$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d841ceb8-477e-37f3-baa4-93ffea25aed4.roa File: d841ceb8-477e-37f3-baa4-93ffea25aed4.roa (raw, json) Hash identifier: IxaklmlLdm78bIc3oP0S+scl6C9qml/UlcKEOIxnGYw= Subject key identifier: 2B:21:01:85:77:46:AE:65:D4:C4:D0:63:E2:EA:4B:B4:47:1F:11:25 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584EC288BAC9F6C02414D20131C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d841ceb8-477e-37f3-baa4-93ffea25aed4.roa Signing time: Fri 07 Aug 2026 17:10:50 +0000 ROA not before: Fri 07 Aug 2026 17:10:50 +0000 ROA not after: Thu 05 Nov 2026 18:10:50 +0000 asID: 54963 IP address blocks: 144.168.33.0/24 maxlen: 24 144.168.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:88:ba:c9:f6:c0:24:14:d2:01:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 7 17:10:50 2026 GMT Not After : Nov 5 18:10:50 2026 GMT Subject: CN=c989f40c-89f1-4419-882f-650829c498de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:44:b7:72:93:89:b5:be:48:e6:6c:26:aa: fa:ef:c9:e5:7d:dc:05:4d:e3:3a:92:aa:24:2e:6c: 8d:95:f7:2f:8e:6b:ec:12:21:3c:8e:0d:1b:60:38: 9a:ec:01:d2:e4:47:9a:2e:e4:26:f6:8f:e8:ce:7f: a4:2c:8d:25:c3:51:0d:5e:70:4e:f4:b7:ef:3b:77: 3e:06:da:84:a5:9a:eb:ed:5b:e2:c1:2b:07:9a:53: c3:35:eb:f9:2f:2f:65:c0:30:87:97:bc:11:ce:3d: 61:52:76:82:a7:c7:5a:d4:cc:f5:f3:32:99:fc:40: ed:19:c0:3f:02:87:ef:4c:4b:d0:6b:3f:29:8a:e5: 33:18:b6:81:a6:8a:aa:94:b6:4a:32:71:36:c8:7c: dd:e0:f1:46:b9:00:10:4f:66:4b:ec:d7:a4:c7:d2: 21:a7:ed:9a:62:cc:ca:ca:1d:2c:cf:97:82:8e:0a: 88:69:13:d6:09:b8:8c:e9:1c:41:8c:e8:8c:94:6f: c6:03:03:58:25:e7:12:d4:6e:19:a5:3e:33:e1:66: 42:87:d8:7f:be:e8:44:e4:1c:26:27:90:6a:ea:5f: 92:b4:a9:19:8a:82:2e:9d:8c:af:04:e8:0a:8d:d2: 02:9b:9c:0b:3b:b2:30:72:97:eb:fc:56:de:d0:08: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:21:01:85:77:46:AE:65:D4:C4:D0:63:E2:EA:4B:B4:47:1F:11:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d841ceb8-477e-37f3-baa4-93ffea25aed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.33.0/24 144.168.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c4:44:9a:45:e3:e6:49:38:de:5a:d7:a6:67:cc:70:d7:b7: fd:f5:79:00:eb:44:96:1e:93:be:75:1b:6d:89:d7:2d:64:01: dc:82:32:53:d5:cd:5a:d1:b9:3c:51:1a:fb:2c:17:7a:66:1b: a7:33:17:86:65:df:1e:04:ac:88:91:92:27:43:1c:c9:06:2e: bd:99:0d:e1:f3:22:1d:bd:d4:b9:13:60:67:da:1f:89:4a:2d: 3e:9c:ad:04:ce:31:33:d6:4d:20:39:f9:1e:30:74:c6:bc:f9: 89:cc:3e:e6:f9:2a:0d:a7:85:cd:62:3b:7a:da:ed:9e:d5:0d: bf:22:09:41:1c:63:22:0d:7a:0c:93:d9:3b:8f:9c:06:32:3f: 74:6b:e4:e0:7a:fc:ac:13:5e:ac:84:00:7e:3c:96:e7:8a:d0: 44:a6:af:5e:51:3b:e4:33:e6:a3:74:35:22:2b:b0:75:4a:48: 11:61:58:1c:b7:22:d8:94:1a:b9:43:47:b6:ed:03:9e:4b:1b: e5:2c:84:70:6c:11:89:e9:d9:e4:33:2d:18:28:12:56:6a:b6: d0:5a:b5:44:3c:f0:44:2a:7d:ff:0a:6a:75:82:16:46:ab:52: 09:de:16:50:4f:5f:d0:f5:1c:34:0a:22:78:51:2d:ec:7d:da: 31:d4:77:09 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7CiLrJ9sAkFNIBMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDgwNzE3MTA1MFoXDTI2MTEwNTE4MTA1MFowLzEtMCsGA1UEAxMk Yzk4OWY0MGMtODlmMS00NDE5LTg4MmYtNjUwODI5YzQ5OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif5Et3KTibW+SOZsJqr678nlfdwFTeM6kqok LmyNlfcvjmvsEiE8jg0bYDia7AHS5EeaLuQm9o/ozn+kLI0lw1ENXnBO9LfvO3c+ BtqEpZrr7VviwSsHmlPDNev5Ly9lwDCHl7wRzj1hUnaCp8da1Mz18zKZ/EDtGcA/ AofvTEvQaz8piuUzGLaBpoqqlLZKMnE2yHzd4PFGuQAQT2ZL7Nekx9Ihp+2aYszK yh0sz5eCjgqIaRPWCbiM6RxBjOiMlG/GAwNYJecS1G4ZpT4z4WZCh9h/vuhE5Bwm J5Bq6l+StKkZioIunYyvBOgKjdICm5wLO7Iwcpfr/Fbe0Aj3xwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCshAYV3Rq5l1MTQY+LqS7RHHxElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDg0MWNlYjgtNDc3ZS0z N2YzLWJhYTQtOTNmZmVhMjVhZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkKghAwQA kKgjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAILERJpF4+ZJON5a16ZnzHDXt/31eQDrRJYek751G22J1y1k AdyCMlPVzVrRuTxRGvssF3pmG6czF4Zl3x4ErIiRkidDHMkGLr2ZDeHzIh291LkT YGfaH4lKLT6crQTOMTPWTSA5+R4wdMa8+YnMPub5Kg2nhc1iO3ra7Z7VDb8iCUEc YyINegyT2TuPnAYyP3Rr5OB6/KwTXqyEAH48lueK0ESmr15RO+Qz5qN0NSIrsHVK SBFhWBy3ItiUGrlDR7btA55LG+UshHBsEYnp2eQzLRgoElZqttBatUQ88EQqff8K anWCFkarUgneFlBPX9D1HDQKInhRLex92jHUdwk= -----END CERTIFICATE-----Generated at Sat Aug 22 20:19:44 2026 by rpki-client