$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa File: 01549ba4-9860-36fa-802e-973645dc8779.roa (raw, json) Hash identifier: VGou3Hw0Wet2RxIOwu4PF2fZaK039+D5pNwtliIQY5g= Subject key identifier: FB:32:88:57:D9:0B:14:6A:21:D2:E2:BE:9A:D2:40:45:04:57:29:56 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFC1BF4596D5FC837305B3BA0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 68.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f4:59:6d:5f:c8:37:30:5b:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=5b73f261-e625-4b82-a4a9-b519c0a792d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:92:d6:bf:76:d9:e6:99:f4:9d:24:af:8c: 3a:74:99:3d:b8:88:59:23:5a:19:51:aa:d5:b1:85: 99:ab:d0:97:a5:33:46:42:fd:7a:21:fe:9d:6d:98: e3:ef:6f:1f:37:8b:7f:d3:d0:4c:6c:a9:99:a4:ea: ee:51:8f:6a:2e:7b:eb:14:33:67:8f:71:47:6d:9a: 2e:19:13:59:a3:32:dd:d3:55:d2:44:64:80:4e:4a: 16:3c:25:21:2f:a1:fc:20:a9:2f:e4:ae:23:8f:35: c3:42:b4:a7:d3:e1:c2:75:6a:be:f6:5b:47:eb:06: 72:7d:c9:4c:54:ce:b2:0d:b9:f3:66:58:c5:76:41: d5:cd:6e:67:56:e2:23:89:c7:e6:c8:5b:30:22:7b: f2:80:db:60:72:ba:91:56:26:c0:5e:24:b7:83:33: da:12:93:b1:fb:e0:45:57:27:e4:40:53:e8:c2:be: 41:20:ab:09:11:d3:c8:66:f0:52:41:cc:36:8a:e1: 6d:1c:4e:d0:88:cf:69:e2:ed:c4:0b:d8:03:a4:40: 36:79:67:c7:82:93:59:38:e0:f0:63:a7:38:c9:7d: 89:4d:8e:88:4d:51:86:a0:30:67:a5:58:d8:12:59: d7:6b:53:d1:78:ee:67:1b:11:b2:6d:ba:39:f9:17: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:88:57:D9:0B:14:6A:21:D2:E2:BE:9A:D2:40:45:04:57:29:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 68.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:60:06:4e:cc:1a:d3:01:2c:98:02:76:fd:a0:2c:e8:3e:9d: b1:a0:fa:2d:c3:3e:cc:e5:07:41:7a:a1:89:3a:0e:cc:e6:68: 65:d6:95:09:e5:95:b8:93:f4:4a:54:7a:13:cd:0b:19:25:83: a6:02:33:01:56:64:70:26:ea:0a:0c:8b:26:e4:d4:b3:e1:3e: 77:ef:50:f0:b1:01:d1:f8:8b:d3:9f:f4:e8:4c:4e:17:f2:af: 2e:01:06:d6:35:c0:c3:fb:68:93:ca:b3:36:1d:9e:83:8a:2c: ca:16:5f:87:d0:0c:06:b3:29:50:8a:f3:2e:d5:5d:c2:a8:a8: b9:19:33:91:76:1b:88:64:96:4c:b4:3c:59:d7:78:5a:31:de: 54:65:75:cb:14:00:e4:28:c6:75:88:4c:66:82:b4:88:cd:12: 34:46:8f:a5:10:2e:36:c8:97:4d:d6:ee:8a:72:fa:7e:fb:16: 5c:4f:de:6d:4f:a5:41:2a:e1:c3:4d:ff:14:f9:c8:84:f3:38: 90:e5:32:93:e0:77:42:31:94:e7:61:b8:ae:f6:88:9e:02:d8: 6c:d6:80:d4:87:10:b7:af:fb:93:03:13:68:14:c9:3c:97:71: ec:72:f9:b2:4c:b4:52:bc:66:83:d9:24:e5:7c:18:55:4a:62: b7:df:6b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/RZbV/INzBbO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NWI3M2YyNjEtZTYyNS00YjgyLWE0YTktYjUxOWMwYTc5MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWSS1r922eaZ9J0kr4w6dJk9uIhZI1oZUarV sYWZq9CXpTNGQv16If6dbZjj728fN4t/09BMbKmZpOruUY9qLnvrFDNnj3FHbZou GRNZozLd01XSRGSATkoWPCUhL6H8IKkv5K4jjzXDQrSn0+HCdWq+9ltH6wZyfclM VM6yDbnzZljFdkHVzW5nVuIjicfmyFswInvygNtgcrqRVibAXiS3gzPaEpOx++BF VyfkQFPowr5BIKsJEdPIZvBSQcw2iuFtHE7QiM9p4u3EC9gDpEA2eWfHgpNZOODw Y6c4yX2JTY6ITVGGoDBnpVjYElnXa1PReO5nGxGybbo5+RfeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsyiFfZCxRqIdLivprSQEUEVylWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDE1NDliYTQtOTg2MC0z NmZhLTgwMmUtOTczNjQ1ZGM4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtgBk7MGtMBLJgCdv2gLOg+nbGg+i3DPszlB0F6oYk6DszmaGXWlQnl lbiT9EpUehPNCxklg6YCMwFWZHAm6goMiybk1LPhPnfvUPCxAdH4i9Of9OhMThfy ry4BBtY1wMP7aJPKszYdnoOKLMoWX4fQDAazKVCK8y7VXcKoqLkZM5F2G4hklky0 PFnXeFox3lRldcsUAOQoxnWITGaCtIjNEjRGj6UQLjbIl03W7opy+n77FlxP3m1P pUEq4cNN/xT5yITzOJDlMpPgd0IxlOdhuK72iJ4C2GzWgNSHELev+5MDE2gUyTyX cexy+bJMtFK8ZoPZJOV8GFVKYrffayA= -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:30 2025 by rpki-client