$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa File: 35845682-94ac-38cb-ac24-db77ba9d4c9a.roa (raw, json) Hash identifier: s1ygwwOXICIfRAkAKermvNEv/Sd0cr6tErIF8qQa0lE= Subject key identifier: 3A:09:B0:18:6F:2B:7E:11:11:7A:87:1E:2E:64:03:E5:BD:E8:23:A7 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BE873FFE7A7C77C4F2E00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 29802 IP address blocks: 162.252.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e8:73:ff:e7:a7:c7:7c:4f:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=6f2787aa-c00c-41cb-b874-609579cc376a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:d1:15:48:b0:e9:9b:11:ba:16:16:dc:a6: a7:0f:cf:a4:a6:16:a0:89:c9:d5:47:ff:8f:53:a9: 10:73:03:64:81:1f:0c:9a:6d:61:ae:75:43:1f:af: 9e:26:a1:02:3b:fc:76:3d:01:fb:b6:2f:a5:1a:d8: b2:e4:c9:f4:2a:75:75:f2:76:0d:59:29:d5:de:e1: 5d:c8:b1:74:b0:e5:aa:87:a3:03:04:aa:2e:6f:8e: 94:47:61:c8:98:a9:63:af:7a:af:05:8e:07:dc:10: 94:f6:34:3b:bc:b1:65:87:4d:ae:65:94:8f:0a:fc: 15:69:29:5f:1c:b5:54:db:93:35:c5:8c:e6:2a:1a: a1:cd:5f:90:e2:dd:5c:2b:ad:4e:b4:92:f0:ba:96: 7f:0e:0f:f4:34:54:67:65:fd:89:2b:b6:3d:b7:ac: 9f:a8:de:f3:ed:06:69:d1:8c:b2:58:98:31:c1:90: da:97:b5:fa:e9:fb:94:51:61:c9:5f:69:26:d5:75: ca:ff:09:6f:17:fb:21:c2:50:3b:a8:b0:29:df:32: 3c:bb:f0:73:08:c0:7a:8f:4c:18:b9:07:77:c9:73: ba:ba:f9:09:38:a1:c0:d0:af:fb:14:49:34:cf:b6: b2:ed:c3:57:63:9b:64:43:b1:45:b2:d7:d1:f9:88: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:09:B0:18:6F:2B:7E:11:11:7A:87:1E:2E:64:03:E5:BD:E8:23:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.252.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:78:b7:45:39:12:ef:a1:00:6f:82:59:9e:7f:da:4a:dc:38: 20:9c:45:62:e9:40:65:c6:b1:33:f4:e9:8f:43:ca:3b:2d:99: c9:11:aa:e2:84:95:da:34:44:b8:17:72:54:81:5c:f8:06:90: dc:0e:a0:bc:95:f1:65:e7:2c:d0:ca:27:e6:26:b8:a1:1b:fb: 85:46:ca:c6:d3:2b:7f:28:e1:aa:3b:8a:21:cc:fc:b7:00:42: ff:da:46:5d:6d:e9:77:0b:5d:ba:2b:bf:2d:aa:b0:a2:fb:d1: 47:b5:44:73:6c:5e:43:4b:49:ed:46:cc:1b:82:48:ec:83:a5: e2:98:16:94:d9:36:2c:ab:72:a4:9c:78:44:9f:a4:b1:56:cc: 22:28:8e:52:76:3c:9c:55:16:5b:06:25:8b:d6:78:20:f5:3b: 0b:ff:dd:73:0d:6a:f3:14:ad:86:f8:8e:ae:38:fc:5a:35:80: f9:87:51:4a:69:82:e5:31:76:97:9d:d6:d5:95:56:d5:87:9e: 9d:76:c4:65:03:5a:e7:85:df:4d:82:ee:54:93:f1:5b:59:1b: d6:ee:3c:40:5e:42:36:56:01:96:d9:d4:47:c7:96:c3:38:fc: 9d:4a:30:8a:1a:bb:86:c2:11:d5:0a:6e:82:d3:68:6e:c5:01: 2a:7a:d6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+hz/+enx3xPLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NmYyNzg3YWEtYzAwYy00MWNiLWI4NzQtNjA5NTc5Y2MzNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAbRFUiw6ZsRuhYW3KanD8+kphagicnVR/+P U6kQcwNkgR8Mmm1hrnVDH6+eJqECO/x2PQH7ti+lGtiy5Mn0KnV18nYNWSnV3uFd yLF0sOWqh6MDBKoub46UR2HImKljr3qvBY4H3BCU9jQ7vLFlh02uZZSPCvwVaSlf HLVU25M1xYzmKhqhzV+Q4t1cK61OtJLwupZ/Dg/0NFRnZf2JK7Y9t6yfqN7z7QZp 0YyyWJgxwZDal7X66fuUUWHJX2km1XXK/wlvF/shwlA7qLAp3zI8u/BzCMB6j0wY uQd3yXO6uvkJOKHA0K/7FEk0z7ay7cNXY5tkQ7FFstfR+YjOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoJsBhvK34REXqHHi5kA+W96COnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzU4NDU2ODItOTRhYy0z OGNiLWFjMjQtZGI3N2JhOWQ0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN4t0U5Eu+hAG+CWZ5/2krcOCCcRWLpQGXGsTP06Y9DyjstmckRquKE ldo0RLgXclSBXPgGkNwOoLyV8WXnLNDKJ+YmuKEb+4VGysbTK38o4ao7iiHM/LcA Qv/aRl1t6XcLXborvy2qsKL70Ue1RHNsXkNLSe1GzBuCSOyDpeKYFpTZNiyrcqSc eESfpLFWzCIojlJ2PJxVFlsGJYvWeCD1Owv/3XMNavMUrYb4jq44/Fo1gPmHUUpp guUxdped1tWVVtWHnp12xGUDWueF302C7lST8VtZG9buPEBeQjZWAZbZ1EfHlsM4 /J1KMIoau4bCEdUKboLTaG7FASp61tk= -----END CERTIFICATE-----Generated at Sun Sep 14 13:56:38 2025 by rpki-client