$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa File: 5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json) Hash identifier: xBjaFEl7BOEC8hNdIiK2Ru1Bz/gG2yuN26zc6uSyV74= Subject key identifier: 41:9B:01:7E:86:5D:49:81:39:65:1A:B1:A8:03:13:32:F7:54:49:FA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFC1BF449BA0320F22B6C9E00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 66.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f4:49:ba:03:20:f2:2b:6c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=33995608-3ec9-476c-9550-e03ac3ebf83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:4e:1f:86:ba:7b:42:b4:25:ef:a1:69:43: 5b:23:6a:a6:0a:8c:cb:f1:ae:64:53:cd:80:f5:81: 66:67:4f:44:15:dd:bc:e7:38:c2:c2:b2:63:36:16: 8a:23:63:d0:ac:26:3c:3c:eb:36:86:eb:e8:f4:c1: f3:9c:c5:39:60:d9:a4:bf:96:8d:bb:74:1e:55:02: f3:50:53:91:1e:d0:24:de:d4:68:22:a9:4a:e0:d7: 3b:a8:4c:df:64:e9:45:9a:58:6f:76:31:97:65:c4: 10:63:ef:fa:6a:87:48:63:d6:46:79:d9:4f:67:6c: 16:fa:95:f6:04:72:f4:b1:8a:d9:e4:89:8a:52:60: ef:38:3a:56:44:07:25:2f:a8:fd:03:1d:4c:f3:02: 48:2c:cf:87:cf:07:c7:2f:f6:02:5e:10:92:1c:0f: 63:9b:77:9b:75:8d:38:d1:89:4b:2d:fa:8b:d3:a3: 65:62:49:24:3f:0f:32:84:b6:a6:57:dc:8b:e4:72: 1b:ba:fc:54:b7:87:8f:4a:6d:08:95:52:a5:5a:9d: c0:7c:98:99:0b:a6:db:41:05:d2:ab:46:7c:18:67: 03:02:e0:36:b8:9f:f7:04:1a:38:e1:d5:b8:b3:b6: cc:23:11:ac:36:d9:d8:65:24:b6:8a:5f:85:a9:19: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:01:7E:86:5D:49:81:39:65:1A:B1:A8:03:13:32:F7:54:49:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:16:49:aa:d7:44:77:fc:47:f9:44:4b:6e:51:23:e1:0b:de: 68:16:a8:49:5f:e8:3c:ce:46:5c:22:59:75:24:a8:e1:5b:c2: be:a3:91:44:95:40:5f:59:a7:5d:e2:8e:7e:40:c4:45:a3:1c: 92:23:63:8e:17:52:36:20:3d:37:4b:f5:53:b8:fb:4f:7d:3e: 79:6a:f3:57:6c:14:81:b5:89:8b:b7:18:03:a6:bc:8b:83:99: d0:80:85:d3:b0:76:03:52:aa:92:b7:39:0c:69:fe:3c:f0:25: 7c:ee:8b:22:d3:b5:54:c7:f6:1d:f6:40:b4:73:2e:01:bc:87: 2f:df:da:74:9f:cb:4b:5a:42:6c:90:02:13:dc:ac:38:cc:ec: b2:65:46:f7:ad:c8:db:5b:e0:26:eb:4f:b4:61:dc:07:80:00: d2:8f:35:7d:f8:b0:67:b0:68:b8:5e:32:a1:3f:39:95:22:b3: e0:74:fe:4f:c3:30:b6:b0:77:e1:68:76:5d:a3:1e:22:46:0b: 73:af:a6:2e:15:5d:9d:79:5b:8f:13:ca:27:2a:a0:4f:7e:ef: 6c:3b:0e:8f:11:75:7b:e8:d5:9c:14:1c:4c:0f:e3:43:9f:47: 43:ff:e7:d4:ee:48:94:04:ba:b3:ef:38:1c:d2:1d:14:0d:30: 00:66:bc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/RJugMg8itsngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzM5OTU2MDgtM2VjOS00NzZjLTk1NTAtZTAzYWMzZWJmODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoehOH4a6e0K0Je+haUNbI2qmCozL8a5kU82A 9YFmZ09EFd285zjCwrJjNhaKI2PQrCY8POs2huvo9MHznMU5YNmkv5aNu3QeVQLz UFORHtAk3tRoIqlK4Nc7qEzfZOlFmlhvdjGXZcQQY+/6aodIY9ZGedlPZ2wW+pX2 BHL0sYrZ5ImKUmDvODpWRAclL6j9Ax1M8wJILM+HzwfHL/YCXhCSHA9jm3ebdY04 0YlLLfqL06NlYkkkPw8yhLamV9yL5HIbuvxUt4ePSm0IlVKlWp3AfJiZC6bbQQXS q0Z8GGcDAuA2uJ/3BBo44dW4s7bMIxGsNtnYZSS2il+FqRllBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGbAX6GXUmBOWUasagDEzL3VEn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNWMzODhjOTgtZTY5OC0z NjM0LWExYzctYTIyM2U4MmMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAWSarXRHf8R/lES25RI+EL3mgWqElf6DzORlwiWXUkqOFbwr6jkUSV QF9Zp13ijn5AxEWjHJIjY44XUjYgPTdL9VO4+099Pnlq81dsFIG1iYu3GAOmvIuD mdCAhdOwdgNSqpK3OQxp/jzwJXzuiyLTtVTH9h32QLRzLgG8hy/f2nSfy0taQmyQ AhPcrDjM7LJlRvetyNtb4CbrT7Rh3AeAANKPNX34sGewaLheMqE/OZUis+B0/k/D MLawd+Fodl2jHiJGC3Ovpi4VXZ15W48TyicqoE9+72w7Do8RdXvo1ZwUHEwP40Of R0P/59TuSJQEurPvOBzSHRQNMABmvK4= -----END CERTIFICATE-----Generated at Sun Sep 14 13:58:32 2025 by rpki-client