$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa File: c90c9521-a429-3420-94be-1c59d7710268.roa (raw, json) Hash identifier: UusKw9qxpaKSN2tHnEOXao2cnrJpN2nHYMBtZNAWCoM= Subject key identifier: 58:3E:44:5D:39:82:21:95:2F:CF:67:5C:EA:40:35:19:FB:6B:71:5B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F225D01819AC9B10518A2E440 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 104.254.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:01:81:9a:c9:b1:05:18:a2:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=d5dde982-dec6-4c26-bea9-1f9477a9f933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:bf:a2:95:bf:1d:39:bf:6c:f3:73:93:97: e7:cb:6d:94:00:cc:10:1d:a2:f7:7d:05:64:b1:a5: 22:74:82:ee:71:c2:8e:18:a9:a6:04:0d:70:ce:cb: 4d:8c:fd:e2:71:a2:31:da:f2:11:78:73:b3:dd:a1: 13:f8:51:9f:ce:f4:5c:56:91:3f:bd:0e:4f:53:c6: d1:3a:b0:31:d9:c9:f1:8a:2a:1d:f8:7e:83:5d:e6: 9c:ff:a9:8f:cf:46:6d:a6:d3:26:67:66:7b:b2:c0: f2:17:29:d1:72:de:df:fb:be:66:7e:2e:c5:be:a1: 88:e3:a1:c6:47:18:8b:2e:0e:df:ee:0c:e2:c9:cc: de:fb:5e:e8:7e:73:96:f3:3b:d3:5d:e2:1f:c0:5a: f9:3a:ed:a8:29:ce:10:7f:e9:17:90:7f:cd:69:dd: e4:33:f1:95:ce:06:49:b1:2a:35:85:aa:49:2c:1a: 5a:1b:e1:62:6b:aa:e4:5b:7f:44:45:e8:2a:06:e4: ac:43:cb:b5:8b:f6:fa:5a:2f:5f:a1:1a:e9:02:fc: 16:2d:09:4c:bd:52:da:b5:60:53:05:e0:31:34:3b: bf:6d:a1:2d:b6:14:ad:57:2d:e4:8f:c0:56:8d:06: 08:f7:5c:42:83:fd:aa:fd:71:e9:dc:28:da:56:50: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3E:44:5D:39:82:21:95:2F:CF:67:5C:EA:40:35:19:FB:6B:71:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 104.254.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4b:cd:8e:3d:83:11:bf:9e:82:1d:50:7d:24:0f:57:20:8c: 47:e9:07:8c:fd:4c:54:3e:6b:83:47:40:ca:14:10:90:aa:c9: eb:8b:9e:46:5d:8f:bd:ed:e4:02:a4:ee:38:51:a1:fd:17:35: d3:0d:0b:76:6e:a9:99:c9:75:ad:16:6a:d3:f8:5d:7d:12:43: aa:07:6f:da:cf:39:2a:96:3c:6e:0e:aa:37:65:e8:72:27:1a: 57:92:01:7b:07:46:d5:db:a9:08:5b:ca:8f:27:ec:48:54:29: 95:e4:b8:9e:97:6a:eb:97:62:d7:0e:91:af:34:06:99:0e:6d: 2d:a4:5a:92:be:81:5b:16:fa:4e:94:8e:cb:8f:c5:cf:45:4c: cb:1d:9d:35:f5:0e:67:16:aa:9a:d5:75:11:92:44:bf:84:30: 6d:e9:ef:a0:40:a4:cf:f2:7c:28:f3:9d:67:e3:46:fb:c1:14: 6f:45:f1:56:6a:2a:dd:e7:01:bb:5d:06:8d:cf:b9:59:d2:45: be:25:9d:06:e6:18:3d:0b:0f:73:e5:67:fa:dc:7c:c9:3f:dc: 24:87:e4:72:a4:06:a2:68:cc:50:2e:1a:f8:ec:29:c1:60:97: a2:47:65:ba:5d:4a:3a:24:7d:f3:10:c9:64:92:73:1e:d7:31: b9:80:c8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQGBmsmxBRii5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDVkZGU5ODItZGVjNi00YzI2LWJlYTktMWY5NDc3YTlmOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviC/opW/HTm/bPNzk5fny22UAMwQHaL3fQVk saUidILuccKOGKmmBA1wzstNjP3icaIx2vIReHOz3aET+FGfzvRcVpE/vQ5PU8bR OrAx2cnxiiod+H6DXeac/6mPz0ZtptMmZ2Z7ssDyFynRct7f+75mfi7FvqGI46HG RxiLLg7f7gziycze+17ofnOW8zvTXeIfwFr5Ou2oKc4Qf+kXkH/Nad3kM/GVzgZJ sSo1hapJLBpaG+Fia6rkW39ERegqBuSsQ8u1i/b6Wi9foRrpAvwWLQlMvVLatWBT BeAxNDu/baEtthStVy3kj8BWjQYI91xCg/2q/XHp3CjaVlDkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg+RF05giGVL89nXOpANRn7a3FbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzkwYzk1MjEtYTQyOS0z NDIwLTk0YmUtMWM1OWQ3NzEwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5LzY49gxG/noIdUH0kD1cgjEfpB4z9TFQ+a4NHQMoUEJCqyeuLnkZd j73t5AKk7jhRof0XNdMNC3ZuqZnJda0WatP4XX0SQ6oHb9rPOSqWPG4Oqjdl6HIn GleSAXsHRtXbqQhbyo8n7EhUKZXkuJ6XauuXYtcOka80BpkObS2kWpK+gVsW+k6U jsuPxc9FTMsdnTX1DmcWqprVdRGSRL+EMG3p76BApM/yfCjznWfjRvvBFG9F8VZq Kt3nAbtdBo3PuVnSRb4lnQbmGD0LD3PlZ/rcfMk/3CSH5HKkBqJozFAuGvjsKcFg l6JHZbpdSjokffMQyWSScx7XMbmAyJs= -----END CERTIFICATE-----Generated at Sun Sep 20 16:04:12 2026 by rpki-client