$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4949762c-ec2e-37a4-9fc0-237859f06817.roa File: 4949762c-ec2e-37a4-9fc0-237859f06817.roa (raw, json) Hash identifier: HIbAo3YRwLfgeNZsl2yf0RAsTVxXZrQWorNgSnZIgM8= Subject key identifier: A6:29:8D:27:18:7E:CC:CF:5F:71:66:18:E0:45:F0:6D:70:1D:17:49 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5A32B607BB2C6D352CEB4D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4949762c-ec2e-37a4-9fc0-237859f06817.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 50.123.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b6:07:bb:2c:6d:35:2c:eb:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=a31717ea-0952-4901-8903-ec7e9987be6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:ce:1a:a1:fb:8c:f9:d3:e0:d2:b2:b4:2c: d4:bd:de:17:6f:61:6e:3f:db:6a:2b:84:2d:5b:a3: bc:7e:95:07:db:34:1b:89:b5:f6:3f:65:48:4e:b5: 99:d3:c9:a4:ea:1d:8a:1f:5e:52:e2:49:5a:8b:94: 78:cc:e0:f7:a0:a3:e6:ee:ba:43:3c:e9:07:1b:b3: ec:35:af:f5:0f:5f:d0:65:96:69:9a:0b:ef:96:71: 34:b7:f3:40:f1:5a:e3:93:df:75:6b:6b:9f:82:d5: 27:94:53:70:23:2a:c9:4b:7f:bb:bf:e5:29:35:37: 5f:0a:06:94:68:0c:91:45:73:77:ee:33:8e:6a:49: 4e:35:8d:19:4a:70:b2:e2:67:71:bd:1f:01:2b:59: 6f:9c:8c:c8:ce:d6:9e:b0:b1:63:ee:a3:87:17:72: f3:57:33:87:67:f6:66:ca:2c:ce:ce:4a:45:c1:b1: b2:7c:47:6b:08:37:2b:5a:d6:e8:2b:a6:d7:46:ee: 2b:0b:1c:9f:c5:ca:f7:69:b9:ec:f2:c6:05:f5:87: 87:e5:33:66:46:36:c4:e2:63:e3:06:4b:de:79:87: 4e:5d:be:77:7e:01:a0:35:09:fe:9c:d1:e9:b7:56: 6d:2c:81:a4:ae:d4:f6:e2:ea:fe:bc:1f:94:f7:9e: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:29:8D:27:18:7E:CC:CF:5F:71:66:18:E0:45:F0:6D:70:1D:17:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4949762c-ec2e-37a4-9fc0-237859f06817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 50.123.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:1f:6f:37:17:49:5b:93:04:51:68:fa:1e:99:42:dd:8e: cb:17:8b:46:ff:25:13:a9:39:b9:66:25:a6:a3:b3:e5:17:21: fd:d0:d4:12:f8:5f:4b:f4:b3:55:44:ba:2f:3e:ec:3f:e2:85: 6c:47:c3:c1:69:b3:ed:18:0b:0d:4b:0e:0f:3a:c4:2c:09:ff: 5e:1a:a0:d7:10:8e:67:5c:53:f1:32:9f:85:5c:8f:1f:ee:8a: 09:7b:e2:24:c8:38:8c:ff:9f:af:fa:41:15:19:ac:c6:5e:cb: ab:02:e9:bb:88:02:85:e0:01:18:8d:b6:cd:21:31:05:03:69: 5e:90:e5:ec:6d:9b:94:49:e3:8f:6b:6a:27:a0:0d:eb:3a:5d: 90:38:76:60:8f:89:c4:c7:47:78:3b:b9:02:69:ee:f0:4e:d5: 2e:ac:41:51:fa:bd:94:0f:4d:ec:a8:9b:e2:4c:76:9c:32:42: b5:bb:40:7a:f7:68:08:3f:1e:5f:9b:3c:6f:d3:01:89:15:9d: ba:4a:a3:b1:8f:85:46:6f:2c:d7:87:d2:d1:59:e8:9a:46:28: 46:15:38:f6:3a:ed:79:72:af:9d:cb:00:64:be:d5:46:1b:9f: 15:4e:a9:40:09:00:48:71:a4:a7:9b:97:26:be:fe:a7:6a:cb: 35:09:e3:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrYHuyxtNSzrTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YTMxNzE3ZWEtMDk1Mi00OTAxLTg5MDMtZWM3ZTk5ODdiZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvbOGqH7jPnT4NKytCzUvd4Xb2FuP9tqK4Qt W6O8fpUH2zQbibX2P2VITrWZ08mk6h2KH15S4klai5R4zOD3oKPm7rpDPOkHG7Ps Na/1D1/QZZZpmgvvlnE0t/NA8Vrjk991a2ufgtUnlFNwIyrJS3+7v+UpNTdfCgaU aAyRRXN37jOOaklONY0ZSnCy4mdxvR8BK1lvnIzIztaesLFj7qOHF3LzVzOHZ/Zm yizOzkpFwbGyfEdrCDcrWtboK6bXRu4rCxyfxcr3abns8sYF9YeH5TNmRjbE4mPj BkveeYdOXb53fgGgNQn+nNHpt1ZtLIGkrtT24ur+vB+U955G8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYpjScYfszPX3FmGOBF8G1wHRdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk0OTc2MmMtZWMyZS0z N2E0LTlmYzAtMjM3ODU5ZjA2ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHMnuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEaH283F0lbkwRRaPoemULdjssXi0b/JROpOblmJaajs+UXIf3Q1BL4 X0v0s1VEui8+7D/ihWxHw8Fps+0YCw1LDg86xCwJ/14aoNcQjmdcU/Eyn4Vcjx/u igl74iTIOIz/n6/6QRUZrMZey6sC6buIAoXgARiNts0hMQUDaV6Q5extm5RJ449r aiegDes6XZA4dmCPicTHR3g7uQJp7vBO1S6sQVH6vZQPTeyom+JMdpwyQrW7QHr3 aAg/Hl+bPG/TAYkVnbpKo7GPhUZvLNeH0tFZ6JpGKEYVOPY67Xlyr53LAGS+1UYb nxVOqUAJAEhxpKeblya+/qdqyzUJ4zM= -----END CERTIFICATE-----Generated at Thu Oct 8 16:22:06 2026 by rpki-client