$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/326bdacb-1c99-3bef-a5a3-a1498aaf7600.roa File: 326bdacb-1c99-3bef-a5a3-a1498aaf7600.roa (raw, json) Hash identifier: olGu2rDtB+zHas0JgsfDjOJhRr23ZZixRI7NXm7/oCU= Subject key identifier: E5:66:87:E1:AF:00:EC:4F:24:DD:11:57:5A:0B:33:AF:F6:80:C3:37 Certificate issuer: /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9 Certificate serial: 010D0C9F4328584F119CDAB00B9C54A6493A6A80 Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/326bdacb-1c99-3bef-a5a3-a1498aaf7600.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 199.235.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:da:b0:0b:9c:54:a6:49:3a:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1fcf6ce5-9368-418b-aeb5-72fb86349f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:40:6c:93:e4:7b:e1:7d:20:a6:67:e8:50: 7b:fb:80:d2:8c:40:45:5d:2e:89:b5:f7:3d:4d:be: b1:68:81:9e:42:42:78:e1:9a:5e:b7:77:9c:b8:5a: ae:a4:81:31:ab:18:5f:43:71:27:20:a7:ea:f3:b6: 75:3d:96:ed:5b:41:5c:05:55:7d:e3:fd:80:5c:fb: a0:ea:1d:60:a5:1d:96:e5:02:62:58:03:84:1a:14: e1:51:05:3c:33:e9:05:1b:98:37:fa:5a:23:05:e5: 35:ee:c7:8d:cd:2c:72:d7:55:c8:c5:00:e9:e0:ea: 17:1b:17:18:ed:41:10:02:29:82:20:2d:f8:16:12: d6:14:4c:af:8a:d5:21:fa:d8:c1:26:c0:2f:3a:b1: 2f:cf:37:51:3b:3e:0f:1a:1d:28:07:54:9d:87:1b: 3c:6c:7f:e4:21:83:31:e4:b2:69:63:93:7e:29:8f: e4:7a:25:74:3f:f8:b5:dd:a7:f9:62:53:e3:24:34: 91:be:e0:a0:b2:00:b7:2c:94:86:18:5b:44:94:7b: 1b:6d:00:bc:1e:52:b5:4e:bb:66:a9:e4:5d:a1:5b: 72:d4:b6:1d:05:15:1b:55:b1:95:9f:0a:41:f1:1b: ba:c7:51:41:a2:ab:1c:d7:9b:92:7c:37:60:56:8a: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:87:E1:AF:00:EC:4F:24:DD:11:57:5A:0B:33:AF:F6:80:C3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/326bdacb-1c99-3bef-a5a3-a1498aaf7600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl X509v3 Authority Key Identifier: keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer sbgp-ipAddrBlock: critical IPv4: 199.235.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:f0:1f:98:02:d4:02:ac:cb:e8:17:be:36:e0:26:42:af: 36:98:b1:97:cc:c0:19:eb:c5:d4:d7:5f:15:bd:75:a6:37:bc: 3c:e0:ed:9b:3e:b1:70:4d:bd:a8:1d:07:d0:4f:38:a2:8d:af: 32:ae:63:92:5b:88:15:2a:b8:b4:ac:68:a1:71:86:7c:a9:45: 30:74:60:f6:b3:a6:d2:a4:ce:99:8a:a0:40:f1:62:69:66:d0: bb:1d:19:74:fa:c4:ad:74:db:cd:d1:0f:16:5c:74:f7:7a:71: 68:99:bc:8d:51:f5:ea:4e:cd:bd:a8:89:0b:3b:50:1f:9e:9e: 09:1b:28:d3:78:e5:b2:4a:35:b4:8c:69:fb:70:e0:b9:a1:74: 6b:f0:72:32:e1:8b:ed:54:56:c0:63:ba:ca:33:7c:a5:df:da: c8:b4:47:2e:ad:48:d8:5e:6d:95:bb:2c:e8:c0:ec:06:05:3d: dc:68:67:53:d6:95:e6:f7:a0:fa:19:e9:de:96:b9:86:5a:ab: f2:07:5a:f6:16:7a:9c:e7:41:21:38:b9:b2:8f:74:0a:1d:19: d6:df:5a:08:0a:27:19:89:e2:ea:db:bb:bb:b1:1b:f0:cb:7a: 76:e8:65:d4:0e:1e:13:33:4c:a8:b9:bc:21:be:8d:e5:ac:1a: 9b:63:b4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnNqwC5xUpkk6aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz N2M5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZjZjZjZTUtOTM2OC00MThiLWFlYjUtNzJmYjg2MzQ5Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm79AbJPke+F9IKZn6FB7+4DSjEBFXS6Jtfc9 Tb6xaIGeQkJ44Zpet3ecuFqupIExqxhfQ3EnIKfq87Z1PZbtW0FcBVV94/2AXPug 6h1gpR2W5QJiWAOEGhThUQU8M+kFG5g3+lojBeU17seNzSxy11XIxQDp4OoXGxcY 7UEQAimCIC34FhLWFEyvitUh+tjBJsAvOrEvzzdROz4PGh0oB1Sdhxs8bH/kIYMx 5LJpY5N+KY/keiV0P/i13af5YlPjJDSRvuCgsgC3LJSGGFtElHsbbQC8HlK1Trtm qeRdoVty1LYdBRUbVbGVnwpB8Ru6x1FBoqsc15uSfDdgVorY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVmh+GvAOxPJN0RV1oLM6/2gMM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvMzI2YmRhY2ItMWM5OS0z YmVmLWE1YTMtYTE0OThhYWY3NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3 MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+tMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8/8B+YAtQCrMvoF7424CZCrzaYsZfMwBnrxdTXXxW9daY3vDzg7Zs+ sXBNvagdB9BPOKKNrzKuY5JbiBUquLSsaKFxhnypRTB0YPazptKkzpmKoEDxYmlm 0LsdGXT6xK10283RDxZcdPd6cWiZvI1R9epOzb2oiQs7UB+engkbKNN45bJKNbSM aftw4LmhdGvwcjLhi+1UVsBjusozfKXf2si0Ry6tSNhebZW7LOjA7AYFPdxoZ1PW leb3oPoZ6d6WuYZaq/IHWvYWepznQSE4ubKPdAodGdbfWggKJxmJ4urbu7uxG/DL enboZdQOHhMzTKi5vCG+jeWsGptjtDI= -----END CERTIFICATE-----Generated at Mon Sep 21 18:38:35 2026 by rpki-client