$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa File: 50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json) Hash identifier: RqnDwi4hg9VNTwv/WL8zqFNvy9D1ixB5um34/Y6An54= Subject key identifier: 42:3D:01:4D:2B:C3:FD:2A:50:4F:BB:D3:45:C7:00:41:40:34:93:70 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584F9BCDC751FCAE468000CA6A80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 32181 IP address blocks: 70.32.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c7:51:fc:ae:46:80:00:ca:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=ad50f165-8586-4d8a-9144-ffc37a1bc20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:93:32:b3:ce:0c:3e:81:30:88:ca:b8:b2: 39:53:df:aa:2c:48:42:44:d9:f8:8a:4b:be:55:06: cf:a4:a3:ff:a9:d3:ab:bb:e4:2a:82:a5:da:50:74: 45:fa:21:ec:ba:07:22:dc:eb:7e:2e:59:73:61:58: b5:07:28:31:91:fb:2b:fa:6c:67:24:e7:4a:ab:f0: 74:13:ec:3f:9f:9d:07:d0:8e:e4:ce:66:9d:43:03: d7:bb:cd:08:6f:4a:d5:38:0b:a6:bf:9d:fd:87:59: e0:07:a4:cd:8f:b7:32:eb:cb:23:0e:57:08:2a:b6: cd:e4:15:f9:95:79:42:ff:6e:18:b7:22:0b:0e:80: 19:1c:34:91:2e:ff:80:b1:b3:be:90:41:9c:d8:b0: e6:d6:7a:41:8c:84:f1:c3:74:f1:90:96:ed:70:92: 15:00:b1:65:05:0b:64:c4:5e:f8:f7:1a:84:c9:a8: a5:10:4b:50:41:72:77:a4:04:e6:99:2f:2c:51:4e: bd:c0:73:5f:ad:be:b0:1e:ab:ed:e2:60:62:3e:9b: 4c:1b:75:d5:35:6e:8c:dd:f3:43:67:2c:b5:a6:aa: d8:e0:b4:d6:84:39:59:aa:09:e7:3b:6c:8f:55:d9: ca:8e:37:39:1d:05:4b:e6:b9:b0:b2:24:3f:ec:4c: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3D:01:4D:2B:C3:FD:2A:50:4F:BB:D3:45:C7:00:41:40:34:93:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 70.32.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a8:5c:f1:1c:fa:13:5a:2a:1c:62:c0:12:f3:ec:a7:0d:6f: a5:1e:e9:50:34:b5:ee:57:25:04:5f:bf:17:9b:cc:74:d5:14: 64:89:93:d0:82:ba:34:8a:0c:e6:69:9b:30:73:88:66:ae:f1: 0a:04:98:b4:64:1b:23:8b:62:c7:e9:ab:98:7d:28:1a:10:b2: ef:2e:b2:bf:b2:47:b6:1a:e0:db:ba:da:a9:81:e9:9d:d5:7e: e0:d9:5b:59:56:a7:e5:09:3f:4a:e9:e9:96:29:97:0d:b0:90: 99:5c:74:ac:fc:17:6c:01:fb:5c:da:97:08:f8:d2:d3:39:40: d4:2c:3f:dc:ac:68:d8:4c:32:4e:b0:80:5a:a1:62:08:f6:be: 60:ba:65:17:58:df:94:e2:ce:a8:ef:50:a9:1b:e9:a9:73:9f: 68:95:7e:8c:5e:5d:19:c6:a7:e1:b4:99:a4:47:78:13:3c:89: 7c:b2:ab:24:e9:b8:a1:b7:67:40:60:bd:e0:84:74:63:78:7a: 19:9c:83:2b:f3:42:05:32:2c:13:aa:61:36:f0:1e:00:75:f2: ec:94:8e:7b:2a:23:56:22:b5:ba:48:ac:2c:f6:88:25:53:af: 49:89:56:7d:82:db:be:8f:4a:6b:5b:a8:41:2a:b0:b2:88:82: 4b:d7:16:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcdR/K5GgADKaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YWQ1MGYxNjUtODU4Ni00ZDhhLTkxNDQtZmZjMzdhMWJjMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHeTMrPODD6BMIjKuLI5U9+qLEhCRNn4iku+ VQbPpKP/qdOru+QqgqXaUHRF+iHsugci3Ot+LllzYVi1Bygxkfsr+mxnJOdKq/B0 E+w/n50H0I7kzmadQwPXu80Ib0rVOAumv539h1ngB6TNj7cy68sjDlcIKrbN5BX5 lXlC/24YtyILDoAZHDSRLv+AsbO+kEGc2LDm1npBjITxw3TxkJbtcJIVALFlBQtk xF749xqEyailEEtQQXJ3pATmmS8sUU69wHNfrb6wHqvt4mBiPptMG3XVNW6M3fND Zyy1pqrY4LTWhDlZqgnnO2yPVdnKjjc5HQVL5rmwsiQ/7EzCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI9AU0rw/0qUE+700XHAEFANJNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTA3ODZhMTYtMDA3My0z ZjRkLWIxZTYtZGYxZTVlYjE2ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJioXPEc+hNaKhxiwBLz7KcNb6Ue6VA0te5XJQRfvxebzHTVFGSJk9CC ujSKDOZpmzBziGau8QoEmLRkGyOLYsfpq5h9KBoQsu8usr+yR7Ya4Nu62qmB6Z3V fuDZW1lWp+UJP0rp6ZYplw2wkJlcdKz8F2wB+1zalwj40tM5QNQsP9ysaNhMMk6w gFqhYgj2vmC6ZRdY35TizqjvUKkb6alzn2iVfoxeXRnGp+G0maRHeBM8iXyyqyTp uKG3Z0BgveCEdGN4ehmcgyvzQgUyLBOqYTbwHgB18uyUjnsqI1YitbpIrCz2iCVT r0mJVn2C276PSmtbqEEqsLKIgkvXFio= -----END CERTIFICATE-----Generated at Tue Oct 27 18:15:30 2026 by rpki-client