$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa File: 8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa (raw, json) Hash identifier: VJOCTEDONJOhNBcLBCEi6fUK/ubddnvQJh5lBVOnAfo= Subject key identifier: 06:36:F8:B5:5A:8D:EE:42:FE:99:8D:6F:78:80:0A:96:BD:A4:C9:8D Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFEE6A3C101E3B5C62BC3B0C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 54540 IP address blocks: 144.168.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a3:c1:01:e3:b5:c6:2b:c3:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=bcda9c8b-291f-44a9-8af1-f21adfcc4c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:78:8a:9b:e7:0a:9e:6b:06:8c:1c:73:10: 82:4c:93:90:f3:55:ed:75:5f:62:31:63:a7:4f:07: 43:ee:80:bb:10:ca:f9:dd:0f:ee:da:56:11:23:fc: b9:4e:35:c9:9b:13:fd:d3:5f:b0:be:f5:1f:de:ff: 14:dc:4f:2a:7e:c1:30:d2:51:de:d2:2a:ce:01:c8: 62:eb:96:8d:46:84:32:36:d6:6c:de:9a:d6:37:07: cc:1f:d3:a5:1d:af:ed:9b:ce:2e:ec:ff:d1:36:0b: 3f:02:24:87:06:81:78:70:21:1c:61:1d:40:1f:3e: d6:2f:41:e1:e8:06:8c:a6:8f:47:62:6a:75:f9:73: fd:2f:e8:3c:0b:94:d0:38:53:6c:22:51:5c:a5:87: 9a:db:99:34:8a:2e:72:71:e3:ae:0a:7d:57:fb:2b: 00:50:fd:e6:ad:a9:d6:06:ed:05:e1:ad:e6:84:c4: 02:bb:da:63:05:9e:cf:8d:69:37:55:79:4e:98:0b: 29:3c:65:6a:5f:a7:46:98:88:96:9a:cc:72:50:9a: 33:39:29:cb:d8:99:9f:56:67:8a:5b:ef:88:07:c7: 8b:77:b0:2b:72:21:69:ef:39:84:d4:6b:f3:82:b0: 13:3a:57:eb:cb:74:bf:b6:87:26:00:e0:e7:ed:e8: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:F8:B5:5A:8D:EE:42:FE:99:8D:6F:78:80:0A:96:BD:A4:C9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b8:c1:a1:96:6e:ba:b5:26:e4:52:14:49:93:9d:f2:f3:80: 0b:f3:86:d2:fc:35:24:cc:50:12:40:c6:61:5b:48:0f:a8:aa: d3:33:e1:f1:17:62:37:d6:75:68:b3:4c:37:e6:16:9c:82:9e: f1:94:87:24:05:91:c5:0f:d4:8d:54:f1:0a:5d:00:20:88:25: 1b:44:e2:b7:6c:bc:29:36:9c:3d:77:17:07:8d:df:33:cb:47: 22:44:bc:f0:c1:a4:d0:b2:36:8c:46:cc:21:ba:c4:f9:35:36: d3:b4:f8:58:3a:1c:7f:b8:3b:67:12:fa:63:57:be:ff:89:e7: 9b:28:e0:2e:56:dd:90:cd:68:06:24:ad:3c:b9:21:d6:70:6a: 71:ea:de:93:da:34:6d:39:77:94:53:9e:63:ca:16:e1:43:a3: 5a:6b:45:3d:dc:3d:e1:4d:21:69:9a:61:90:7d:60:e8:2e:22: a9:74:83:28:ab:a1:04:70:eb:91:c4:0a:75:e1:c1:b7:4c:09: 53:1a:0b:2d:02:92:96:3e:f9:0c:43:50:a2:b7:5a:ec:85:ba: c5:98:0b:75:1e:ad:ba:09:c2:1b:0b:ff:bc:bd:f5:41:33:79: a1:b3:37:ab:90:d9:b0:39:1e:e7:ec:e9:81:36:94:15:df:b1: a5:78:ee:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qPBAeO1xivDsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YmNkYTljOGItMjkxZi00NGE5LThhZjEtZjIxYWRmY2M0YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJ4ipvnCp5rBowccxCCTJOQ81XtdV9iMWOn TwdD7oC7EMr53Q/u2lYRI/y5TjXJmxP901+wvvUf3v8U3E8qfsEw0lHe0irOAchi 65aNRoQyNtZs3prWNwfMH9OlHa/tm84u7P/RNgs/AiSHBoF4cCEcYR1AHz7WL0Hh 6AaMpo9HYmp1+XP9L+g8C5TQOFNsIlFcpYea25k0ii5yceOuCn1X+ysAUP3mranW Bu0F4a3mhMQCu9pjBZ7PjWk3VXlOmAspPGVqX6dGmIiWmsxyUJozOSnL2JmfVmeK W++IB8eLd7ArciFp7zmE1GvzgrATOlfry3S/tocmAODn7ejHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY2+LVaje5C/pmNb3iACpa9pMmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGFlNmNhOTQtMmZhNi0z YTVjLTk1NDgtY2RkNWYzOTcwODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm4waGWbrq1JuRSFEmTnfLzgAvzhtL8NSTMUBJAxmFbSA+oqtMz4fEX YjfWdWizTDfmFpyCnvGUhyQFkcUP1I1U8QpdACCIJRtE4rdsvCk2nD13FweN3zPL RyJEvPDBpNCyNoxGzCG6xPk1NtO0+Fg6HH+4O2cS+mNXvv+J55so4C5W3ZDNaAYk rTy5IdZwanHq3pPaNG05d5RTnmPKFuFDo1prRT3cPeFNIWmaYZB9YOguIql0gyir oQRw65HECnXhwbdMCVMaCy0CkpY++QxDUKK3WuyFusWYC3UerboJwhsL/7y99UEz eaGzN6uQ2bA5Hufs6YE2lBXfsaV47g8= -----END CERTIFICATE-----Generated at Mon Nov 3 02:45:18 2025 by rpki-client