$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b50b3335-37e3-3042-ac6d-88a40674119a.roa File: b50b3335-37e3-3042-ac6d-88a40674119a.roa (raw, json) Hash identifier: uhAK/1CbYyCzVYIZLNDYBvXLR3xc5zyLLyIm5SiZRq0= Subject key identifier: 72:2C:45:58:FC:80:9C:15:6D:66:97:FE:EF:71:F0:04:08:4A:83:52 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584EC372B1A48AA7AA2F2880DD00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b50b3335-37e3-3042-ac6d-88a40674119a.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 62468 IP address blocks: 23.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:b1:a4:8a:a7:aa:2f:28:80:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=75f35178-daca-4423-b35d-2c1a6ca21e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c4:2d:05:12:51:52:3d:67:af:b6:92:40:bc: 1c:1d:e8:87:69:cd:ec:71:4e:bc:93:12:30:5b:36: 42:a0:18:b2:c9:6e:03:47:14:b3:5e:47:1f:5c:24: d5:80:1d:4b:76:ad:11:05:53:e5:fd:25:1b:f3:98: 7d:da:fb:1c:0c:a2:88:ce:14:19:c4:07:87:6b:6e: 59:8a:7e:ad:01:66:a7:ff:f6:83:b9:6c:ce:ef:98: e5:c6:06:fc:05:8d:2b:fb:d8:f2:1b:cb:5b:23:d3: fb:e0:25:8b:a9:98:58:0a:76:99:9d:38:1f:c3:e9: bc:89:fc:87:6d:e4:71:e5:7f:0f:95:2e:3c:1f:be: a7:9e:e7:a6:0e:17:f4:bd:f8:15:a7:d9:8d:95:ab: 14:b7:ee:7a:c7:a1:97:f1:ed:18:db:42:40:97:df: 61:aa:32:51:f5:0c:45:7f:13:a2:33:f7:e0:cf:c0: c6:fa:6e:64:d6:80:3e:f5:14:88:37:37:21:d6:6e: 9f:90:80:0c:ad:ea:be:dd:5c:0b:d3:e0:89:34:b0: 30:af:98:c8:c7:da:cf:3e:8e:a7:e5:a2:72:06:cb: aa:23:31:ce:64:ac:55:40:1b:c3:b3:e5:8a:04:35: 35:fb:57:58:cd:75:65:1f:e1:55:3b:f8:ff:a1:62: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2C:45:58:FC:80:9C:15:6D:66:97:FE:EF:71:F0:04:08:4A:83:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b50b3335-37e3-3042-ac6d-88a40674119a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c0:31:75:83:b8:31:89:dd:91:e1:ae:90:b5:88:80:b5:df: 84:41:27:6f:40:f6:bd:b4:42:7f:3f:6a:d5:fe:cc:9e:3d:ed: d1:ff:03:29:89:46:2a:a4:60:3c:75:82:4b:cd:f9:da:b6:c5: fb:a4:39:b1:72:86:23:d0:01:73:2c:45:8f:1f:dc:e8:1b:43: 50:69:85:3d:14:25:5b:ed:9a:a0:26:ad:03:e9:fe:0d:e8:bc: 7d:d4:50:c8:a4:40:bb:10:94:1c:5c:cc:0e:b8:89:2f:fe:07: 81:cd:f3:a8:95:e0:c2:38:19:fb:c4:b6:5c:75:49:47:5f:1f: 5a:95:1c:28:5b:36:5e:f3:c0:0e:9a:c2:49:48:17:b9:02:a3: b5:e3:84:75:71:f2:ed:dd:c3:0b:79:76:26:df:fe:51:cc:d5: 2c:03:b1:81:a2:0b:0d:d7:1a:7d:3a:a4:e7:88:c4:ea:1d:80: d5:e4:86:cd:1b:11:49:09:35:56:7f:cf:01:48:72:ce:86:77: c5:d3:f6:bb:3a:b6:5d:9a:bb:61:2f:1d:c0:e6:16:7a:ed:40: 4d:ce:10:cb:17:b6:dc:48:91:12:23:5d:91:93:ce:e2:ef:c0: f9:0b:ad:08:d1:b3:ff:47:39:da:a5:b4:5e:ed:a4:40:02:6d: 62:50:cb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcrGkiqeqLyiA3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzVmMzUxNzgtZGFjYS00NDIzLWIzNWQtMmMxYTZjYTIxZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMQtBRJRUj1nr7aSQLwcHeiHac3scU68kxIw WzZCoBiyyW4DRxSzXkcfXCTVgB1Ldq0RBVPl/SUb85h92vscDKKIzhQZxAeHa25Z in6tAWan//aDuWzO75jlxgb8BY0r+9jyG8tbI9P74CWLqZhYCnaZnTgfw+m8ifyH beRx5X8PlS48H76nnuemDhf0vfgVp9mNlasUt+56x6GX8e0Y20JAl99hqjJR9QxF fxOiM/fgz8DG+m5k1oA+9RSINzch1m6fkIAMreq+3VwL0+CJNLAwr5jIx9rPPo6n 5aJyBsuqIzHOZKxVQBvDs+WKBDU1+1dYzXVlH+FVO/j/oWLM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIsRVj8gJwVbWaX/u9x8AQISoNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjUwYjMzMzUtMzdlMy0z MDQyLWFjNmQtODhhNDA2NzQxMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnAMXWDuDGJ3ZHhrpC1iIC134RBJ29A9r20Qn8/atX+zJ497dH/AymJ RiqkYDx1gkvN+dq2xfukObFyhiPQAXMsRY8f3OgbQ1BphT0UJVvtmqAmrQPp/g3o vH3UUMikQLsQlBxczA64iS/+B4HN86iV4MI4GfvEtlx1SUdfH1qVHChbNl7zwA6a wklIF7kCo7XjhHVx8u3dwwt5dibf/lHM1SwDsYGiCw3XGn06pOeIxOodgNXkhs0b EUkJNVZ/zwFIcs6Gd8XT9rs6tl2au2EvHcDmFnrtQE3OEMsXttxIkRIjXZGTzuLv wPkLrQjRs/9HOdqltF7tpEACbWJQy24= -----END CERTIFICATE-----Generated at Sat Sep 5 03:19:07 2026 by rpki-client