c9: 93:21:a9:1d:b8:18:ad:d3:94:d4:1a:e0:12:77:00: d7:b0:ce:58:40:7a:bd:e7:a9:31:97:b0:2f:c0:ec: fd:af:23:8e:1a:68:e3:eb:85:1d:eb:06:a0:1a:65: 3b:79:31:67:c9:bb:ee:12:c2:81:27:b5:b0:6b:3a: 2c:b1:01:bc:d6:ed:b2:db:59:d9:4b:1a:ec:01:03: 4e:9f:90:13:e4:cc:8c:f6:f5:c0:60:a7:1b:ca:a6: 65:4d:db:e9:4f:fd:6a:0e:49:66:b9:88:bb:12:b9: 4d:c2:2a:76:4b:ba:f2:ea:79:7f:cc:9f:dc:fb:af: 1b:eb:4d:22:c6:e0:42:d4:de:b9:62:cb:2c:af:f9: 33:f7:76:42:01:ef:65:4d:e1:5e:c7:69:a5:d4:23: 45:3b:39:01:1f:f2:8d:07:b6:91:67:b2:96:83:2d: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:2F:92:A4:EA:94:DC:6B:67:37:A5:81:18:A3:DA:59:0A:78:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6c:3c:48:fb:15:80:ee:7c:13:a4:1e:c2:e9:cd:c8:a7:7a: 36:c9:3a:31:df:d1:ec:4c:9d:f5:cc:15:76:ac:96:4c:2c:a0: a7:70:6a:86:9c:c7:81:f8:0f:bf:2c:a6:7f:9d:e8:65:74:95: c2:2f:10:3f:6a:c3:12:7a:e7:e2:f7:2d:3f:20:63:5a:a8:6a: 47:65:01:d1:bb:ef:51:9e:1c:f1:4d:d0:40:45:c6:3f:be:af: ac:b0:47:44:8f:da:94:77:09:0b:ae:27:42:0e:ee:86:21:f2: 5c:ae:d6:d1:b1:89:eb:c9:94:59:15:08:0c:ad:95:3a:b5:55: ca:6a:29:4b:8c:f5:d0:31:b0:71:be:0c:d5:83:f9:97:14:bf: fb:94:50:02:6f:d5:e0:22:11:f2:18:47:2b:62:b2:5d:af:55: a4:31:4f:c2:b0:42:b8:0d:51:c6:f5:ea:dc:ce:8a:a3:22:04: 9d:ea:1d:24:41:f2:11:88:cf:64:53:8c:cf:e6:70:5d:04:e3: ea:35:4d:79:a0:ae:80:21:d1:06:14:e3:bb:97:f1:29:ce:78: 83:2a:e7:64:51:d6:a7:8f:00:9d:7c:8e:a8:78:e3:86:a5:50: 10:fc:11:0f:76:c7:fb:97:a5:aa:f9:5f:06:15:ae:e5:d0:ef: 22:60:7b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlXQ8kXKUTuDYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTQ2NzE5N2UtMDY1OS00NjBkLTk5Y2UtNDcyMWMzNmViMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukEZ5rTWxatQS6xZpqH7Zt1kHyuXk0fkruty DAdYjqlQnbwWzxM7wHCbmT4XMwpURXD2Vn3kf73qb0gRrh6GM3ztoK5ozQJdixgU KmlqIFTZksDGpGy8AsmTIakduBit05TUGuASdwDXsM5YQHq956kxl7AvwOz9ryOO Gmjj64Ud6wagGmU7eTFnybvuEsKBJ7WwazossQG81u2y21nZSxrsAQNOn5AT5MyM 9vXAYKcbyqZlTdvpT/1qDklmuYi7ErlNwip2S7ry6nl/zJ/c+68b600ixuBC1N65 Ysssr/kz93ZCAe9lTeFex2ml1CNFOzkBH/KNB7aRZ7KWgy2JpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEvL5Kk6pTca2c3pYEYo9pZCnh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmEyYjkyNmUtMjQ5YS0z MzFhLTg0NmItMzkxYzA0NDVjOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+O8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZsPEj7FYDufBOkHsLpzcinejbJOjHf0exMnfXMFXaslkwsoKdwaoac x4H4D78spn+d6GV0lcIvED9qwxJ65+L3LT8gY1qoakdlAdG771GeHPFN0EBFxj++ r6ywR0SP2pR3CQuuJ0IO7oYh8lyu1tGxievJlFkVCAytlTq1VcpqKUuM9dAxsHG+ DNWD+ZcUv/uUUAJv1eAiEfIYRytisl2vVaQxT8KwQrgNUcb16tzOiqMiBJ3qHSRB 8hGIz2RTjM/mcF0E4+o1TXmgroAh0QYU47uX8SnOeIMq52RR1qePAJ18jqh444al UBD8EQ92x/uXpar5XwYVruXQ7yJgezQ= -----END CERTIFICATE-----Generated at Sat Sep 26 09:05:34 2026 by rpki-client