$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/50c11a52-5910-3589-ac82-55cb9bc214ce.roa File: 50c11a52-5910-3589-ac82-55cb9bc214ce.roa (raw, json) Hash identifier: lVlqyXfIE0bqFGjEdfaN3w0474jh7E6AaHlkvlc0G2c= Subject key identifier: B5:17:1D:33:11:32:EF:89:33:0F:EA:C1:CC:6E:AD:EF:98:5C:B1:02 Certificate issuer: /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Certificate serial: 010D0C9F4328584B2CF6D8FED1076C80DC69E100 Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/50c11a52-5910-3589-ac82-55cb9bc214ce.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 14041 IP address blocks: 137.75.0.0/18 maxlen: 18 137.75.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d8:fe:d1:07:6c:80:dc:69:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=0679e588-2ef3-4ef2-a38f-5784c25b16b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:9c:53:f5:41:24:35:b9:bd:f4:12:c9:d0: 72:28:e8:9c:be:a1:77:4a:d0:a5:74:5e:95:fa:94: 99:24:67:3a:fd:53:66:a0:2d:d9:72:86:7d:22:4f: 14:8f:d6:08:2e:7b:11:4f:23:a2:43:0e:e3:63:5c: e3:1c:47:49:ed:42:21:77:e9:45:cb:c5:54:89:7f: 81:81:19:18:71:c7:69:83:47:71:45:e3:59:8c:87: b8:f6:fa:34:61:0d:d5:ac:4e:86:56:c4:ea:81:42: 81:f6:46:9b:a5:2c:e9:bd:32:98:52:4e:50:d7:f0: cc:c4:55:7f:5e:c7:50:6d:5a:93:08:a8:84:60:7e: 31:3a:bc:17:9a:a6:93:75:d5:d5:84:a6:50:75:e2: 33:c8:24:19:ff:86:bc:03:00:de:63:95:b3:f0:46: 73:85:0b:cd:4c:72:54:9c:43:ca:45:95:a7:62:4c: 8c:02:f0:30:cf:88:b8:6f:63:79:43:3e:72:ef:25: 45:2e:74:8a:4f:c2:a9:51:e0:ee:ae:9a:73:9f:85: 42:a9:50:ea:01:48:2c:a9:c4:2b:7c:8a:94:b1:3c: d5:5e:0a:0d:3a:10:a2:20:b9:29:7d:cb:ef:2a:cd: 61:3c:42:d8:a9:78:bf:de:01:33:b9:16:ee:6d:15: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:17:1D:33:11:32:EF:89:33:0F:EA:C1:CC:6E:AD:EF:98:5C:B1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/50c11a52-5910-3589-ac82-55cb9bc214ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl X509v3 Authority Key Identifier: keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer sbgp-ipAddrBlock: critical IPv4: 137.75.0.0/18 137.75.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d9:55:c9:47:67:f5:e8:37:ae:bb:60:0d:6b:29:49:16:8a: 63:71:32:7d:46:86:30:90:c5:9b:94:ce:c3:2e:d0:e1:70:67: 2a:2d:e7:a9:df:83:f7:08:87:53:4b:40:70:89:36:77:14:b9: 6f:59:40:92:9c:99:b4:30:cf:ab:10:ab:b1:9c:6c:f5:25:7b: 82:45:67:c3:6f:80:1a:8e:2b:47:e4:dd:b1:4c:5c:8a:9a:f6: 43:7b:32:19:cf:a4:b2:01:aa:5b:14:c1:5e:93:7d:d8:a1:10: f6:27:38:39:ae:aa:64:42:64:48:ca:d0:f5:ef:c1:b8:d3:03: 5e:de:10:97:14:b8:af:66:8d:8b:09:6e:7e:2b:dd:5a:92:73: 53:5d:17:d8:85:d4:31:19:8c:7a:08:7d:a3:d1:92:41:60:6c: 0e:b5:3c:69:89:ae:8c:1b:f6:d1:63:ce:f5:db:16:0b:bd:4c: 67:a6:5a:b8:bc:93:8d:d5:4e:e0:ab:34:38:cc:8d:5a:20:d9: 4a:54:d4:80:f1:99:4b:c1:66:8f:91:7b:e7:6c:f4:4c:3f:ae: d8:18:6c:67:67:b3:e6:b7:4c:83:fc:d4:33:fa:fd:b4:0d:ed: eb:ce:a9:c8:23:d5:b1:ae:0f:c6:da:66:ed:13:7e:37:35:5a: 20:b4:ad:37 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEss9tj+0QdsgNxp4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRk NmFjMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDY3OWU1ODgtMmVmMy00ZWYyLWEzOGYtNTc4NGMyNWIxNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOKcU/VBJDW5vfQSydByKOicvqF3StCldF6V +pSZJGc6/VNmoC3ZcoZ9Ik8Uj9YILnsRTyOiQw7jY1zjHEdJ7UIhd+lFy8VUiX+B gRkYccdpg0dxReNZjIe49vo0YQ3VrE6GVsTqgUKB9kabpSzpvTKYUk5Q1/DMxFV/ XsdQbVqTCKiEYH4xOrwXmqaTddXVhKZQdeIzyCQZ/4a8AwDeY5Wz8EZzhQvNTHJU nEPKRZWnYkyMAvAwz4i4b2N5Qz5y7yVFLnSKT8KpUeDurppzn4VCqVDqAUgsqcQr fIqUsTzVXgoNOhCiILkpfcvvKs1hPELYqXi/3gEzuRbubRU6owIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLUXHTMRMu+JMw/qwcxure+YXLECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZThk OGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvNTBjMTFhNTItNTkxMC0z NTg5LWFjODItNTVjYjliYzIxNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU4ZDhkMWMtYTNlZi00MGUyLTk5 MWEtOTc2NDJkZGRkNmFjLzJlOGQ4ZDFjLWEzZWYtNDBlMi05OTFhLTk3NjQyZGRk ZDZhYy5jcmwwHwYDVR0jBBgwFoAUsN1lnzvrigW9nzMaUiU6k/I7EvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0 MmRkZGQ2YWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGiUsAAwQH iUuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB7ZVclHZ/XoN667YA1rKUkWimNxMn1GhjCQxZuUzsMu0OFw Zyot56nfg/cIh1NLQHCJNncUuW9ZQJKcmbQwz6sQq7GcbPUle4JFZ8NvgBqOK0fk 3bFMXIqa9kN7MhnPpLIBqlsUwV6TfdihEPYnODmuqmRCZEjK0PXvwbjTA17eEJcU uK9mjYsJbn4r3VqSc1NdF9iF1DEZjHoIfaPRkkFgbA61PGmJrowb9tFjzvXbFgu9 TGemWri8k43VTuCrNDjMjVog2UpU1IDxmUvBZo+Re+ds9Ew/rtgYbGdns+a3TIP8 1DP6/bQN7evOqcgj1bGuD8baZu0Tfjc1WiC0rTc= -----END CERTIFICATE-----Generated at Tue Sep 16 00:44:00 2025 by rpki-client