$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa File: d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa (raw, json) Hash identifier: i2ktOnRKNlo9fLZgkRlJG6po7YkbMXg+SuQ7MOlROhg= Subject key identifier: 99:A8:72:D7:F8:DE:FF:44:D3:B1:B1:EB:31:8C:06:1A:B2:21:9A:70 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F49877E7B7315397596AB6E40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8100 IP address blocks: 66.232.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:7e:7b:73:15:39:75:96:ab:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=575666fb-7273-436b-bb84-dfc990010768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:bd:83:06:a5:b3:51:6d:94:77:5e:36:c8: ba:f3:31:aa:d0:93:69:3a:34:fc:c5:cb:8d:1f:61: e5:fc:fe:1c:8e:a2:04:31:fe:81:70:56:fb:17:12: f8:4b:ff:bd:34:51:50:82:88:cb:68:b4:9c:c9:85: b3:fd:3a:c6:1e:bb:ae:26:ab:11:65:7f:69:4f:ba: e5:bf:99:37:df:d2:6a:ec:6c:11:a5:4a:a3:88:75: 90:7b:32:e8:71:10:d4:03:8f:db:11:7d:b0:ee:f4: c2:e2:05:5d:3c:0c:e1:03:d3:d3:8e:7b:17:bc:f8: 53:ac:48:a3:e7:f3:73:8f:d9:fe:21:33:67:50:3a: 78:e4:f2:a4:ba:7e:4a:e8:85:36:2e:3c:cb:fd:e8: 8d:13:0a:42:3d:6b:9e:34:12:08:46:50:90:3f:91: c8:59:7b:46:80:d9:74:38:e7:f7:71:fa:98:e7:4e: e6:0c:8a:3e:40:a3:a2:aa:9c:b6:f8:a7:15:c0:e0: ef:06:db:82:9f:46:2d:40:25:a6:ff:f0:8b:fe:94: 90:91:6d:81:eb:5a:de:87:36:b7:28:0f:65:31:03: a4:dc:4c:91:ae:61:5e:e5:90:33:ce:96:5d:1d:e8: f8:e6:93:17:a1:48:88:3f:17:22:0f:7d:78:4e:b5: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:72:D7:F8:DE:FF:44:D3:B1:B1:EB:31:8C:06:1A:B2:21:9A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9d:6a:3d:3a:12:4a:16:0e:dd:7a:39:67:fc:92:3c:8b:f4: c8:5e:68:64:86:ec:bd:8d:32:2f:ca:5c:89:c6:32:ed:52:98: c6:8b:5a:8e:8c:0a:1f:fe:5c:4d:1d:e7:56:4e:c3:d8:a0:e9: 29:4d:0f:e6:97:00:18:d6:dd:0d:85:b0:ff:6a:80:51:ff:96: 1b:fa:65:f4:3b:be:a4:f3:2a:89:ad:bc:77:a2:15:92:7c:22: 51:dd:89:6b:de:f5:6c:20:27:ee:48:4c:ef:27:56:d7:24:55: ba:b0:cc:e9:82:43:3a:38:63:0d:f5:f5:48:c0:56:65:5f:69: c0:5a:e7:39:8b:1b:c8:a0:2e:19:19:70:87:a8:52:fe:03:1d: d6:c1:11:c9:4b:52:21:4b:58:8f:70:70:37:8b:71:4e:fc:4e: 6f:1f:66:12:b6:f9:9b:08:53:6b:74:f1:fb:85:2a:a7:ee:47: 5e:fc:87:67:df:25:8f:94:45:a6:13:85:13:eb:72:dc:f3:cb: 4f:4f:77:15:7e:23:ab:84:e8:5f:7c:c7:c2:02:82:1e:9e:87: 62:bf:f6:3a:5c:10:c6:d4:f1:36:72:1f:d6:2a:ea:19:64:98: 1d:a6:f3:8b:26:92:a2:c8:de:b4:69:42:bf:de:0b:df:c5:2e: 17:a2:d5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh357cxU5dZarbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTc1NjY2ZmItNzI3My00MzZiLWJiODQtZGZjOTkwMDEwNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgK9gwals1FtlHdeNsi68zGq0JNpOjT8xcuN H2Hl/P4cjqIEMf6BcFb7FxL4S/+9NFFQgojLaLScyYWz/TrGHruuJqsRZX9pT7rl v5k339Jq7GwRpUqjiHWQezLocRDUA4/bEX2w7vTC4gVdPAzhA9PTjnsXvPhTrEij 5/Nzj9n+ITNnUDp45PKkun5K6IU2LjzL/eiNEwpCPWueNBIIRlCQP5HIWXtGgNl0 OOf3cfqY507mDIo+QKOiqpy2+KcVwODvBtuCn0YtQCWm//CL/pSQkW2B61rehza3 KA9lMQOk3EyRrmFe5ZAzzpZdHej45pMXoUiIPxciD314TrXj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmoctf43v9E07Gx6zGMBhqyIZpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDkyYTcyZjctZjJhNS0z YTA4LTkyOWEtZWIwYjY5NjI2ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuh+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABudaj06EkoWDt16OWf8kjyL9MheaGSG7L2NMi/KXInGMu1SmMaLWo6M Ch/+XE0d51ZOw9ig6SlND+aXABjW3Q2FsP9qgFH/lhv6ZfQ7vqTzKomtvHeiFZJ8 IlHdiWve9WwgJ+5ITO8nVtckVbqwzOmCQzo4Yw319UjAVmVfacBa5zmLG8igLhkZ cIeoUv4DHdbBEclLUiFLWI9wcDeLcU78Tm8fZhK2+ZsIU2t08fuFKqfuR178h2ff JY+URaYThRPrctzzy09PdxV+I6uE6F98x8ICgh6eh2K/9jpcEMbU8TZyH9Yq6hlk mB2m84smkqLI3rRpQr/eC9/FLhei1VM= -----END CERTIFICATE-----Generated at Tue Sep 29 02:45:25 2026 by rpki-client