$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: ee+ayVEibsojTDKCgsrB6ek9m8/falJRgK1pLKXnQVY= Subject key identifier: 86:00:7E:58:86:48:66:AD:B4:87:48:6B:98:DB:FD:55:35:16:F5:D8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BE63CFBA55326DA315A00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e6:3c:fb:a5:53:26:da:31:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=11c1b95d-bd69-43ef-8770-ef098d7f6627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:16:32:39:44:c2:45:2f:61:85:80:8f:b0: 02:c3:1a:8e:9e:95:3f:55:3a:81:78:62:be:27:33: af:30:33:36:ff:4f:92:ba:3c:b1:8a:da:b9:bf:e8: a0:a9:7a:60:b7:2c:7f:68:f4:1d:07:ef:7d:e4:3e: 8f:12:ca:df:c9:15:bd:2f:7e:65:7d:fb:99:8f:61: 7b:13:92:ba:8a:c0:2f:06:ca:a1:b6:5b:10:d2:27: 16:15:90:f3:3e:e1:8b:5e:25:8c:29:76:39:8c:74: 74:23:be:a1:e8:8e:a2:c1:ad:93:82:26:b8:de:2f: bd:ec:5a:0f:dc:ed:cb:d3:3a:15:76:61:c6:4d:3f: 0d:73:e9:49:e7:f3:b3:b9:a3:22:58:bf:02:c0:76: 3a:41:d9:c2:7e:fe:16:d4:ce:24:23:15:63:44:ad: ac:10:14:a1:96:b8:05:4b:b6:a9:2e:c0:2e:1b:ed: 0a:db:af:5e:a1:e5:c9:78:b6:5d:d0:b2:b0:9c:c5: 42:ca:d3:29:d0:c9:b9:80:b9:9b:05:8f:05:a7:47: ac:6e:51:29:89:11:37:e9:4d:1b:a2:b6:4e:5a:8b: 38:82:9a:55:ac:72:e9:92:99:25:8f:9a:00:a7:da: 78:fe:07:25:6a:ca:52:f1:66:c5:62:b7:d1:10:23: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:7E:58:86:48:66:AD:B4:87:48:6B:98:DB:FD:55:35:16:F5:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:58:36:45:73:63:d7:c2:ef:eb:99:8b:80:6c:2b:8d:0d:d9: e6:5b:62:c5:9f:1d:fc:94:26:60:15:42:ba:a0:ae:47:ff:c7: 06:f5:46:71:7f:dd:7a:67:21:9f:34:53:a3:cb:c1:aa:97:cb: d9:6f:2a:f8:57:64:22:0f:ea:3a:e6:80:24:09:1e:19:20:d4: 18:9f:75:08:b3:b8:df:20:1a:11:65:bc:c2:b2:a0:10:30:01: 09:ed:e0:69:c4:bd:92:ae:d8:6a:16:7a:e0:e8:e9:5d:ce:3d: b1:60:18:50:17:41:b3:7b:cc:7f:61:92:c6:81:e7:23:f0:ce: 6e:9c:8d:da:fd:dc:95:c0:d0:3b:a5:42:a0:15:c2:4c:a9:27: 2a:1a:63:a1:92:f9:ee:70:66:65:d9:d3:a9:d4:be:a9:ce:54: 1a:09:35:81:44:3b:cd:19:31:1a:f6:a7:92:29:01:23:82:64: 33:5f:0f:31:4b:0a:9a:cb:66:ea:3b:e1:32:c9:61:2e:76:a4: be:5d:db:38:ac:7c:ae:9c:84:54:79:13:31:79:2e:c1:8c:53: d1:25:45:dd:98:4e:d2:72:6e:32:da:7c:fe:bf:90:1f:93:18: ce:08:62:13:e5:68:ec:d0:ed:40:d3:95:91:ae:b1:90:1f:bd: d9:df:4f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+Y8+6VTJtoxWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTFjMWI5NWQtYmQ2OS00M2VmLTg3NzAtZWYwOThkN2Y2NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhykWMjlEwkUvYYWAj7ACwxqOnpU/VTqBeGK+ JzOvMDM2/0+Sujyxitq5v+igqXpgtyx/aPQdB+995D6PEsrfyRW9L35lffuZj2F7 E5K6isAvBsqhtlsQ0icWFZDzPuGLXiWMKXY5jHR0I76h6I6iwa2Tgia43i+97FoP 3O3L0zoVdmHGTT8Nc+lJ5/OzuaMiWL8CwHY6QdnCfv4W1M4kIxVjRK2sEBShlrgF S7apLsAuG+0K269eoeXJeLZd0LKwnMVCytMp0Mm5gLmbBY8Fp0esblEpiRE36U0b orZOWos4gppVrHLpkpklj5oAp9p4/gclaspS8WbFYrfRECPTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYAfliGSGattIdIa5jb/VU1FvXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNYNkVzY9fC7+uZi4BsK40N2eZbYsWfHfyUJmAVQrqgrkf/xwb1RnF/ 3XpnIZ80U6PLwaqXy9lvKvhXZCIP6jrmgCQJHhkg1BifdQizuN8gGhFlvMKyoBAw AQnt4GnEvZKu2GoWeuDo6V3OPbFgGFAXQbN7zH9hksaB5yPwzm6cjdr93JXA0Dul QqAVwkypJyoaY6GS+e5wZmXZ06nUvqnOVBoJNYFEO80ZMRr2p5IpASOCZDNfDzFL CprLZuo74TLJYS52pL5d2zisfK6chFR5EzF5LsGMU9ElRd2YTtJybjLafP6/kB+T GM4IYhPlaOzQ7UDTlZGusZAfvdnfT+o= -----END CERTIFICATE-----Generated at Sun Sep 14 13:55:14 2025 by rpki-client