$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa File: 1f6da251-413c-3667-8773-4dc6a9dda959.roa (raw, json) Hash identifier: eiBGMoWYS0XNwjIsVtNsMV29CynkkAhTbyK0jAC0g44= Subject key identifier: 95:83:1F:48:BC:38:6C:99:C4:B6:DF:DA:E6:96:A5:44:D1:98:0F:7A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BE448964B477B02A06140 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 29802 IP address blocks: 192.211.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e4:48:96:4b:47:7b:02:a0:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=afa0ab6f-b3cb-4878-84bd-3263ae89b639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:fd:9e:23:19:3b:ba:8a:c8:b7:7e:41:09: 51:91:1f:66:30:b3:76:13:ab:8e:45:39:14:3e:8f: 5c:5f:90:4e:81:13:ab:c9:45:cd:58:8e:d4:bc:e3: 62:33:42:48:10:25:d5:c9:37:7b:89:5f:29:62:98: 3f:93:bc:96:0b:93:33:0a:5a:25:bf:6c:58:e5:3c: 8f:9c:53:be:a7:2c:61:ad:d1:67:67:d2:b1:e5:d8: 78:13:36:ba:30:09:04:d1:2d:06:01:a8:58:2b:e8: 1e:99:41:21:10:a2:e3:8c:ad:bb:f9:f6:9c:bd:88: 60:60:86:44:66:37:87:ba:6c:65:7e:4a:cf:20:bc: 82:1c:08:a5:f5:96:1b:43:06:8a:69:30:99:13:2a: 44:e8:ca:11:16:8c:c9:ea:8f:25:3f:3a:78:6e:d7: 70:3b:5a:0f:33:46:e7:e5:c9:8f:fd:bd:9a:dc:17: 10:54:e4:92:37:3d:ec:69:14:17:63:30:b0:f1:55: b4:53:ec:2c:c0:a5:49:2f:63:80:21:3c:28:1a:b1: 4d:5a:dd:c4:cb:99:3e:f4:c6:1f:81:12:1b:0e:9f: 3c:f2:8f:27:d4:2f:2c:b1:3e:0e:64:45:ff:e6:8e: 03:2c:3c:67:fc:07:51:f3:e7:6b:4f:fe:64:f2:3e: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:1F:48:BC:38:6C:99:C4:B6:DF:DA:E6:96:A5:44:D1:98:0F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 192.211.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f1:9a:4c:4c:63:80:de:c1:5d:11:dd:69:99:d0:09:e9:9c: 77:55:c9:97:62:5e:a9:a4:80:f9:37:3d:5b:68:3c:81:14:ac: 91:af:75:b0:b0:bd:d5:9a:e5:79:4e:ba:9b:2a:ec:1c:21:cc: 30:af:c8:5d:bf:99:13:35:de:61:8d:9f:cf:7b:7c:9e:02:bf: 5c:fe:2c:cd:0c:bc:87:b4:02:80:de:fd:77:11:c1:aa:77:c6: f0:2d:56:1b:1d:3e:a5:74:fa:7d:38:cb:7a:9d:20:1b:5a:fd: 0d:0b:85:bc:bf:bf:96:4a:8f:23:dc:a1:f8:f3:28:20:af:15: b5:da:28:ab:3c:b0:3f:73:cb:56:bb:59:bf:7a:c8:3e:3e:81: ec:16:24:46:60:a2:d1:1b:76:f2:4c:10:ac:d8:84:c1:94:43: d1:91:18:9d:0a:65:cc:e6:66:b2:39:18:fc:88:4e:20:8e:fb: e7:17:7d:7b:74:cd:34:32:c4:3b:5b:e5:80:11:7e:28:4c:b6: fc:22:a1:6f:bf:ab:9d:1f:d0:78:f0:62:c2:7f:e6:1b:e1:c2: f7:ad:6f:ed:0b:59:b5:fd:c8:87:03:35:73:5a:ab:3e:cb:e3: 1c:fd:95:60:e2:c6:62:e7:b8:d9:31:c1:bf:7d:65:34:2f:fc: d1:47:2a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+RIlktHewKgYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YWZhMGFiNmYtYjNjYi00ODc4LTg0YmQtMzI2M2FlODliNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCn9niMZO7qKyLd+QQlRkR9mMLN2E6uORTkU Po9cX5BOgROryUXNWI7UvONiM0JIECXVyTd7iV8pYpg/k7yWC5MzClolv2xY5TyP nFO+pyxhrdFnZ9Kx5dh4Eza6MAkE0S0GAahYK+gemUEhEKLjjK27+facvYhgYIZE ZjeHumxlfkrPILyCHAil9ZYbQwaKaTCZEypE6MoRFozJ6o8lPzp4btdwO1oPM0bn 5cmP/b2a3BcQVOSSNz3saRQXYzCw8VW0U+wswKVJL2OAITwoGrFNWt3Ey5k+9MYf gRIbDp888o8n1C8ssT4OZEX/5o4DLDxn/AdR8+drT/5k8j4zhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWDH0i8OGyZxLbf2uaWpUTRmA96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWY2ZGEyNTEtNDEzYy0z NjY3LTg3NzMtNGRjNmE5ZGRhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwNMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPxmkxMY4DewV0R3WmZ0AnpnHdVyZdiXqmkgPk3PVtoPIEUrJGvdbCw vdWa5XlOupsq7BwhzDCvyF2/mRM13mGNn897fJ4Cv1z+LM0MvIe0AoDe/XcRwap3 xvAtVhsdPqV0+n04y3qdIBta/Q0Lhby/v5ZKjyPcofjzKCCvFbXaKKs8sD9zy1a7 Wb96yD4+gewWJEZgotEbdvJMEKzYhMGUQ9GRGJ0KZczmZrI5GPyITiCO++cXfXt0 zTQyxDtb5YARfihMtvwioW+/q50f0HjwYsJ/5hvhwvetb+0LWbX9yIcDNXNaqz7L 4xz9lWDixmLnuNkxwb99ZTQv/NFHKkc= -----END CERTIFICATE-----Generated at Sun Sep 14 13:55:15 2025 by rpki-client