$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa File: cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa (raw, json) Hash identifier: 8GzPCG+ou+xGhdv5P1H6d8uU3uFttTcmdxRsHwlaU24= Subject key identifier: A5:EC:A8:8C:CE:E5:DE:E8:BB:C2:DF:01:71:D5:52:FD:74:AB:51:18 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFEE6A3D261F5F5C2F708DB80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 54540 IP address blocks: 144.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a3:d2:61:f5:f5:c2:f7:08:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=0903ff9f-fdfe-4804-af4f-d2dceb61253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:d8:d2:ea:fe:90:a5:00:6f:24:02:df:85: b8:aa:af:7b:24:8a:52:23:71:bd:47:60:06:ba:d8: 21:88:ea:fd:f7:f9:33:10:9f:03:e6:e7:da:76:dc: da:9d:7f:26:c8:16:a0:db:95:96:37:e7:2f:26:dc: 5f:fb:70:dc:0f:80:5e:c2:da:a6:af:bb:3d:c2:00: 1a:1d:4d:f9:ca:64:12:5a:e6:6a:a9:60:29:f8:c4: 60:97:af:cc:15:34:32:a3:0b:ad:fa:e1:ae:15:04: 00:92:81:48:d4:65:67:2f:cc:51:e0:d4:9e:e1:78: 5e:b3:b4:07:e1:41:00:3f:19:f3:7d:a8:f7:8c:b2: f5:bc:68:29:e5:3b:d7:8b:de:8d:4d:9b:56:b3:32: 3b:c0:43:8c:68:09:d6:f4:2a:e9:11:95:dc:0f:8b: a3:95:90:d0:0d:2c:3c:d8:d9:61:59:67:3e:4b:ef: c8:a6:93:3a:ac:e8:35:8d:ce:67:80:eb:b8:f9:ef: 74:6f:98:a6:ce:2e:2c:40:ab:8c:63:8e:15:6e:2f: fc:ad:b9:c8:1d:ee:bb:90:88:17:9e:12:60:ee:81: e1:76:85:ef:97:4e:fe:ee:46:08:8c:d3:42:94:79: 4a:f5:0d:5d:9a:44:8d:93:2d:c7:47:eb:d2:5d:32: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:A8:8C:CE:E5:DE:E8:BB:C2:DF:01:71:D5:52:FD:74:AB:51:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b2:70:a2:d2:87:5d:fe:82:ce:bc:01:d5:20:76:b5:20:da: 91:0d:34:ab:1f:61:85:61:80:94:49:8c:9f:ca:e8:13:65:83: 1c:a0:67:bc:05:e1:5c:2d:39:97:27:52:e5:bf:a4:cd:81:c3: fe:bc:4d:a3:f8:e2:19:39:7b:0c:ff:10:ae:b4:e0:18:f3:ee: a7:6b:61:61:9b:07:29:c7:45:fd:35:2d:6f:7a:39:41:b8:be: 86:3f:cb:b1:a4:b6:d4:4d:cc:5b:74:63:26:d6:d4:54:77:13: 4a:7e:d7:99:53:78:ce:4e:f0:63:8f:ba:f4:b7:a7:34:9a:7e: a3:54:88:b7:19:e9:4d:85:d2:41:9e:65:0e:87:08:c5:52:93: 96:16:ed:35:a9:e9:30:d5:98:99:2e:8b:c5:a0:67:97:3d:c9: 9a:d0:d5:86:a1:74:f6:7e:99:48:71:bb:d9:87:67:6f:47:0c: 33:f5:8d:0a:5e:b9:42:42:01:c0:9d:50:95:8a:c1:92:e9:49: ce:70:1f:80:b7:60:f8:61:ac:83:38:87:f5:16:64:db:9e:81: 5a:50:20:5f:b8:2d:7f:05:88:45:20:0a:b7:cb:e0:52:1b:49: 21:6a:82:e4:de:4d:8e:2e:5e:fe:57:c4:4f:56:a7:e4:d9:fc: f0:a8:87:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qPSYfX1wvcI24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MDkwM2ZmOWYtZmRmZS00ODA0LWFmNGYtZDJkY2ViNjEyNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU3Y0ur+kKUAbyQC34W4qq97JIpSI3G9R2AG utghiOr99/kzEJ8D5ufadtzanX8myBag25WWN+cvJtxf+3DcD4Bewtqmr7s9wgAa HU35ymQSWuZqqWAp+MRgl6/MFTQyowut+uGuFQQAkoFI1GVnL8xR4NSe4Xhes7QH 4UEAPxnzfaj3jLL1vGgp5TvXi96NTZtWszI7wEOMaAnW9CrpEZXcD4ujlZDQDSw8 2NlhWWc+S+/IppM6rOg1jc5ngOu4+e90b5imzi4sQKuMY44Vbi/8rbnIHe67kIgX nhJg7oHhdoXvl07+7kYIjNNClHlK9Q1dmkSNky3HR+vSXTKkMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXsqIzO5d7ou8LfAXHVUv10q1EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2RhMGZhNWUtNmQ1ZC0z NzY4LWEzZGEtMjhjM2U3Yjk0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGycKLSh13+gs68AdUgdrUg2pENNKsfYYVhgJRJjJ/K6BNlgxygZ7wF 4VwtOZcnUuW/pM2Bw/68TaP44hk5ewz/EK604Bjz7qdrYWGbBynHRf01LW96OUG4 voY/y7GkttRNzFt0YybW1FR3E0p+15lTeM5O8GOPuvS3pzSafqNUiLcZ6U2F0kGe ZQ6HCMVSk5YW7TWp6TDVmJkui8WgZ5c9yZrQ1YahdPZ+mUhxu9mHZ29HDDP1jQpe uUJCAcCdUJWKwZLpSc5wH4C3YPhhrIM4h/UWZNuegVpQIF+4LX8FiEUgCrfL4FIb SSFqguTeTY4uXv5XxE9Wp+TZ/PCoh+E= -----END CERTIFICATE-----Generated at Sun Sep 14 13:53:24 2025 by rpki-client