$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa File: 2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json) Hash identifier: yJH/W36tLLxe63/i5vjJvUb+151Li4T7UabyDP2IZ0U= Subject key identifier: FD:60:D4:4B:31:F8:C4:C2:AE:C1:72:76:A5:DB:04:37:D8:3B:1E:94 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BE409B1F80708C10F5120 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 29802 IP address blocks: 162.220.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e4:09:b1:f8:07:08:c1:0f:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=120d26ad-284a-4ee6-aab2-be441edad1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:af:0f:6b:20:12:28:b6:1b:72:2d:b6:aa: a6:67:17:7b:fb:50:6b:27:e9:0a:af:96:46:f7:a7: 12:72:e8:9c:09:05:0c:e8:f7:e1:87:8d:b7:24:c2: 80:d6:01:30:a7:9e:09:f1:e9:45:7d:c2:59:88:0e: 24:8b:50:00:fc:33:6a:b1:76:95:2e:b7:f9:aa:fd: 6a:d2:77:d5:75:a3:3a:63:04:f3:81:92:c2:6d:d6: 3d:12:fa:74:f5:73:3d:40:91:33:ec:79:ef:d5:3f: be:33:5a:8e:c5:af:e2:97:30:28:2c:b9:39:3c:84: ec:41:16:9e:80:2f:f6:e1:5e:50:26:ae:49:54:a3: a9:ce:96:94:0d:75:82:f8:a2:b3:0d:61:48:d1:32: 1c:9a:a1:b9:fa:d8:e0:20:7d:ae:78:76:52:c8:91: 99:ba:17:d5:af:77:26:b6:03:42:15:5f:b5:f9:26: 05:fd:75:fc:bc:2e:3a:ae:2c:5c:10:6c:30:0a:e0: 1e:39:f7:b4:7a:7f:af:49:b3:dd:6e:78:3e:2a:b0: 43:68:a0:12:d3:7b:52:46:92:88:bd:34:13:b6:9b: 45:03:37:6a:67:77:44:5c:8b:81:f4:26:2c:84:d7: 20:fb:05:36:33:57:6c:96:4c:ac:c6:26:d0:ad:b3: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:D4:4B:31:F8:C4:C2:AE:C1:72:76:A5:DB:04:37:D8:3B:1E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.220.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:46:7a:5d:a4:bd:06:b5:f2:90:35:f3:be:b8:a2:a9:31:9e: e3:77:9f:11:77:0c:45:73:e7:b8:e9:4b:8c:8b:51:84:47:f1: f6:8f:18:d6:34:b2:3c:0a:e1:52:d4:c5:a1:75:47:75:ba:b0: 80:37:ba:29:92:db:ed:03:65:aa:58:25:93:b5:ba:47:b1:e7: ef:27:f9:e4:de:5e:77:69:bb:f2:17:86:ce:77:b1:65:3b:0a: e2:a8:1c:a5:cb:61:70:9b:60:70:e0:28:09:ab:c1:66:e1:1f: 3a:fb:35:22:22:d7:02:f1:74:91:0e:32:cb:f5:06:89:c8:ed: 7f:aa:0d:3a:ae:03:15:fa:2e:30:5e:15:47:35:8b:e9:94:61: 0c:fe:a3:71:12:eb:4f:2c:03:a7:7d:4f:2b:ba:3d:10:df:26: 8b:8e:5f:d2:8c:da:71:8c:0c:04:4e:f6:a2:d0:57:ee:4a:4b: 52:f9:4a:33:98:94:18:17:8a:7d:8b:60:f5:ab:8b:85:ef:52: 9c:fe:b4:39:80:ab:cb:f6:1d:e1:c3:23:ab:34:6e:07:cb:33: cd:5a:13:ec:05:eb:09:70:b7:41:00:fd:95:a1:97:fa:dc:d4: 06:57:9b:1a:cb:64:ad:6b:eb:12:02:8f:53:10:6d:a6:4d:50: 36:59:56:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+QJsfgHCMEPUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTIwZDI2YWQtMjg0YS00ZWU2LWFhYjItYmU0NDFlZGFkMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfuvD2sgEii2G3IttqqmZxd7+1BrJ+kKr5ZG 96cScuicCQUM6Pfhh423JMKA1gEwp54J8elFfcJZiA4ki1AA/DNqsXaVLrf5qv1q 0nfVdaM6YwTzgZLCbdY9Evp09XM9QJEz7Hnv1T++M1qOxa/ilzAoLLk5PITsQRae gC/24V5QJq5JVKOpzpaUDXWC+KKzDWFI0TIcmqG5+tjgIH2ueHZSyJGZuhfVr3cm tgNCFV+1+SYF/XX8vC46rixcEGwwCuAeOfe0en+vSbPdbng+KrBDaKAS03tSRpKI vTQTtptFAzdqZ3dEXIuB9CYshNcg+wU2M1dslkysxibQrbPDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1g1Esx+MTCrsFydqXbBDfYOx6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMmFmMGQxZWUtYTRlZi0z ZTY5LWI4MzMtYTA5MjA5NzY4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBGel2kvQa18pA18764oqkxnuN3nxF3DEVz57jpS4yLUYRH8faPGNY0 sjwK4VLUxaF1R3W6sIA3uimS2+0DZapYJZO1ukex5+8n+eTeXndpu/IXhs53sWU7 CuKoHKXLYXCbYHDgKAmrwWbhHzr7NSIi1wLxdJEOMsv1BonI7X+qDTquAxX6LjBe FUc1i+mUYQz+o3ES608sA6d9Tyu6PRDfJouOX9KM2nGMDARO9qLQV+5KS1L5SjOY lBgXin2LYPWri4XvUpz+tDmAq8v2HeHDI6s0bgfLM81aE+wF6wlwt0EA/ZWhl/rc 1AZXmxrLZK1r6xICj1MQbaZNUDZZVvw= -----END CERTIFICATE-----Generated at Sun Sep 14 13:53:30 2025 by rpki-client