$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa File: 916c3f1d-1340-37a7-8106-fdf9db78a154.roa (raw, json) Hash identifier: 4QWj+e6BrkO4KCirCU6SiZOv9xbpntm61i3o8J3BcOY= Subject key identifier: 37:20:2A:9E:78:2D:7C:7B:70:5F:B2:9E:0F:46:41:72:B8:88:F1:EF Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BEA674B867E597A56EA00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 29802 IP address blocks: 198.178.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ea:67:4b:86:7e:59:7a:56:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=982bee6f-eaa0-49fa-9a07-8ce18743ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:b5:ca:3d:40:81:c0:80:23:5b:75:8b:4b: 51:71:0c:27:33:8a:ce:37:5f:38:4e:1b:cb:5f:10: ea:bd:2f:af:55:55:c0:43:ba:1c:f6:b8:83:77:b4: b9:87:14:ec:2c:d0:0d:f3:1e:72:0f:5a:e8:30:63: 39:e7:2b:49:a0:84:79:3c:b7:04:bd:3b:cb:18:60: 5b:57:0a:c7:6a:c9:e2:40:e7:8d:f2:35:fa:4e:5a: ba:e3:33:1d:b9:63:01:ee:0d:92:43:93:a3:81:a4: 00:94:20:dd:8e:06:90:4e:94:34:68:8e:03:c3:b6: 87:37:49:7c:a6:00:bd:a6:f8:ea:9b:e9:01:dc:2f: ab:13:d3:24:0c:24:4e:50:82:83:b0:6a:96:95:2a: 5d:81:a0:7b:2e:4b:5e:75:4a:1c:ca:41:aa:97:e4: 9f:90:21:de:45:fe:fa:40:9a:1e:52:cc:9b:fd:65: 1f:d8:f2:43:5a:82:ae:d2:22:76:e5:c2:c7:8a:5c: 0e:a8:0c:74:6f:c3:b0:43:cd:77:4b:93:b8:1f:87: f8:0e:08:3f:36:5b:1e:42:8e:e1:24:28:2a:16:a8: 19:7d:b1:7c:11:a4:6b:2e:91:86:3c:0e:b4:95:6e: 42:49:a2:af:2f:f6:cd:f5:d2:9d:4c:54:b1:70:64: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:20:2A:9E:78:2D:7C:7B:70:5F:B2:9E:0F:46:41:72:B8:88:F1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.178.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:e6:92:a3:a4:0d:18:58:e6:5d:5c:f8:fe:15:94:75:33: 29:4f:04:f5:28:7e:51:82:2e:ea:bf:96:3f:36:49:5f:2a:5c: e0:62:b8:09:9e:ff:68:ec:d9:8d:6d:e1:15:3f:82:77:56:94: 8a:10:11:6d:0b:10:02:90:38:15:81:5b:31:25:76:95:39:18: 3e:7c:b9:36:5e:38:8d:45:db:33:94:b4:d6:af:fb:cf:14:8a: 53:03:17:60:2d:88:8c:94:4c:9a:33:5d:d1:25:16:ce:f0:e3: 51:b6:9a:cb:b3:b6:e7:0b:b2:2e:8c:fc:7f:3f:a7:bf:ff:07: b3:e7:66:7d:51:3b:9a:f3:a0:1f:1f:34:64:fa:97:c7:ee:0b: 65:af:90:4d:48:f9:4e:33:fc:be:66:cf:7f:ac:3b:ef:07:4e: 91:f0:d6:c2:8b:f9:d3:32:47:9f:7b:90:eb:e9:0e:af:27:52: b6:dd:33:ac:fa:b6:03:99:76:1c:89:f7:e1:f4:5e:d0:3f:22: 07:80:5a:a3:0d:7e:6d:74:d8:bd:5a:45:88:9b:43:c1:fd:0f: eb:54:6e:a7:25:db:d9:e5:d3:79:52:1d:b3:0e:a5:e5:d3:01: 5c:04:db:88:e7:10:a7:be:8e:45:61:a3:b9:0c:55:28:9b:8b: d4:60:f0:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+pnS4Z+WXpW6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTgyYmVlNmYtZWFhMC00OWZhLTlhMDctOGNlMTg3NDNkZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IW1yj1AgcCAI1t1i0tRcQwnM4rON184ThvL XxDqvS+vVVXAQ7oc9riDd7S5hxTsLNAN8x5yD1roMGM55ytJoIR5PLcEvTvLGGBb VwrHasniQOeN8jX6Tlq64zMduWMB7g2SQ5OjgaQAlCDdjgaQTpQ0aI4Dw7aHN0l8 pgC9pvjqm+kB3C+rE9MkDCROUIKDsGqWlSpdgaB7LktedUocykGql+SfkCHeRf76 QJoeUsyb/WUf2PJDWoKu0iJ25cLHilwOqAx0b8OwQ813S5O4H4f4Dgg/NlseQo7h JCgqFqgZfbF8EaRrLpGGPA60lW5CSaKvL/bN9dKdTFSxcGReoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcgKp54LXx7cF+yng9GQXK4iPHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTE2YzNmMWQtMTM0MC0z N2E3LTgxMDYtZmRmOWRiNzhhMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxrJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+25pKjpA0YWOZdXPj+FZR1MylPBPUoflGCLuq/lj82SV8qXOBiuAme /2js2Y1t4RU/gndWlIoQEW0LEAKQOBWBWzEldpU5GD58uTZeOI1F2zOUtNav+88U ilMDF2AtiIyUTJozXdElFs7w41G2msuztucLsi6M/H8/p7//B7PnZn1RO5rzoB8f NGT6l8fuC2WvkE1I+U4z/L5mz3+sO+8HTpHw1sKL+dMyR597kOvpDq8nUrbdM6z6 tgOZdhyJ9+H0XtA/IgeAWqMNfm102L1aRYibQ8H9D+tUbqcl29nl03lSHbMOpeXT AVwE24jnEKe+jkVho7kMVSibi9Rg8D4= -----END CERTIFICATE-----Generated at Sun Sep 14 13:59:16 2025 by rpki-client