$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bac59307-f2a3-35f6-be25-05faa77b4992.roa File: bac59307-f2a3-35f6-be25-05faa77b4992.roa (raw, json) Hash identifier: JCd0phvqiKtQNJBiSKhZZsxZBmY6L+XfR8lthiHn7IY= Subject key identifier: EE:80:70:12:73:DF:C6:9F:A7:CD:C1:81:B6:7B:90:01:A9:DA:56:3F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B23DCDD05DE07904E84630700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bac59307-f2a3-35f6-be25-05faa77b4992.roa Signing time: Tue 09 Sep 2025 18:46:00 +0000 ROA not before: Tue 09 Sep 2025 18:46:00 +0000 ROA not after: Mon 08 Dec 2025 19:46:00 +0000 asID: 7385 IP address blocks: 50.114.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:dc:dd:05:de:07:90:4e:84:63:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 9 18:46:00 2025 GMT Not After : Dec 8 19:46:00 2025 GMT Subject: CN=de421d0f-2add-47e2-8f29-bf9ac5f287b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:30:0b:8e:28:04:7f:7f:05:a7:a9:eb:95: 79:99:e3:2e:9d:a6:e2:51:43:3e:ae:af:30:00:90: cb:d3:ce:da:5c:a4:f4:40:36:b4:97:14:54:4f:41: 1e:32:e7:f2:a3:e2:43:36:21:37:61:79:d8:21:fe: e7:0b:c4:ed:e6:7d:cd:eb:9f:8e:34:2b:7b:34:a9: 97:cf:c3:f9:af:de:fe:0f:e4:8f:a1:7d:fc:1b:de: 0a:9c:12:fa:77:d5:cd:1e:7c:68:2c:9a:48:32:67: 6a:d3:74:c7:22:38:71:b0:da:8d:82:46:da:a6:6a: 57:bc:75:b7:3b:ea:79:fc:7a:55:af:af:0f:43:03: 43:d1:5f:db:83:d3:37:61:56:f2:ab:15:1d:7b:72: 5b:07:13:4e:19:be:50:96:28:d5:61:9c:cf:0b:ee: 2f:91:42:f6:e9:d7:aa:7a:a4:c4:aa:f2:4a:52:39: 90:eb:37:60:0b:8b:c5:4c:71:90:b2:80:ef:08:96: 39:16:06:87:d0:f8:13:bb:68:1c:4a:7d:67:94:ac: dc:d0:4f:8a:c3:74:64:fd:e3:c0:ab:5d:e6:94:4b: e0:7c:9a:9b:ef:f9:0f:17:29:7a:72:1d:65:06:4b: 53:4b:c6:92:04:21:3f:3e:64:8d:37:9b:8b:ee:c0: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:80:70:12:73:DF:C6:9F:A7:CD:C1:81:B6:7B:90:01:A9:DA:56:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bac59307-f2a3-35f6-be25-05faa77b4992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f9:fe:bf:f2:1c:8a:74:fb:6d:ad:0b:bf:3f:30:16:88:ae: a1:56:f0:b0:4a:14:d9:2a:93:2c:87:fe:7c:cd:5a:7b:da:40: 36:b2:93:45:d7:17:a0:e5:c2:d5:68:37:5e:f3:10:9d:0b:1f: 7b:82:6f:01:26:96:fe:d8:64:21:fe:d8:81:da:90:c6:28:5c: 39:88:de:e9:57:d8:f0:48:0c:15:cf:d5:9f:b6:26:b6:67:25: 61:d9:4b:ed:e3:28:a9:89:57:17:4a:09:12:6b:cd:a7:d4:3a: 57:38:36:86:4d:e8:2a:45:a7:01:f4:7d:5c:43:86:84:a3:fc: 68:71:a6:fc:3a:c6:a7:75:44:35:ce:3c:6a:af:bb:0c:29:84: ce:f2:70:e0:d3:97:ff:52:11:3e:7e:61:f9:87:ea:b1:37:9d: 77:99:16:0b:da:a1:e2:4a:75:ef:c0:5a:43:a0:b4:49:99:bf: 95:96:74:75:7a:88:d2:0f:b3:fc:2e:87:8b:e7:20:04:ec:5b: 9a:1a:3f:08:65:d2:9b:8f:88:02:a6:25:47:80:5b:a9:59:8d: 6e:0b:b9:e9:e0:be:06:d9:7a:cd:1b:5f:a1:be:8d:24:b3:29: 91:c1:d0:8c:00:8a:3c:ec:8d:8c:c5:fd:13:24:f2:d5:7e:9b: 53:27:7a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsj3N0F3geQToRjBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkwOTE4NDYwMFoXDTI1MTIwODE5NDYwMFowLzEtMCsGA1UEAxMk ZGU0MjFkMGYtMmFkZC00N2UyLThmMjktYmY5YWM1ZjI4N2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohcwC44oBH9/Baep65V5meMunabiUUM+rq8w AJDL087aXKT0QDa0lxRUT0EeMufyo+JDNiE3YXnYIf7nC8Tt5n3N65+ONCt7NKmX z8P5r97+D+SPoX38G94KnBL6d9XNHnxoLJpIMmdq03THIjhxsNqNgkbapmpXvHW3 O+p5/HpVr68PQwND0V/bg9M3YVbyqxUde3JbBxNOGb5QlijVYZzPC+4vkUL26deq eqTEqvJKUjmQ6zdgC4vFTHGQsoDvCJY5FgaH0PgTu2gcSn1nlKzc0E+Kw3Rk/ePA q13mlEvgfJqb7/kPFyl6ch1lBktTS8aSBCE/PmSNN5uL7sAj5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6AcBJz38afp83BgbZ7kAGp2lY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmFjNTkzMDctZjJhMy0z NWY2LWJlMjUtMDVmYWE3N2I0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/5/r/yHIp0+22tC78/MBaIrqFW8LBKFNkqkyyH/nzNWnvaQDayk0XX F6DlwtVoN17zEJ0LH3uCbwEmlv7YZCH+2IHakMYoXDmI3ulX2PBIDBXP1Z+2JrZn JWHZS+3jKKmJVxdKCRJrzafUOlc4NoZN6CpFpwH0fVxDhoSj/Ghxpvw6xqd1RDXO PGqvuwwphM7ycODTl/9SET5+YfmH6rE3nXeZFgvaoeJKde/AWkOgtEmZv5WWdHV6 iNIPs/wuh4vnIATsW5oaPwhl0puPiAKmJUeAW6lZjW4LuengvgbZes0bX6G+jSSz KZHB0IwAijzsjYzF/RMk8tV+m1MneqI= -----END CERTIFICATE-----Generated at Mon Sep 15 10:47:32 2025 by rpki-client