$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa File: 1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa (raw, json) Hash identifier: y1WFHhYsTmBX9zmkK1J3QbuOu2qfUHIWnm5Pc0WNXj8= Subject key identifier: CF:3F:56:6F:67:5D:58:93:8C:F4:DF:D4:10:CF:79:92:57:15:1E:FA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B047BFE50B92D41F3D2DF5D40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 10480 IP address blocks: 199.91.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fe:50:b9:2d:41:f3:d2:df:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b7e5f8ba-5f67-47a7-9be7-7948e0dfb6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:7c:05:00:3a:28:91:8b:eb:80:03:4e:3d: 13:ed:e9:24:34:8d:55:03:6d:91:da:c2:e6:4f:56: 67:b8:2e:db:6c:87:4a:a1:f8:c6:46:81:03:74:65: fe:b3:df:c1:8c:5e:2f:fc:1a:08:88:02:cd:20:0e: d7:90:b1:e1:0d:6a:bc:d2:12:a8:e4:93:7f:08:26: 73:58:2b:75:7c:59:80:bb:2b:f5:b3:a5:be:41:7f: 10:e3:44:07:82:79:0f:aa:d8:b0:ab:aa:27:e7:dd: 38:64:62:86:c5:a3:f1:f4:6d:04:14:73:6c:15:27: a5:db:d2:36:4b:cd:82:09:d6:98:67:69:07:8a:a1: 66:4c:59:01:17:f7:f5:20:ba:5b:92:e8:ae:a2:da: da:0a:4e:78:54:35:ab:bb:0e:35:10:26:19:2f:fc: d8:79:61:45:23:d3:a8:41:9d:74:94:dd:e0:cd:18: ea:29:f3:d2:9d:19:5f:1f:6d:ea:f7:a4:8c:b4:a9: 32:fc:28:7f:69:c4:b5:df:1a:75:5f:5c:98:81:d3: 34:f4:7d:dd:21:26:8e:1d:1c:8b:49:0c:3e:7d:51: 64:82:41:6e:ba:88:4b:07:5d:42:77:8c:67:2f:f0: 6b:fb:9d:d0:d7:88:97:5e:6b:88:2c:f6:76:1e:68: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:56:6F:67:5D:58:93:8C:F4:DF:D4:10:CF:79:92:57:15:1E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.91.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:12:23:0a:50:c4:57:0b:dd:22:8d:45:0d:35:7e:02:4c:42: f7:e3:63:5c:e1:5e:f1:c4:d4:b4:35:a1:ee:2b:a4:02:08:64: 04:a6:55:47:60:e0:d5:56:85:c0:f6:c9:62:10:ae:95:57:de: 4d:7c:45:43:fb:d7:b9:bf:81:7f:e9:af:f2:eb:0d:1e:0a:c9: 66:42:16:0b:77:ad:bf:91:d1:80:bc:c4:a7:c5:22:72:88:d5: f9:1c:c6:62:05:ae:1e:46:3b:e5:16:92:b2:c4:07:10:0a:33: 98:e3:c8:45:bb:5c:c9:d5:0a:4f:f1:5f:9e:2e:8f:49:9c:0c: fe:a0:87:c7:4a:49:01:5b:9c:78:40:47:29:41:72:b7:19:f6: 3b:90:b3:ce:c6:39:b9:7d:22:5f:a7:c9:31:6e:1f:39:26:ed: 2f:6a:5b:b2:1e:e8:63:97:8f:fa:bb:e7:66:a3:da:20:d5:f9: 1a:e4:a8:48:3b:ae:3a:70:c1:46:dc:33:8c:82:3f:fb:30:ae: 26:4a:54:3f:4e:74:d3:86:82:2d:28:33:27:57:60:b5:4b:45: a1:bd:e1:bf:56:de:7b:40:6e:8a:61:17:bf:bf:6b:a4:77:29: ef:66:0e:00:3d:31:7f:0e:e0:a0:c7:24:ed:0c:e1:14:b8:45: 70:3e:fa:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/5QuS1B89LfXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjdlNWY4YmEtNWY2Ny00N2E3LTliZTctNzk0OGUwZGZiNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDx8BQA6KJGL64ADTj0T7ekkNI1VA22R2sLm T1ZnuC7bbIdKofjGRoEDdGX+s9/BjF4v/BoIiALNIA7XkLHhDWq80hKo5JN/CCZz WCt1fFmAuyv1s6W+QX8Q40QHgnkPqtiwq6on5904ZGKGxaPx9G0EFHNsFSel29I2 S82CCdaYZ2kHiqFmTFkBF/f1ILpbkuiuotraCk54VDWruw41ECYZL/zYeWFFI9Oo QZ10lN3gzRjqKfPSnRlfH23q96SMtKky/Ch/acS13xp1X1yYgdM09H3dISaOHRyL SQw+fVFkgkFuuohLB11Cd4xnL/Br+53Q14iXXmuILPZ2HmhSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8/Vm9nXViTjPTf1BDPeZJXFR76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWUzZDhkNTAtYThmNy0z ZDE3LWI1ZDEtNzAxOGQ2NjAxZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUSIwpQxFcL3SKNRQ01fgJMQvfjY1zhXvHE1LQ1oe4rpAIIZASmVUdg 4NVWhcD2yWIQrpVX3k18RUP717m/gX/pr/LrDR4KyWZCFgt3rb+R0YC8xKfFInKI 1fkcxmIFrh5GO+UWkrLEBxAKM5jjyEW7XMnVCk/xX54uj0mcDP6gh8dKSQFbnHhA RylBcrcZ9juQs87GObl9Il+nyTFuHzkm7S9qW7Ie6GOXj/q752aj2iDV+RrkqEg7 rjpwwUbcM4yCP/swriZKVD9OdNOGgi0oMydXYLVLRaG94b9W3ntAbophF7+/a6R3 Ke9mDgA9MX8O4KDHJO0M4RS4RXA++ho= -----END CERTIFICATE-----Generated at Sun Sep 14 13:46:40 2025 by rpki-client