$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa File: 96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa (raw, json) Hash identifier: wg1NVplFAgN/I3t0aT7QEK85O/mx48zZ9EjtAFib8hI= Subject key identifier: 23:3F:85:5C:FB:C4:7E:9B:E1:EB:73:85:D7:89:1D:E7:11:63:81:CD Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A1E2AA607FBC3F0F1EB95DB60 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 29802 IP address blocks: 91.191.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a6:07:fb:c3:f0:f1:eb:95:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=1900509d-9e1f-48c0-87bf-2c0c44bc0220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:74:66:0f:0d:df:c8:37:39:f8:39:a4:9a: ee:90:53:55:3e:41:74:f1:3f:24:d7:b0:4b:a2:33: 6d:35:96:b1:ee:2f:cd:00:3b:b3:d9:42:9e:bf:bd: a8:ce:f7:8f:e4:c0:46:22:0f:b0:6c:5c:7a:01:04: 98:2e:06:a8:e2:4a:ad:88:ea:ec:0c:4d:3a:36:27: 5c:21:f2:b1:73:6c:12:c1:60:df:26:d4:5f:58:bf: 17:4f:89:8a:ef:0c:ea:f5:65:b8:62:c0:ec:ca:c2: 69:08:bc:5f:3a:72:7b:ee:21:64:61:b4:d8:b9:99: d0:15:c0:82:b0:29:a4:f6:a0:79:9b:6c:4a:f1:19: b7:f6:8a:74:63:d2:23:7f:c0:18:73:eb:69:c8:3e: 51:19:b3:41:71:f9:f1:25:64:2e:0c:e4:d4:36:51: ac:22:48:6f:0d:ee:23:a8:a5:38:27:ad:0f:4d:11: 83:0c:d2:83:0b:c9:cd:a5:59:e2:54:71:6d:08:d2: 16:31:ad:6e:a5:8e:12:c4:dc:f8:77:45:7a:be:46: 5f:19:a8:5b:a7:3c:a3:57:1a:4f:af:48:18:2d:1e: 16:31:4f:f1:71:85:e4:85:58:06:fe:5f:31:51:9e: f6:82:43:00:a3:31:e5:9d:cf:3d:a9:48:fd:87:c4: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:85:5C:FB:C4:7E:9B:E1:EB:73:85:D7:89:1D:E7:11:63:81:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:65:9c:16:e8:26:b2:19:a1:e4:51:49:88:2c:a4:74:03:84: 01:3a:f8:66:2d:0a:3d:75:84:e2:00:f5:7e:5b:ae:f1:e2:2f: b6:02:0a:96:a8:f9:b4:ff:0f:e2:7e:0b:8c:90:5e:60:15:95: 40:07:0d:59:05:7e:c8:2c:32:e3:df:be:f7:4e:0a:2b:60:91: 59:0e:27:66:d8:96:a8:42:3b:93:bc:c0:aa:3e:39:d2:40:2c: 74:9f:c7:05:40:86:55:77:2c:f0:3c:1b:5b:d1:d2:6f:b7:8b: fe:54:6e:9f:4c:7e:82:eb:a5:1c:ed:05:e2:18:2d:40:90:ca: 8b:92:2a:1e:8a:89:ca:ed:5f:02:bc:7c:82:ec:18:cb:3c:23: b3:99:20:03:db:41:ba:f6:8e:f9:a6:cb:8c:a4:cf:c4:12:b5: b5:03:eb:23:02:5c:92:8e:0d:84:ac:01:a0:0b:d8:12:24:00: 6e:f5:cc:33:49:91:0b:17:59:4b:74:0a:03:aa:95:40:4b:1c: 16:ee:f8:55:ab:9a:61:96:c5:3b:18:ba:ea:5d:24:21:57:d0: 95:83:f4:60:9d:ec:56:82:2e:b4:df:1a:66:b9:1d:56:9c:c1: e8:c8:63:77:20:4f:5b:1c:ce:a3:19:78:3e:9e:9b:62:af:eb: 8c:09:1f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqYH+8Pw8euV22AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MTkwMDUwOWQtOWUxZi00OGMwLTg3YmYtMmMwYzQ0YmMwMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXJ0Zg8N38g3Ofg5pJrukFNVPkF08T8k17BL ojNtNZax7i/NADuz2UKev72ozveP5MBGIg+wbFx6AQSYLgao4kqtiOrsDE06Nidc IfKxc2wSwWDfJtRfWL8XT4mK7wzq9WW4YsDsysJpCLxfOnJ77iFkYbTYuZnQFcCC sCmk9qB5m2xK8Rm39op0Y9Ijf8AYc+tpyD5RGbNBcfnxJWQuDOTUNlGsIkhvDe4j qKU4J60PTRGDDNKDC8nNpVniVHFtCNIWMa1upY4SxNz4d0V6vkZfGahbpzyjVxpP r0gYLR4WMU/xcYXkhVgG/l8xUZ72gkMAozHlnc89qUj9h8QBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM/hVz7xH6b4etzhdeJHecRY4HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTZjM2Y1NTgtZDQxZi0z NzEzLThlYWQtYzU0ZWVhZjJmZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW7/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9lnBboJrIZoeRRSYgspHQDhAE6+GYtCj11hOIA9X5brvHiL7YCCpao +bT/D+J+C4yQXmAVlUAHDVkFfsgsMuPfvvdOCitgkVkOJ2bYlqhCO5O8wKo+OdJA LHSfxwVAhlV3LPA8G1vR0m+3i/5Ubp9MfoLrpRztBeIYLUCQyouSKh6KicrtXwK8 fILsGMs8I7OZIAPbQbr2jvmmy4ykz8QStbUD6yMCXJKODYSsAaAL2BIkAG71zDNJ kQsXWUt0CgOqlUBLHBbu+FWrmmGWxTsYuupdJCFX0JWD9GCd7FaCLrTfGma5HVac wejIY3cgT1sczqMZeD6em2Kv64wJHzI= -----END CERTIFICATE-----Generated at Mon Jun 9 22:59:25 2025 by rpki-client