$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/8c93cf6a-6225-31fc-a140-f40fef192e7e.roa File: 8c93cf6a-6225-31fc-a140-f40fef192e7e.roa (raw, json) Hash identifier: wO3OWQnJZJKmdQgJSMvwkLdOd8sKZa2Egpff8MeZzsE= Subject key identifier: F5:C6:5C:A1:D6:95:71:51:86:00:CF:63:D7:3A:82:7A:EA:45:7D:D5 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F4328584F4972C4E017E16C08CFFD9C00 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/8c93cf6a-6225-31fc-a140-f40fef192e7e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14277 IP address blocks: 65.50.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c4:e0:17:e1:6c:08:cf:fd:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e8488e0-ee9b-4f71-a0cf-166ba5f55d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:d5:d9:b7:da:ed:53:bf:c4:dd:b5:07:1a: 09:5c:92:72:ba:68:b7:74:06:b4:49:23:fe:ba:c1: a5:09:59:ae:fa:ab:d4:3f:a2:7d:7d:75:37:e1:15: e9:16:57:15:23:95:0b:0d:ad:f5:ae:7a:11:27:58: 73:e0:f9:0d:20:75:70:6b:8f:80:27:bd:14:69:80: 31:36:70:fd:6b:a9:81:fb:69:fd:73:ed:18:57:06: b0:c3:81:be:16:06:69:3c:e3:84:b3:f9:b5:80:89: cb:eb:58:9c:04:d9:45:73:2d:62:19:4f:62:59:9f: 67:00:d4:7d:97:86:63:b0:53:66:57:4d:63:1d:d5: fb:57:62:ae:a4:07:43:90:52:68:db:34:84:36:10: 6f:48:6a:4f:27:00:a5:4b:cf:c5:25:73:c0:2d:c0: 66:d3:6f:8c:20:be:c4:ae:34:00:e3:81:db:5d:a3: 61:98:91:36:14:b9:58:6b:56:64:2f:36:3b:8a:00: d5:46:c9:f8:50:91:e8:c0:38:a6:3c:ba:a3:e3:bc: 07:65:92:61:35:f9:09:e8:38:d6:74:e4:b8:39:c0: 55:2e:c0:90:d7:37:37:0e:dc:a4:67:fa:31:0e:a5: 2e:da:41:d4:5f:2f:1b:f0:eb:c9:d0:dd:a9:5c:b6: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C6:5C:A1:D6:95:71:51:86:00:CF:63:D7:3A:82:7A:EA:45:7D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/8c93cf6a-6225-31fc-a140-f40fef192e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.50.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:dd:c6:ae:bf:08:b7:ff:a1:38:f5:ff:e9:c9:9a:30:76:45: 31:ad:97:f0:a7:d5:b1:91:cb:3c:1d:0c:e5:60:01:d2:03:27: d7:b4:9c:a0:f4:be:22:1c:c6:40:c5:ca:bc:35:94:28:63:f4: cb:11:6e:27:75:70:fc:13:6b:a1:2c:d1:fe:41:8e:f0:db:b6: ab:6e:41:c9:0d:46:72:aa:16:e7:9e:72:77:19:1b:9e:7f:1c: 98:cd:bc:ee:77:4e:d2:48:30:22:ff:a5:16:e4:70:d7:89:11: 26:1b:83:bc:40:32:2c:46:23:95:b0:73:ee:18:e6:b2:85:de: d5:77:07:20:49:29:1b:35:b1:55:44:94:7b:de:7f:2c:06:36: 1f:35:83:0c:a8:d5:e6:ab:d7:3e:a3:fe:cd:e4:bb:70:b0:25: 97:67:6e:8a:7a:be:75:08:d1:c1:eb:64:14:bd:9b:77:5d:ba: 84:a0:35:d3:31:2f:4b:f3:fa:27:b2:40:45:fb:ea:a0:cb:a3: 63:24:50:58:ab:17:4a:a1:fe:1c:b7:e7:24:1b:47:13:60:ef: 1a:5a:21:8c:ff:d1:ec:36:c7:45:a8:ae:19:5f:12:11:d7:ab: 0e:ea:38:2a:b4:e7:6a:3f:93:71:6f:b1:b3:d4:22:c8:95:18: e7:60:8b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsTgF+FsCM/9nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U4NDg4ZTAtZWU5Yi00ZjcxLWEwY2YtMTY2YmE1ZjU1ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgLV2bfa7VO/xN21BxoJXJJyumi3dAa0SSP+ usGlCVmu+qvUP6J9fXU34RXpFlcVI5ULDa31rnoRJ1hz4PkNIHVwa4+AJ70UaYAx NnD9a6mB+2n9c+0YVwaww4G+FgZpPOOEs/m1gInL61icBNlFcy1iGU9iWZ9nANR9 l4ZjsFNmV01jHdX7V2KupAdDkFJo2zSENhBvSGpPJwClS8/FJXPALcBm02+MIL7E rjQA44HbXaNhmJE2FLlYa1ZkLzY7igDVRsn4UJHowDimPLqj47wHZZJhNfkJ6DjW dOS4OcBVLsCQ1zc3DtykZ/oxDqUu2kHUXy8b8OvJ0N2pXLY7GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXGXKHWlXFRhgDPY9c6gnrqRX3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvOGM5M2NmNmEtNjIyNS0z MWZjLWExNDAtZjQwZmVmMTkyZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQTKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrdxq6/CLf/oTj1/+nJmjB2RTGtl/Cn1bGRyzwdDOVgAdIDJ9e0nKD0 viIcxkDFyrw1lChj9MsRbid1cPwTa6Es0f5BjvDbtqtuQckNRnKqFueecncZG55/ HJjNvO53TtJIMCL/pRbkcNeJESYbg7xAMixGI5Wwc+4Y5rKF3tV3ByBJKRs1sVVE lHvefywGNh81gwyo1ear1z6j/s3ku3CwJZdnbop6vnUI0cHrZBS9m3dduoSgNdMx L0vz+ieyQEX76qDLo2MkUFirF0qh/hy35yQbRxNg7xpaIYz/0ew2x0WorhlfEhHX qw7qOCq052o/k3FvsbPUIsiVGOdgi6Y= -----END CERTIFICATE-----Generated at Wed Oct 7 14:17:34 2026 by rpki-client