$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa File: 9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa (raw, json) Hash identifier: +a5trGLEiUx4fdSNhU48tNRbDjd7FnLkvWSLiY3iwjo= Subject key identifier: 67:68:C5:B4:4B:FF:27:1E:09:73:49:1F:82:4A:27:A4:2D:FF:53:05 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A698B24DBC2E08AA50EE88F20 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 401299 IP address blocks: 66.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:24:db:c2:e0:8a:a5:0e:e8:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=3fe05e22-820d-48fd-aeaf-826cddc52694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:f5:e6:c3:9c:68:57:65:d1:c7:1d:75:b0: 0f:a7:81:11:40:d9:35:80:df:cc:77:a6:58:61:58: 9a:c9:25:de:bb:fb:c2:51:52:fb:1c:6c:8e:70:87: 44:fa:dc:ee:9c:2e:f9:02:0f:1d:b7:4a:55:e8:b2: 67:42:be:60:ee:9e:b1:83:1d:a2:4f:b0:7a:95:c6: c0:11:18:0c:83:84:94:32:0d:b5:e1:67:49:51:e2: 62:80:c3:34:31:7c:d6:30:fb:c2:e2:e5:9e:be:1e: 09:86:ca:c4:73:d9:7a:83:bf:5c:67:e3:6c:c5:ef: 30:5e:80:62:11:b8:c2:a9:1b:f3:3c:90:78:b0:48: ca:6e:8b:df:93:ec:6d:49:7d:29:37:09:e8:b6:6a: 6b:92:e8:98:45:3d:65:bb:5f:b0:49:f5:75:3b:08: 48:16:ab:82:f0:db:ff:6f:6b:21:ac:3a:b3:67:f7: 25:75:f2:30:84:a2:7b:9b:ef:41:55:08:a8:0d:16: 42:97:2e:78:36:57:dc:a5:bb:e4:da:1a:fe:b5:72: bd:a0:fe:1a:33:31:46:1a:d0:f1:65:7a:91:b2:f5: 1c:01:33:69:80:2b:f0:32:9e:e6:17:d5:09:7b:f4: e0:fd:26:1b:81:f2:01:96:f9:f6:df:0c:04:ec:57: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:C5:B4:4B:FF:27:1E:09:73:49:1F:82:4A:27:A4:2D:FF:53:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d9:4d:15:bb:48:e8:41:65:52:97:2d:70:83:a5:af:76:1d: 12:94:9f:37:3c:a6:5b:44:1e:1d:80:14:4d:f9:ad:16:0f:ed: d1:65:81:68:86:b8:85:80:cc:97:b6:b1:21:3e:10:d4:e1:0c: b7:f3:82:68:93:21:21:59:a0:ef:b8:1b:d1:c5:1c:1d:d2:cc: 5b:7e:d2:2d:9b:c3:48:23:a6:3e:72:7d:2f:f4:93:08:40:4f: b5:b1:25:be:04:1b:00:90:ff:14:47:66:0b:39:1d:49:85:f1: ec:1e:8c:b4:59:f4:52:92:fe:bd:2f:c7:0c:55:0e:60:95:fc: bd:81:9e:af:89:84:09:d8:13:db:59:21:e4:b3:a5:1d:bb:98: 90:c7:ad:a2:6d:bc:e1:83:ed:e2:03:c7:65:42:8e:48:0c:4a: fc:52:94:c0:a1:5a:e4:c8:5f:1b:c7:0a:bb:e3:57:e8:b2:8c: ce:3f:79:97:a3:80:e8:c6:83:35:e6:3a:cb:9d:3b:c8:8d:48: 3e:a8:d8:c2:66:ab:34:77:70:48:fe:94:9d:9f:c9:36:31:2d: 17:84:c6:46:db:cf:fe:95:70:2e:b9:6a:aa:b0:42:f5:fa:19: dd:eb:ee:ef:38:00:d2:d4:95:e2:48:7d:30:44:14:1d:ff:44: d7:54:f7:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyTbwuCKpQ7ojyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk M2ZlMDVlMjItODIwZC00OGZkLWFlYWYtODI2Y2RkYzUyNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG/15sOcaFdl0ccddbAPp4ERQNk1gN/Md6ZY YViaySXeu/vCUVL7HGyOcIdE+tzunC75Ag8dt0pV6LJnQr5g7p6xgx2iT7B6lcbA ERgMg4SUMg214WdJUeJigMM0MXzWMPvC4uWevh4JhsrEc9l6g79cZ+Nsxe8wXoBi EbjCqRvzPJB4sEjKbovfk+xtSX0pNwnotmprkuiYRT1lu1+wSfV1OwhIFquC8Nv/ b2shrDqzZ/cldfIwhKJ7m+9BVQioDRZCly54Nlfcpbvk2hr+tXK9oP4aMzFGGtDx ZXqRsvUcATNpgCvwMp7mF9UJe/Tg/SYbgfIBlvn23wwE7FfS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdoxbRL/yceCXNJH4JKJ6Qt/1MFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOWU3ZTA1N2EtZDA3Zi0z NTFkLWIyODEtYTJjNmNmNzEzYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnZTRW7SOhBZVKXLXCDpa92HRKUnzc8pltEHh2AFE35rRYP7dFlgWiG uIWAzJe2sSE+ENThDLfzgmiTISFZoO+4G9HFHB3SzFt+0i2bw0gjpj5yfS/0kwhA T7WxJb4EGwCQ/xRHZgs5HUmF8ewejLRZ9FKS/r0vxwxVDmCV/L2Bnq+JhAnYE9tZ IeSzpR27mJDHraJtvOGD7eIDx2VCjkgMSvxSlMChWuTIXxvHCrvjV+iyjM4/eZej gOjGgzXmOsudO8iNSD6o2MJmqzR3cEj+lJ2fyTYxLReExkbbz/6VcC65aqqwQvX6 Gd3r7u84ANLUleJIfTBEFB3/RNdU9xs= -----END CERTIFICATE-----Generated at Sun Jul 27 10:12:08 2025 by rpki-client