$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/092130a4-c995-35b9-9c67-049e7253eaf9.roa File: 092130a4-c995-35b9-9c67-049e7253eaf9.roa (raw, json) Hash identifier: J5E3ZWnKpfM/DnoMeShEYfh9Degt7jPYb/NYPK6bv8g= Subject key identifier: 67:F3:57:1C:9A:D4:94:21:8F:39:54:8E:59:73:49:90:D8:F1:2F:17 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFEE6A33DD1A9BE48D885F840 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/092130a4-c995-35b9-9c67-049e7253eaf9.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 91.191.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a3:3d:d1:a9:be:48:d8:85:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=d4339bd9-4b60-4ad4-840a-fe8948629b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:4c:74:f1:f5:aa:a9:d5:49:94:1d:08:49: c5:3c:03:d2:9a:4c:12:bf:fe:20:26:e3:9c:6e:a4: a4:b1:7d:4f:57:e3:3c:78:15:17:19:93:6b:a8:07: 43:84:78:cc:dd:b2:15:fe:8f:b9:90:3e:e0:52:87: 3d:99:ac:af:49:9d:bc:f3:9e:73:7e:31:d8:20:99: 5e:98:1d:d9:c3:b2:84:f8:8a:06:ba:16:0d:40:6a: 1a:fc:a2:45:26:bb:18:4c:7f:1b:a0:b5:ed:46:18: 3d:30:38:1e:c2:7b:53:9c:65:0b:4c:f2:0f:a2:7b: 9d:12:72:4b:ba:5b:e9:3c:31:41:19:b4:d0:87:5f: a8:55:11:9f:23:19:a6:0f:4c:07:3e:cf:75:03:24: bf:ed:e0:26:76:49:8a:da:a1:28:94:00:96:f1:e9: 95:43:af:b9:93:a5:82:fe:80:1e:6f:e4:23:e6:61: e7:75:f5:89:36:df:a8:09:33:ac:f2:d5:1a:d4:7e: eb:c7:6f:b8:80:f6:94:f8:d0:8f:72:db:c5:28:52: d1:5c:35:cb:a9:c3:9a:1b:63:78:7e:f8:e1:e9:ed: 1c:ed:cb:e1:51:ec:cd:2f:d7:9b:c2:aa:4c:8c:10: 6c:1d:5c:fe:ed:78:a9:4a:7a:9f:a1:55:b2:39:e1: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:57:1C:9A:D4:94:21:8F:39:54:8E:59:73:49:90:D8:F1:2F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/092130a4-c995-35b9-9c67-049e7253eaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1d:21:76:b3:0d:aa:8a:a5:76:75:18:ce:75:8c:8f:d1:7e: 49:3a:39:95:bc:e4:07:1a:77:fb:14:40:24:1f:22:48:43:24: d3:af:34:8d:aa:65:df:6d:97:06:28:39:d5:39:41:36:7e:d2: c6:23:81:31:24:6e:98:3f:cc:b6:1e:a0:76:73:e8:a6:5e:7c: 17:83:8e:7e:5e:4b:a6:9c:01:ae:70:83:3b:06:fa:f7:62:1b: 83:28:f2:58:a1:bf:49:cf:e0:ef:a6:e2:dd:3d:bf:91:dc:8a: 3c:d9:9c:d4:42:fe:54:07:89:24:c0:9b:17:0a:09:4f:c4:d0: ed:13:fe:64:44:87:b8:45:58:79:ad:42:aa:a6:ed:99:78:66: d0:39:57:75:1a:64:c5:5a:24:3e:74:65:2f:56:29:b4:08:63: 73:38:c1:ae:11:7f:f6:d9:fd:5f:1c:b0:b9:f1:ea:af:0b:e0: fd:c2:a9:fb:70:82:fd:2f:3d:53:18:a0:d5:d0:bf:20:de:62: 28:80:59:2a:18:83:e4:43:4c:2c:2c:c0:9d:1e:04:60:bd:51: 7a:49:47:e8:09:de:08:bd:e3:89:0f:0e:74:84:0a:32:fd:c2: 60:35:ba:01:be:01:db:49:67:8e:9a:21:bf:e0:4e:d4:5a:e0: a1:82:30:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qM90am+SNiF+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDQzMzliZDktNGI2MC00YWQ0LTg0MGEtZmU4OTQ4NjI5YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNBMdPH1qqnVSZQdCEnFPAPSmkwSv/4gJuOc bqSksX1PV+M8eBUXGZNrqAdDhHjM3bIV/o+5kD7gUoc9mayvSZ28855zfjHYIJle mB3Zw7KE+IoGuhYNQGoa/KJFJrsYTH8boLXtRhg9MDgewntTnGULTPIPonudEnJL ulvpPDFBGbTQh1+oVRGfIxmmD0wHPs91AyS/7eAmdkmK2qEolACW8emVQ6+5k6WC /oAeb+Qj5mHndfWJNt+oCTOs8tUa1H7rx2+4gPaU+NCPctvFKFLRXDXLqcOaG2N4 fvjh6e0c7cvhUezNL9ebwqpMjBBsHVz+7XipSnqfoVWyOeE1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfzVxya1JQhjzlUjllzSZDY8S8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDkyMTMwYTQtYzk5NS0z NWI5LTljNjctMDQ5ZTcyNTNlYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUdIXazDaqKpXZ1GM51jI/Rfkk6OZW85Acad/sUQCQfIkhDJNOvNI2q Zd9tlwYoOdU5QTZ+0sYjgTEkbpg/zLYeoHZz6KZefBeDjn5eS6acAa5wgzsG+vdi G4Mo8lihv0nP4O+m4t09v5HcijzZnNRC/lQHiSTAmxcKCU/E0O0T/mREh7hFWHmt Qqqm7Zl4ZtA5V3UaZMVaJD50ZS9WKbQIY3M4wa4Rf/bZ/V8csLnx6q8L4P3Cqftw gv0vPVMYoNXQvyDeYiiAWSoYg+RDTCwswJ0eBGC9UXpJR+gJ3gi944kPDnSECjL9 wmA1ugG+AdtJZ46aIb/gTtRa4KGCMIE= -----END CERTIFICATE-----Generated at Sun Nov 2 00:43:46 2025 by rpki-client