$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: 03kxqP3meJg+vr2LX4VwwHihhKV1TfcSUTWbtCWypXU= Subject key identifier: 28:51:54:AD:07:91:70:DD:E4:2E:20:5B:2B:5B:4C:9E:11:87:43:62 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F23C253E994DF4D7072A859C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:53:e9:94:df:4d:70:72:a8:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=1655c446-3df6-4a0f-8df6-aac7106cfba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:ed:ec:d0:e2:9a:c5:53:55:57:9a:15:fe: 87:69:b8:c4:7e:ac:49:40:53:31:7e:1b:54:16:86: dd:9b:e4:9b:17:41:f6:15:5c:bb:64:e7:fb:f6:70: 5c:10:68:3f:01:62:de:1c:59:16:0f:1b:4f:c7:77: 0f:cf:ba:1f:db:74:1a:7c:db:66:76:56:f5:d4:b0: 9a:94:92:cd:02:50:e9:69:72:0d:7c:13:55:dd:45: 0d:d7:94:e7:7b:75:ab:c8:20:54:ff:a1:24:f1:5f: 38:86:96:65:f4:62:d2:41:28:2f:24:3e:c8:6c:a4: 1f:c1:2e:09:ed:0d:4d:2b:19:94:70:57:05:e7:9d: 39:e7:24:6a:4f:7c:61:17:e4:58:50:e9:18:1d:1f: fd:ab:14:b2:6c:c6:0c:7c:80:0c:60:11:65:27:ca: 7b:b3:94:6c:c0:e1:01:6b:a1:8b:e3:e3:50:1b:6c: 60:30:e8:cc:8b:44:ca:06:92:9e:87:5f:c2:b6:eb: eb:f0:9b:16:8a:9f:48:aa:6a:7d:59:f3:25:67:60: eb:49:ee:70:33:d3:75:96:28:63:de:f5:1d:a3:2c: b7:b2:fb:b8:d7:a7:e6:3f:43:ba:72:5d:ba:5d:31: 95:b8:06:6e:8f:e0:e2:55:34:6c:88:0b:6d:35:ec: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:54:AD:07:91:70:DD:E4:2E:20:5B:2B:5B:4C:9E:11:87:43:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:58:6f:93:34:e9:8d:fb:b6:b9:18:c9:b5:41:6a:06:75:00: c1:a5:76:ea:e5:eb:f5:ff:f8:e8:a0:2a:63:8c:86:a7:e7:78: ec:8a:94:56:3d:fc:f4:e6:c9:d4:59:92:3a:f1:2b:95:6b:9d: 47:f9:8c:45:f0:71:03:02:9a:41:96:7d:93:78:4d:04:e9:20: c4:6d:20:bb:f1:a6:70:a3:21:f0:95:b9:57:fb:08:d2:45:58: da:22:f5:cd:4f:b9:ef:4c:70:8e:47:40:2a:09:82:47:1a:b4: 52:fa:ea:48:64:8c:53:14:32:7b:23:d7:15:7a:d8:2a:65:a0: 82:b6:1d:d0:15:15:e1:f2:40:18:bf:5b:88:02:29:67:e9:71: 98:4e:03:be:a7:42:4e:2a:80:0d:7c:07:12:db:57:a2:48:b5: b1:d6:5e:ef:72:64:33:fb:be:de:cc:28:96:b6:12:63:6f:78: 8e:96:5e:ef:eb:99:22:c6:15:bc:f3:a3:28:bd:80:3f:ec:39: 40:40:62:62:5b:41:8e:86:5d:c7:a8:b3:8e:7a:1c:81:2c:98: 78:0d:b9:06:c2:b3:57:cd:69:4c:e8:4d:5e:e8:a8:46:3c:35: 7f:03:08:55:03:fa:99:6b:f9:3b:b7:38:8d:2a:c3:4c:75:25: 02:97:08:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlPplN9NcHKoWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MTY1NWM0NDYtM2RmNi00YTBmLThkZjYtYWFjNzEwNmNmYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hft7NDimsVTVVeaFf6HabjEfqxJQFMxfhtU Fobdm+SbF0H2FVy7ZOf79nBcEGg/AWLeHFkWDxtPx3cPz7of23QafNtmdlb11LCa lJLNAlDpaXINfBNV3UUN15Tne3WryCBU/6Ek8V84hpZl9GLSQSgvJD7IbKQfwS4J 7Q1NKxmUcFcF55055yRqT3xhF+RYUOkYHR/9qxSybMYMfIAMYBFlJ8p7s5RswOEB a6GL4+NQG2xgMOjMi0TKBpKeh1/Ctuvr8JsWip9Iqmp9WfMlZ2DrSe5wM9N1lihj 3vUdoyy3svu416fmP0O6cl26XTGVuAZuj+DiVTRsiAttNexPkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChRVK0HkXDd5C4gWytbTJ4Rh0NiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVYb5M06Y37trkYybVBagZ1AMGldurl6/X/+OigKmOMhqfneOyKlFY9 /PTmydRZkjrxK5VrnUf5jEXwcQMCmkGWfZN4TQTpIMRtILvxpnCjIfCVuVf7CNJF WNoi9c1Pue9McI5HQCoJgkcatFL66khkjFMUMnsj1xV62CploIK2HdAVFeHyQBi/ W4gCKWfpcZhOA76nQk4qgA18BxLbV6JItbHWXu9yZDP7vt7MKJa2EmNveI6WXu/r mSLGFbzzoyi9gD/sOUBAYmJbQY6GXceos456HIEsmHgNuQbCs1fNaUzoTV7oqEY8 NX8DCFUD+plr+Tu3OI0qw0x1JQKXCIo= -----END CERTIFICATE-----Generated at Tue Sep 22 18:47:04 2026 by rpki-client