$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7d219a-2aea-35ae-916c-5734a39e4f3f.roa File: aa7d219a-2aea-35ae-916c-5734a39e4f3f.roa (raw, json) Hash identifier: qg4P/JHtw72w+ic64nUk9di+2K6tDoSxU3TSCnYFIX8= Subject key identifier: 50:70:CD:7C:37:00:A7:F9:90:59:77:2D:F7:C5:B4:98:A0:44:FD:E5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5A32A9EB7A6FF55622D7F200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7d219a-2aea-35ae-916c-5734a39e4f3f.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 50.33.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:a9:eb:7a:6f:f5:56:22:d7:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=21607b73-cbab-4e77-94d7-ca6cc9dd0309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:91:72:67:bd:a9:df:a1:02:d2:2c:dc:7c: 07:5e:21:e1:76:1b:6c:72:a6:62:d9:51:d2:41:ef: 5f:27:50:1c:14:6e:ad:84:4c:42:5e:f1:dd:90:bd: de:b9:83:d9:8d:02:fe:cf:a1:aa:58:d2:ed:e5:eb: a2:d2:6d:06:40:f1:8c:88:64:99:84:3f:e1:b2:64: 12:b0:f8:48:e2:f1:44:4f:62:d8:2c:d3:46:a7:f1: f0:94:1c:f6:0e:38:9a:11:ba:3a:59:22:81:e1:be: 82:e6:39:e1:82:fa:df:46:78:49:be:6e:da:b1:aa: 7f:5d:14:c5:f6:aa:87:73:70:6c:19:f6:2e:9c:86: 5c:86:9f:3e:f7:bc:a3:57:5e:1d:48:84:09:5d:92: b6:7b:fb:b4:ff:c6:73:c4:91:e0:b2:9c:09:50:34: 60:6a:5f:11:b2:10:a9:e9:c6:84:44:72:53:57:86: a9:64:17:2e:cb:1d:da:8a:4d:0c:94:8e:02:09:a9: 77:61:c1:58:b7:0e:81:42:97:20:2b:bb:98:cb:01: 47:f4:6b:39:31:3b:b9:ff:7b:0b:25:6c:f0:9c:a2: 1d:6f:06:24:d5:2d:d8:87:b3:1a:22:95:75:46:19: 7c:a4:c4:30:99:70:1d:46:94:5a:a5:9d:ab:74:85: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:70:CD:7C:37:00:A7:F9:90:59:77:2D:F7:C5:B4:98:A0:44:FD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7d219a-2aea-35ae-916c-5734a39e4f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 50.33.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:45:83:ee:1b:2d:1a:55:ce:67:5f:3c:ca:c5:58:d3:e3:6d: 85:64:ee:50:58:af:2b:09:96:19:bd:88:90:8a:db:47:66:f5: b7:86:a2:9c:bf:40:62:e3:91:b8:8a:8a:5b:42:89:24:a4:9c: 4d:3d:34:63:7e:fb:f6:1b:4f:20:cd:af:91:9f:6b:55:c1:e7: c1:bd:f8:35:71:8d:34:64:1f:bb:0e:22:28:60:39:ba:2c:4e: 03:92:bc:6d:1b:19:d3:be:de:20:74:d2:ff:ed:82:cd:83:20: 34:af:5f:e8:0e:1f:83:f8:48:81:70:dd:a8:d5:9d:ef:40:5a: be:da:fb:eb:f0:51:13:e6:4c:05:a3:62:7f:c9:6c:45:99:eb: cd:d3:bd:cd:2c:00:d6:fd:ee:cd:25:3e:48:56:9e:e2:fa:54: 23:03:cc:31:4b:7f:30:d2:5e:8d:9c:36:f8:cf:68:5e:0b:e2: 85:15:9e:f2:63:36:61:48:f4:00:7f:93:d7:78:92:54:c9:eb: f3:28:cf:51:c2:03:b4:3a:0f:93:9b:77:37:97:30:67:46:86: df:3a:7f:64:0a:59:d2:5a:02:a5:ba:bf:eb:fe:2e:61:d9:b5: fd:0d:f6:7e:49:28:b0:cd:1a:9c:a5:03:e3:b1:55:2f:72:ac: bc:18:5c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqnrem/1ViLX8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjE2MDdiNzMtY2JhYi00ZTc3LTk0ZDctY2E2Y2M5ZGQwMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUWRcme9qd+hAtIs3HwHXiHhdhtscqZi2VHS Qe9fJ1AcFG6thExCXvHdkL3euYPZjQL+z6GqWNLt5eui0m0GQPGMiGSZhD/hsmQS sPhI4vFET2LYLNNGp/HwlBz2DjiaEbo6WSKB4b6C5jnhgvrfRnhJvm7asap/XRTF 9qqHc3BsGfYunIZchp8+97yjV14dSIQJXZK2e/u0/8ZzxJHgspwJUDRgal8RshCp 6caERHJTV4apZBcuyx3aik0MlI4CCal3YcFYtw6BQpcgK7uYywFH9Gs5MTu5/3sL JWzwnKIdbwYk1S3Yh7MaIpV1Rhl8pMQwmXAdRpRapZ2rdIXfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBwzXw3AKf5kFl3LffFtJigRP3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE3ZDIxOWEtMmFlYS0z NWFlLTkxNmMtNTczNGEzOWU0ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFMiFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRFg+4bLRpVzmdfPMrFWNPjbYVk7lBYrysJlhm9iJCK20dm9beGopy/ QGLjkbiKiltCiSSknE09NGN++/YbTyDNr5Gfa1XB58G9+DVxjTRkH7sOIihgObos TgOSvG0bGdO+3iB00v/tgs2DIDSvX+gOH4P4SIFw3ajVne9AWr7a++vwURPmTAWj Yn/JbEWZ683Tvc0sANb97s0lPkhWnuL6VCMDzDFLfzDSXo2cNvjPaF4L4oUVnvJj NmFI9AB/k9d4klTJ6/Moz1HCA7Q6D5ObdzeXMGdGht86f2QKWdJaAqW6v+v+LmHZ tf0N9n5JKLDNGpylA+OxVS9yrLwYXGE= -----END CERTIFICATE-----Generated at Tue Oct 13 14:14:09 2026 by rpki-client