$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa File: 1c41f273-037f-34f4-ad80-363fc877481e.roa (raw, json) Hash identifier: 3ba6IyRdPcL4eLChsgkUAOvCfvwwR7RT+Vpn3Yw59o8= Subject key identifier: 85:11:6D:F6:2D:59:11:C9:85:EB:0E:22:40:16:8A:C2:D3:FC:69:60 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFC1BFB1664A6D21DDE8277C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 69.46.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fb:16:64:a6:d2:1d:de:82:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=44e8bcc4-a7f2-4234-b843-d891876f6bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:04:73:e6:3d:2a:71:f6:55:b6:2c:98:86: 8c:3b:7a:7c:bd:50:04:ae:c6:9f:35:87:bd:5b:55: 65:7d:af:9c:80:b7:99:9e:d5:5f:44:9f:31:3b:95: 86:fa:6b:6e:1c:fe:04:f7:0c:07:bc:3e:aa:ad:5a: 0a:a8:22:1a:ba:0a:e7:5d:e0:d2:f2:79:70:e3:a4: 70:41:a9:3f:ca:0a:e6:c1:45:a0:c1:89:74:b3:78: e5:05:0f:1a:b8:5a:7d:b7:02:eb:a4:5f:c9:ba:4d: c5:08:da:b8:07:96:81:4a:f1:b0:db:2e:94:31:23: 14:cb:20:b3:57:65:f5:eb:f8:81:0e:74:f5:e9:b4: 1c:d0:97:a8:af:47:66:2d:71:d5:b6:ad:c2:5f:cd: f7:cf:f9:2c:6f:a6:b2:57:24:69:23:69:6d:b4:b9: 9d:05:37:65:b4:76:a9:5a:ba:1d:af:f3:dc:b0:8f: 51:07:ec:8d:1c:d1:a4:ad:e5:05:35:93:51:c6:e5: 96:77:55:d4:04:f1:14:95:82:d8:92:7d:df:65:d5: ac:9d:61:c7:02:14:7d:cb:42:ce:bd:1d:7f:0c:0c: 86:b7:c4:c9:2e:20:09:4f:97:72:5d:90:97:bb:7a: 3e:3a:83:05:fb:d2:69:af:e4:53:9a:22:6b:a9:ae: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:6D:F6:2D:59:11:C9:85:EB:0E:22:40:16:8A:C2:D3:FC:69:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 69.46.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f2:c0:ce:40:0d:22:70:e0:fc:98:0c:dd:22:58:56:3b:cb: d6:d0:5a:67:c2:e9:f8:5c:c1:28:f7:e6:f9:e4:f9:38:db:f7: 5d:b2:8a:43:fc:5b:83:70:0b:cc:b7:17:f6:40:5b:2c:d7:56: ef:eb:2d:cb:96:ec:24:90:72:0e:bb:fc:e4:82:17:81:2f:9d: 43:c3:41:0e:fd:6a:7e:c3:24:09:21:f1:a5:8e:de:72:a9:78: 62:62:fb:91:bf:24:90:38:f7:f5:3b:36:69:bf:02:dc:33:03: b5:11:41:f9:b5:35:68:60:21:10:7f:e7:1b:22:20:84:c5:2e: 73:bd:8f:85:4d:8a:b0:5d:59:59:1c:71:16:f4:44:48:16:96: da:7d:3d:81:1a:9e:21:78:cf:45:d6:c7:8b:81:60:ae:cb:95: 17:fb:bc:8a:08:e2:b1:1a:25:f8:04:b7:d5:3d:72:bd:01:04: b2:bf:3b:a0:cf:c7:5c:57:29:9b:93:55:80:fd:9f:ee:c3:b4: 64:e8:0c:31:d3:0b:0f:ce:59:b8:4e:92:bd:32:2d:da:57:be: f2:eb:8f:d9:16:f0:24:33:d1:16:cd:b3:4c:14:6d:11:d6:4b: bc:ca:1e:60:0c:e3:b6:0f:79:4c:c4:25:ce:f4:b2:07:63:4e: 2c:ad:9d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/sWZKbSHd6Cd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDRlOGJjYzQtYTdmMi00MjM0LWI4NDMtZDg5MTg3NmY2YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2oEc+Y9KnH2VbYsmIaMO3p8vVAErsafNYe9 W1Vlfa+cgLeZntVfRJ8xO5WG+mtuHP4E9wwHvD6qrVoKqCIaugrnXeDS8nlw46Rw Qak/ygrmwUWgwYl0s3jlBQ8auFp9twLrpF/Juk3FCNq4B5aBSvGw2y6UMSMUyyCz V2X16/iBDnT16bQc0Jeor0dmLXHVtq3CX833z/ksb6ayVyRpI2lttLmdBTdltHap Wrodr/PcsI9RB+yNHNGkreUFNZNRxuWWd1XUBPEUlYLYkn3fZdWsnWHHAhR9y0LO vR1/DAyGt8TJLiAJT5dyXZCXu3o+OoMF+9Jpr+RTmiJrqa5elQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIURbfYtWRHJhesOIkAWisLT/GlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWM0MWYyNzMtMDM3Zi0z NGY0LWFkODAtMzYzZmM4Nzc0ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRS4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ywM5ADSJw4PyYDN0iWFY7y9bQWmfC6fhcwSj35vnk+Tjb912yikP8 W4NwC8y3F/ZAWyzXVu/rLcuW7CSQcg67/OSCF4EvnUPDQQ79an7DJAkh8aWO3nKp eGJi+5G/JJA49/U7Nmm/AtwzA7URQfm1NWhgIRB/5xsiIITFLnO9j4VNirBdWVkc cRb0REgWltp9PYEaniF4z0XWx4uBYK7LlRf7vIoI4rEaJfgEt9U9cr0BBLK/O6DP x1xXKZuTVYD9n+7DtGToDDHTCw/OWbhOkr0yLdpXvvLrj9kW8CQz0RbNs0wUbRHW S7zKHmAM47YPeUzEJc70sgdjTiytncY= -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:31 2025 by rpki-client