$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa File: 1503d505-5194-36e4-8547-82404b18ae4c.roa (raw, json) Hash identifier: 7FgMAUAZ3DzbCvQhQWU6W0RxYOGtYYxZtdOizpOMuFk= Subject key identifier: 92:62:31:C9:92:6D:7D:98:8D:5C:29:6B:E4:A3:E8:87:02:F9:71:48 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A698B24BF97012425FAF64280 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 401298 IP address blocks: 66.96.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:24:bf:97:01:24:25:fa:f6:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=99844a6a-28de-4d4c-9842-2f9c8aea1b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:b1:1f:70:a7:98:e1:a3:f8:35:fd:1e:b5: 5a:b4:22:89:4c:1a:ed:a4:2c:5d:a8:55:2a:c1:04: 97:27:bc:6a:82:ce:38:54:f5:af:c1:2c:1e:c6:27: 17:46:ed:95:ff:b0:b6:2c:78:5b:2f:f6:32:c5:2e: 85:35:23:9f:50:c7:24:c4:67:f4:f3:8f:6d:e2:9c: 78:7d:7f:08:e3:2f:39:29:28:2d:a1:6f:56:e2:87: 6f:d4:67:47:11:5f:45:df:10:f7:57:49:19:35:03: ae:b9:e9:3c:1b:e1:21:51:04:3a:d7:77:4b:9b:c4: 3e:df:4d:2e:8e:ae:8c:f4:84:ee:88:01:d6:29:88: b5:33:fb:da:2a:74:cf:4e:a0:6b:c1:e0:c6:fb:ed: 5c:10:03:b3:58:09:b3:f6:b1:08:b4:a6:2b:78:1c: 90:e0:37:85:0f:1d:d1:5c:46:70:42:28:0e:0f:93: 29:7a:c2:a5:e9:3e:ab:9e:98:4a:f3:12:85:42:6a: 41:a7:5d:82:3e:c4:cf:7c:e0:67:55:3e:53:6b:01: fa:aa:3d:41:af:e1:c2:af:22:66:d8:95:9e:97:41: e7:52:2f:91:17:40:32:04:49:4c:ab:f3:ca:82:36: f3:3d:db:a3:c6:7e:47:12:a7:cb:3a:a0:dd:ec:00: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:62:31:C9:92:6D:7D:98:8D:5C:29:6B:E4:A3:E8:87:02:F9:71:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c8:63:1e:99:ca:d8:e0:e2:d4:db:96:b9:40:88:26:ab:d8: da:8b:22:d6:08:14:dd:5a:88:2a:87:2c:bd:4d:51:be:00:a4: 69:0a:2f:7d:18:76:aa:b9:67:e7:49:9a:e9:f6:2f:dc:47:9b: 64:e1:8e:af:ab:13:be:62:4b:76:2d:86:e5:55:45:5b:f8:43: 66:96:62:b4:85:b5:fc:35:9a:54:aa:24:e2:e4:46:3d:8a:1a: f2:d5:88:d3:b1:d3:fa:14:9a:10:b0:b2:50:cb:75:32:ae:fb: d4:9f:54:cf:e6:8a:d5:6e:43:7c:0d:31:08:af:64:c3:11:c2: 33:a6:06:d4:03:a5:72:c2:f9:58:62:f2:8b:48:27:2e:64:df: 5e:60:58:19:36:bc:81:7b:01:d0:07:bf:6a:f4:b9:ea:0a:51: 6d:22:bf:00:b6:a1:07:89:f2:65:ca:c5:a5:ee:be:99:3c:9d: 8b:4c:38:47:d0:3a:9e:d1:1c:c0:83:47:dd:49:42:4c:9f:e2: e6:58:a1:f7:fe:76:32:c5:38:0d:19:77:52:81:c8:fb:cb:04: b4:c7:fd:72:02:85:71:bf:20:cd:e4:6f:a4:18:db:9a:fc:da: 50:b7:15:08:c3:88:1d:7c:80:49:0d:b9:87:1a:3d:cd:55:36: 08:a1:8a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyS/lwEkJfr2QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk OTk4NDRhNmEtMjhkZS00ZDRjLTk4NDItMmY5YzhhZWExYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vCxH3CnmOGj+DX9HrVatCKJTBrtpCxdqFUq wQSXJ7xqgs44VPWvwSwexicXRu2V/7C2LHhbL/YyxS6FNSOfUMckxGf0849t4px4 fX8I4y85KSgtoW9W4odv1GdHEV9F3xD3V0kZNQOuuek8G+EhUQQ613dLm8Q+300u jq6M9ITuiAHWKYi1M/vaKnTPTqBrweDG++1cEAOzWAmz9rEItKYreByQ4DeFDx3R XEZwQigOD5MpesKl6T6rnphK8xKFQmpBp12CPsTPfOBnVT5TawH6qj1Br+HCryJm 2JWel0HnUi+RF0AyBElMq/PKgjbzPdujxn5HEqfLOqDd7ABvYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJiMcmSbX2YjVwpa+Sj6IcC+XFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTUwM2Q1MDUtNTE5NC0z NmU0LTg1NDctODI0MDRiMThhZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjIYx6Zytjg4tTblrlAiCar2NqLItYIFN1aiCqHLL1NUb4ApGkKL30Y dqq5Z+dJmun2L9xHm2Thjq+rE75iS3YthuVVRVv4Q2aWYrSFtfw1mlSqJOLkRj2K GvLViNOx0/oUmhCwslDLdTKu+9SfVM/mitVuQ3wNMQivZMMRwjOmBtQDpXLC+Vhi 8otIJy5k315gWBk2vIF7AdAHv2r0ueoKUW0ivwC2oQeJ8mXKxaXuvpk8nYtMOEfQ Op7RHMCDR91JQkyf4uZYoff+djLFOA0Zd1KByPvLBLTH/XIChXG/IM3kb6QY25r8 2lC3FQjDiB18gEkNuYcaPc1VNgihiiA= -----END CERTIFICATE-----Generated at Sat Jul 26 11:52:11 2025 by rpki-client