$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa File: 12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa (raw, json) Hash identifier: lOGGgo2Lx2b7dKzo05WRoeCuzxCvTLDXo44DQGlBjRg= Subject key identifier: 9E:4C:BD:A3:54:18:EE:EB:7B:F3:05:62:0F:E2:18:20:B9:25:5D:67 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B047C0263BA7B369D2680FF80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 209.133.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:02:63:ba:7b:36:9d:26:80:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=2dc30e3b-b85a-4f7c-a4fd-01cd0f3f4221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:2d:e0:dd:77:fc:6a:4c:f6:cf:59:f4:99: 08:01:5d:10:27:91:ee:13:0f:ab:36:8c:55:8b:3a: a6:c1:3d:b5:ca:1c:26:1f:f9:11:3e:4a:47:af:75: 72:e9:01:24:18:e7:67:78:b2:28:4b:4a:6a:c6:7b: 3d:0e:c1:64:1b:7d:fe:cb:c4:cf:29:56:88:4d:9c: 6f:ca:36:8d:13:d2:82:10:7b:62:4f:dd:d0:ac:88: 31:09:2c:0e:19:db:bc:43:b3:85:b1:31:e3:84:ec: aa:bc:31:63:52:8e:53:bf:7e:bc:26:bf:2e:08:4d: 19:2d:94:e7:73:a6:d0:af:86:5b:30:76:d4:7b:fa: 8a:04:5e:22:96:9d:54:5e:87:01:9d:e7:16:74:37: ae:c6:4d:03:51:9e:da:1a:49:23:39:f9:6a:4a:67: 5f:f1:e5:03:67:0d:e8:19:64:7d:5b:c4:92:13:73: fa:48:38:f8:9d:7d:a4:39:3c:70:b8:1b:d9:d3:bb: ca:97:26:50:05:7a:9c:a0:ea:7f:f6:bc:c5:3a:a1: 3e:fb:be:15:77:b1:ae:37:32:35:62:1a:df:ad:c2: 8e:bf:5f:59:f8:15:49:50:6a:60:7d:bc:94:5c:3b: 50:f3:c4:7a:51:16:fe:d7:a4:b2:d7:d9:a2:0e:27: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:BD:A3:54:18:EE:EB:7B:F3:05:62:0F:E2:18:20:B9:25:5D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 209.133.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7b:38:a5:ce:7a:bc:4f:39:1f:0c:96:97:89:a9:fe:0c:95: 73:f4:51:ac:12:fa:38:8b:7a:68:3f:fd:f1:ee:d9:eb:13:0a: f8:b8:94:52:e9:ef:0f:fc:af:ff:c6:8d:ac:8d:dd:24:c9:ea: 00:52:e6:8c:fc:41:61:e8:a9:32:2d:85:81:2a:cc:12:f9:d0: 2f:36:5a:82:d1:fc:81:08:17:fd:20:e8:92:3d:57:05:2f:d6: a4:05:b9:60:a4:ec:b6:5f:df:82:6c:70:a3:60:b3:02:12:02: 1d:0c:24:0c:43:5e:8c:df:51:47:cf:fc:94:4d:bd:33:57:32: d1:e2:4a:d8:20:3e:38:c9:86:3c:80:0f:9e:17:31:7b:3c:9a: cb:69:79:aa:6c:dc:23:82:53:14:6c:71:e4:70:9f:76:3f:e4: 1a:b3:e8:16:6b:a7:14:bd:66:12:2d:14:db:e8:77:8a:bd:7f: 55:ee:5a:5a:13:17:1d:39:47:b6:ff:0a:40:19:08:69:e2:ad: 1e:4a:dd:f6:12:26:a5:bf:08:2c:5d:22:67:21:40:76:b9:88: 84:fe:7c:5f:57:11:4e:56:71:ec:3d:55:14:75:a6:dd:a6:93: b2:a4:2f:ea:83:49:35:6f:d4:e4:0c:eb:f0:00:34:ec:73:6e: 90:37:97:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAJjuns2nSaA/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmRjMzBlM2ItYjg1YS00ZjdjLWE0ZmQtMDFjZDBmM2Y0MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Et4N13/GpM9s9Z9JkIAV0QJ5HuEw+rNoxV izqmwT21yhwmH/kRPkpHr3Vy6QEkGOdneLIoS0pqxns9DsFkG33+y8TPKVaITZxv yjaNE9KCEHtiT93QrIgxCSwOGdu8Q7OFsTHjhOyqvDFjUo5Tv368Jr8uCE0ZLZTn c6bQr4ZbMHbUe/qKBF4ilp1UXocBnecWdDeuxk0DUZ7aGkkjOflqSmdf8eUDZw3o GWR9W8SSE3P6SDj4nX2kOTxwuBvZ07vKlyZQBXqcoOp/9rzFOqE++74Vd7GuNzI1 YhrfrcKOv19Z+BVJUGpgfbyUXDtQ88R6URb+16Sy19miDiclpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5MvaNUGO7re/MFYg/iGCC5JV1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTJlOGFiZDgtMmNmYy0z ZTUxLWI1M2MtZDE1MmYyYjNhMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ7OKXOerxPOR8MlpeJqf4MlXP0UawS+jiLemg//fHu2esTCvi4lFLp 7w/8r//GjayN3STJ6gBS5oz8QWHoqTIthYEqzBL50C82WoLR/IEIF/0g6JI9VwUv 1qQFuWCk7LZf34JscKNgswISAh0MJAxDXozfUUfP/JRNvTNXMtHiStggPjjJhjyA D54XMXs8mstpeaps3COCUxRsceRwn3Y/5Bqz6BZrpxS9ZhItFNvod4q9f1XuWloT Fx05R7b/CkAZCGnirR5K3fYSJqW/CCxdImchQHa5iIT+fF9XEU5Wcew9VRR1pt2m k7KkL+qDSTVv1OQM6/AANOxzbpA3l4s= -----END CERTIFICATE-----Generated at Sun Nov 2 00:41:31 2025 by rpki-client