$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cfbf8849-a316-3315-8dfd-0656b356c679.roa File: cfbf8849-a316-3315-8dfd-0656b356c679.roa (raw, json) Hash identifier: 2m4LebOg4RUvCk94myt/XpYtX2z2elzrzVmmdzUUMcA= Subject key identifier: 45:A7:72:3D:60:11:8F:CC:B8:FC:0E:7E:9C:6E:04:66:24:14:EA:7C Certificate issuer: /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9 Certificate serial: 010D0C9F4328584E417218BB3AE56BBD00F8CBC0 Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cfbf8849-a316-3315-8dfd-0656b356c679.roa Signing time: Mon 22 Jun 2026 11:25:57 +0000 ROA not before: Mon 22 Jun 2026 11:25:57 +0000 ROA not after: Sun 20 Sep 2026 11:25:57 +0000 asID: 399359 IP address blocks: 199.235.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:72:18:bb:3a:e5:6b:bd:00:f8:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9 Validity Not Before: Jun 22 11:25:57 2026 GMT Not After : Sep 20 11:25:57 2026 GMT Subject: CN=9552d755-9eb1-4c19-b950-479d0174cf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:b1:e8:7d:d8:2d:38:d7:2e:a3:f3:33:77: 42:23:7c:fb:08:53:4c:b7:3d:8b:2a:8d:5e:22:65: 65:4e:1b:5c:a3:5e:58:f8:5e:58:6f:fa:9a:c1:6c: 3d:e7:65:43:19:9a:c9:4f:25:ab:f1:5a:f8:e2:fb: 46:b1:ff:f1:c6:26:2a:40:b5:4b:a6:c6:f6:0e:3b: 23:c5:e8:cc:85:2a:8e:82:b0:93:34:2e:b3:3c:23: 1b:bf:5d:1d:8a:e8:a2:a7:44:57:bf:d5:45:46:aa: fd:f7:5d:24:86:61:ec:38:bf:90:d6:c2:a2:56:09: 06:f7:4c:00:14:cd:1c:50:b6:ce:52:14:d0:c4:a1: ef:14:ba:de:70:c0:45:2d:e6:32:55:b4:2f:3d:8d: 82:ea:7a:bb:2c:d3:5b:75:c3:64:af:62:88:9b:87: 81:d0:af:f1:7e:20:3f:cd:c5:68:db:e0:44:5b:71: 74:a4:21:fb:bd:77:55:97:20:ab:39:27:32:64:f8: 93:10:fb:d2:56:1e:0f:e8:4e:48:7d:ae:e1:a8:c0: a9:6d:60:2e:0a:42:ed:d2:0f:cb:7c:97:68:c1:38: f4:8c:46:df:01:15:a7:52:a4:da:9e:9c:dd:4a:a4: 8e:da:7e:cc:78:38:26:08:10:16:f9:d3:dc:c6:3b: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:72:3D:60:11:8F:CC:B8:FC:0E:7E:9C:6E:04:66:24:14:EA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cfbf8849-a316-3315-8dfd-0656b356c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl X509v3 Authority Key Identifier: keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer sbgp-ipAddrBlock: critical IPv4: 199.235.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:21:c8:93:c6:28:63:60:18:6f:89:e9:a4:68:cb:af:54:15: 13:63:8e:b4:02:c2:c5:98:13:c2:89:a7:a6:46:c1:ca:c5:6f: e9:bc:eb:d4:5f:6c:0d:c9:9b:3c:40:97:e6:32:3f:f0:ef:04: 38:e0:48:b6:4e:3a:08:a4:ce:2a:0b:8d:74:03:6a:34:df:ca: c7:b2:54:f5:bd:7c:81:ff:7a:31:01:46:49:65:59:3e:3d:a7: bd:e5:22:3f:5c:4b:7e:a1:af:3f:d4:5e:95:7f:5a:f0:70:0c: 7d:c0:32:92:00:91:24:f3:4f:26:84:90:e8:82:24:48:62:d2: 5f:76:39:2c:b6:f9:d5:d9:f9:10:98:89:3c:90:37:0c:8e:14: 82:dc:df:ef:3a:af:61:77:83:85:c7:25:04:0a:91:f5:94:08: 0e:cb:dd:01:af:bf:4c:8e:cc:c5:3a:f4:05:23:9f:6a:17:7c: 06:a1:6c:21:8b:15:56:bc:08:20:c4:35:bb:2c:de:b1:d9:af: dc:a3:81:07:fb:f7:0e:56:f0:52:5a:8b:e7:a7:28:c2:59:84: 25:09:ff:dc:e5:e6:81:d5:69:76:4c:44:75:25:0a:3c:71:e9: dc:04:76:72:77:9a:0e:5a:4c:83:fd:50:f1:56:4a:54:98:48: 41:57:6d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Bchi7OuVrvQD4y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz N2M5MB4XDTI2MDYyMjExMjU1N1oXDTI2MDkyMDExMjU1N1owLzEtMCsGA1UEAxMk OTU1MmQ3NTUtOWViMS00YzE5LWI5NTAtNDc5ZDAxNzRjZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEOx6H3YLTjXLqPzM3dCI3z7CFNMtz2LKo1e ImVlThtco15Y+F5Yb/qawWw952VDGZrJTyWr8Vr44vtGsf/xxiYqQLVLpsb2Djsj xejMhSqOgrCTNC6zPCMbv10diuiip0RXv9VFRqr9910khmHsOL+Q1sKiVgkG90wA FM0cULbOUhTQxKHvFLrecMBFLeYyVbQvPY2C6nq7LNNbdcNkr2KIm4eB0K/xfiA/ zcVo2+BEW3F0pCH7vXdVlyCrOScyZPiTEPvSVh4P6E5Ifa7hqMCpbWAuCkLt0g/L fJdowTj0jEbfARWnUqTanpzdSqSO2n7MeDgmCBAW+dPcxjsMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWncj1gEY/MuPwOfpxuBGYkFOp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvY2ZiZjg4NDktYTMxNi0z MzE1LThkZmQtMDY1NmIzNTZjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3 MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0hyJPGKGNgGG+J6aRoy69UFRNjjrQCwsWYE8KJp6ZGwcrFb+m869Rf bA3JmzxAl+YyP/DvBDjgSLZOOgikzioLjXQDajTfyseyVPW9fIH/ejEBRkllWT49 p73lIj9cS36hrz/UXpV/WvBwDH3AMpIAkSTzTyaEkOiCJEhi0l92OSy2+dXZ+RCY iTyQNwyOFILc3+86r2F3g4XHJQQKkfWUCA7L3QGvv0yOzMU69AUjn2oXfAahbCGL FVa8CCDENbss3rHZr9yjgQf79w5W8FJai+enKMJZhCUJ/9zl5oHVaXZMRHUlCjxx 6dwEdnJ3mg5aTIP9UPFWSlSYSEFXbVc= -----END CERTIFICATE-----Generated at Fri Jun 26 19:22:19 2026 by rpki-client