$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455c0af5-5f1b-3a85-aa3e-255f69623cda.roa File: 455c0af5-5f1b-3a85-aa3e-255f69623cda.roa (raw, json) Hash identifier: M+uPC/xP5pw5atT1c9f1EGkEsPvLgJ4nswqHosHKLIU= Subject key identifier: C1:FE:4C:CF:77:58:87:A4:CE:27:FA:2A:A9:6F:E1:45:91:15:84:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5A32B4BEA98A6A51DFBFCEC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455c0af5-5f1b-3a85-aa3e-255f69623cda.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 50.32.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b4:be:a9:8a:6a:51:df:bf:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=41bb3159-45a0-47e5-aaa1-9c6d80e55421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:9b:80:0b:65:6a:73:34:07:fa:d3:e3:87: ce:11:e4:fe:09:50:e3:95:77:f6:c8:80:39:4a:b5: 32:9d:29:ce:45:31:dc:a2:0d:06:a0:c7:ca:5d:f1: 64:35:03:09:ad:b0:72:34:81:3b:cd:23:9c:71:fd: 19:0a:d5:1b:fc:ab:0d:62:12:af:6a:2c:e7:f0:b9: 96:c1:c5:dc:a3:b0:65:e3:40:25:c7:53:e9:c9:53: 43:8d:13:f9:71:ba:a8:af:89:c8:e9:0d:de:ad:d1: df:30:c2:53:ab:1f:42:df:5d:cb:00:0f:cf:d7:c2: 17:11:9d:ac:4e:58:f9:db:70:2c:69:27:25:8d:cc: 67:17:41:02:98:c0:6f:75:22:bd:1c:c6:3b:20:3e: 4f:46:84:16:a1:96:e6:dd:cd:22:df:61:5d:b9:5b: 4c:87:48:e5:5d:cb:15:21:94:4e:4d:b7:20:c6:43: f6:6d:f1:db:ae:25:6c:8f:cb:12:75:d2:1e:97:ad: 53:1b:38:20:ae:aa:9c:1f:85:cc:b3:bb:6f:7c:02: 44:eb:0c:85:00:01:79:a7:d9:63:4b:33:0c:82:d3: 5e:65:52:7b:8f:0a:94:4d:11:13:2e:98:9e:35:df: 8d:c3:94:61:d1:5d:ce:1a:41:3f:b0:36:71:a9:b7: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FE:4C:CF:77:58:87:A4:CE:27:FA:2A:A9:6F:E1:45:91:15:84:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455c0af5-5f1b-3a85-aa3e-255f69623cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 50.32.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6d:de:d9:93:8f:8c:b0:fd:51:72:d7:af:f5:3d:07:0f:90: 15:36:74:3a:86:de:10:b7:51:26:f8:ab:29:a3:7d:a8:28:90: 33:aa:ab:b2:df:c9:cd:a7:c7:83:a7:6a:55:c7:42:04:ad:bf: d2:6e:e6:34:fe:1a:bd:59:3a:09:39:91:ba:4d:cf:f4:5c:94: 92:79:6a:cf:3c:5b:9c:48:2f:8d:b6:6e:b5:3c:82:cc:15:80: fd:4f:c6:71:e6:58:6b:e3:f2:58:1b:3b:59:21:2e:f0:56:44: 90:66:68:cc:a3:b9:58:59:a3:38:72:c2:b9:fc:a6:bd:b8:8d: c8:27:b6:26:4b:bb:fa:6d:b4:de:a2:c1:7d:e3:fb:eb:4b:d7: 40:92:06:18:47:22:85:47:22:c2:b7:32:49:35:56:2a:a7:e5: 88:eb:77:ab:20:00:8c:a8:dd:cf:68:40:4e:f4:8b:6e:23:9f: 7e:dc:2a:96:d1:af:b4:39:fb:b8:ed:1e:1f:2a:8c:56:73:11: bd:2c:06:6d:23:ca:5f:2e:8b:70:63:a6:f1:b4:80:6c:d8:5a: 18:13:42:ff:c6:d1:38:10:0c:52:43:c6:68:bf:60:4b:8f:e5: 1b:e2:b5:a7:77:05:c7:90:aa:8d:0a:5a:b7:f9:ee:63:55:74: d6:9f:89:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrS+qYpqUd+/zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDFiYjMxNTktNDVhMC00N2U1LWFhYTEtOWM2ZDgwZTU1NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRSbgAtlanM0B/rT44fOEeT+CVDjlXf2yIA5 SrUynSnORTHcog0GoMfKXfFkNQMJrbByNIE7zSOccf0ZCtUb/KsNYhKvaizn8LmW wcXco7Bl40Alx1PpyVNDjRP5cbqor4nI6Q3erdHfMMJTqx9C313LAA/P18IXEZ2s Tlj523AsaScljcxnF0ECmMBvdSK9HMY7ID5PRoQWoZbm3c0i32FduVtMh0jlXcsV IZROTbcgxkP2bfHbriVsj8sSddIel61TGzggrqqcH4XMs7tvfAJE6wyFAAF5p9lj SzMMgtNeZVJ7jwqUTRETLpieNd+Nw5Rh0V3OGkE/sDZxqbdu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH+TM93WIekzif6Kqlv4UWRFYQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDU1YzBhZjUtNWYxYi0z YTg1LWFhM2UtMjU1ZjY5NjIzY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHMiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9t3tmTj4yw/VFy16/1PQcPkBU2dDqG3hC3USb4qymjfagokDOqq7Lf yc2nx4OnalXHQgStv9Ju5jT+Gr1ZOgk5kbpNz/RclJJ5as88W5xIL422brU8gswV gP1PxnHmWGvj8lgbO1khLvBWRJBmaMyjuVhZozhywrn8pr24jcgntiZLu/pttN6i wX3j++tL10CSBhhHIoVHIsK3Mkk1Viqn5Yjrd6sgAIyo3c9oQE70i24jn37cKpbR r7Q5+7jtHh8qjFZzEb0sBm0jyl8ui3BjpvG0gGzYWhgTQv/G0TgQDFJDxmi/YEuP 5Rvitad3BceQqo0KWrf57mNVdNafiWM= -----END CERTIFICATE-----Generated at Mon Oct 12 22:28:43 2026 by rpki-client