$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa File: c90c9521-a429-3420-94be-1c59d7710268.roa (raw, json) Hash identifier: m/2LTCz8GnejM2lTdzN1bG/uXAFfyO3lBH2tdia0cFk= Subject key identifier: BD:AB:5E:8C:AD:86:44:8F:DC:FC:DB:06:9B:1B:4E:F1:8E:B5:6F:34 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFEE6A38708D52EFF6B6C3780 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 104.254.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a3:87:08:d5:2e:ff:6b:6c:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=b5054c77-b780-423d-abf9-209ab52568e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:1a:96:af:1d:dd:0e:ff:59:17:d4:9e:49: c5:cd:d5:02:c0:fc:de:71:cc:c3:92:f7:6d:8e:8b: 53:72:db:91:5d:fd:2e:24:87:1d:21:d5:e3:65:3d: 26:ca:03:08:8c:f4:bd:9b:9a:98:5c:f8:0b:7c:85: 4f:5c:af:b9:a1:7b:d7:cc:0f:42:6d:15:18:27:21: 10:96:b2:b0:5a:fd:1c:bf:8c:b0:95:1b:06:89:c2: 75:b9:b8:e3:4b:85:0d:1c:0a:89:38:08:59:74:d7: 01:de:85:3e:e3:81:18:8d:f0:af:c5:72:3f:d6:2a: 1c:41:ef:93:fd:ce:f5:2a:8a:6e:2f:f4:d6:aa:13: 79:11:de:27:3f:13:7e:e5:95:fb:d2:29:c3:bd:a3: 2d:90:e2:85:7c:97:0c:5e:4b:9f:f9:2a:43:8d:52: 12:aa:5a:3e:2c:92:d8:95:16:8f:5e:45:43:16:fa: f3:c4:b2:b7:1e:08:84:47:f4:fa:20:c8:a7:24:02: 1a:bb:b0:2d:2e:aa:06:51:c4:1e:fe:c2:fd:6c:65: ff:79:c1:cd:fd:44:13:14:53:0a:22:d8:c3:e3:da: 9f:78:a1:32:49:c1:ae:5b:e2:03:9c:39:f9:77:30: 83:ed:8c:ee:58:e0:0c:9b:5a:a3:fe:44:86:76:28: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:5E:8C:AD:86:44:8F:DC:FC:DB:06:9B:1B:4E:F1:8E:B5:6F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 104.254.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3a:15:87:e1:44:21:47:4f:44:2e:63:72:f1:69:b8:44:b5: 69:53:22:54:f2:9e:ee:83:29:fa:33:71:ca:49:b2:6c:f5:20: 35:c2:9c:a6:25:6d:c9:44:5f:6e:f1:e6:95:81:dd:c2:f8:ed: e3:df:40:6a:33:2e:e3:79:f2:60:d8:29:4e:a4:e4:da:c9:5c: 19:c7:a6:9b:8a:43:a3:5b:4f:2c:cb:04:41:16:a7:ad:22:11: 6e:e0:4a:8c:e4:e1:87:7e:46:4e:8d:ec:2c:9e:f5:99:44:b7: 7b:24:0e:91:b1:04:96:30:99:ef:bf:ab:c5:1e:9a:8a:13:e6: 76:5e:04:84:c7:87:79:70:8d:0a:cd:dc:09:62:90:af:55:e1: 0a:fd:24:45:71:c9:4d:da:27:fa:98:51:ae:52:09:72:d4:67: 30:05:30:a0:41:bc:65:c7:72:65:ec:f9:7f:41:c5:f2:1a:01: fe:bd:cc:5b:e3:77:66:fb:69:70:c2:88:02:52:8a:a0:0a:d4: c0:32:cc:f7:89:5d:ab:ac:5c:9c:65:98:77:3f:3f:4f:2d:e1: df:fb:fd:99:59:84:54:04:83:ba:77:4b:1a:08:66:ec:16:08: 40:0b:16:e3:22:08:d5:43:3c:e2:a4:3c:5a:20:0e:aa:2a:de: d5:09:cc:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qOHCNUu/2tsN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YjUwNTRjNzctYjc4MC00MjNkLWFiZjktMjA5YWI1MjU2OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraQalq8d3Q7/WRfUnknFzdUCwPzecczDkvdt jotTctuRXf0uJIcdIdXjZT0mygMIjPS9m5qYXPgLfIVPXK+5oXvXzA9CbRUYJyEQ lrKwWv0cv4ywlRsGicJ1ubjjS4UNHAqJOAhZdNcB3oU+44EYjfCvxXI/1iocQe+T /c71KopuL/TWqhN5Ed4nPxN+5ZX70inDvaMtkOKFfJcMXkuf+SpDjVISqlo+LJLY lRaPXkVDFvrzxLK3HgiER/T6IMinJAIau7AtLqoGUcQe/sL9bGX/ecHN/UQTFFMK ItjD49qfeKEyScGuW+IDnDn5dzCD7YzuWOAMm1qj/kSGdij74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2rXoythkSP3PzbBpsbTvGOtW80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzkwYzk1MjEtYTQyOS0z NDIwLTk0YmUtMWM1OWQ3NzEwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw6FYfhRCFHT0QuY3LxabhEtWlTIlTynu6DKfozccpJsmz1IDXCnKYl bclEX27x5pWB3cL47ePfQGozLuN58mDYKU6k5NrJXBnHppuKQ6NbTyzLBEEWp60i EW7gSozk4Yd+Rk6N7Cye9ZlEt3skDpGxBJYwme+/q8UemooT5nZeBITHh3lwjQrN 3AlikK9V4Qr9JEVxyU3aJ/qYUa5SCXLUZzAFMKBBvGXHcmXs+X9BxfIaAf69zFvj d2b7aXDCiAJSiqAK1MAyzPeJXausXJxlmHc/P08t4d/7/ZlZhFQEg7p3SxoIZuwW CEALFuMiCNVDPOKkPFogDqoq3tUJzPA= -----END CERTIFICATE-----Generated at Sun Sep 14 13:57:35 2025 by rpki-client