$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json) Hash identifier: GVKLmJlZ9AwWfvtg8SigTuj5JtsevCp9JBVv9DEIu9Q= Subject key identifier: C9:2E:7B:58:B0:14:36:FF:01:78:F2:AD:A4:7C:86:94:93:77:20:5B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A1B5FF9D6C82B41B79CF19120 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 29802 IP address blocks: 66.96.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f9:d6:c8:2b:41:b7:9c:f1:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=435bac71-2095-43bb-a62d-6eaaa907dc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:f5:b8:1e:95:10:c2:9b:09:96:bf:da:8b: 8d:f4:02:8b:2d:e3:60:32:57:23:87:a2:95:44:52: 18:37:fd:cc:4b:f5:a6:65:79:2d:f3:e0:cc:52:90: 3f:bf:ca:2c:64:93:28:4c:fa:4f:8b:68:6a:93:d3: 64:3e:28:6b:99:76:6a:23:9b:fc:3f:d0:17:ca:36: b2:aa:b2:b5:7f:e9:74:96:48:b0:e8:31:e7:52:77: d3:c6:1e:71:b5:5b:dd:4f:46:06:c8:8b:5e:cf:2c: 46:ad:09:d6:ab:c2:cf:68:d4:bf:90:ff:c8:a0:50: a1:bd:ee:09:0f:19:0d:cf:19:9e:6e:0b:d8:36:98: 97:7c:ce:3c:b9:0e:c4:92:26:9e:bc:cc:f1:be:be: d6:9e:ca:7e:c8:6e:3f:f8:bb:4f:ba:5e:f0:18:36: 31:79:f1:e1:e0:35:8a:8d:87:a4:56:38:e6:1a:da: a5:55:d7:54:bf:e2:c8:aa:f4:2b:c8:42:45:cd:13: 33:dc:db:83:27:b1:ac:7e:90:fb:d7:d9:60:69:3d: 7f:48:68:0a:8f:28:9a:c9:50:1e:c9:fb:37:7b:08: 44:f8:b9:99:aa:66:30:65:f7:02:81:32:5d:f7:a4: 9e:73:83:bd:63:b2:94:4a:ee:9b:87:14:4b:b7:ed: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:7B:58:B0:14:36:FF:01:78:F2:AD:A4:7C:86:94:93:77:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e5:2b:b2:8c:14:48:8e:50:ed:66:fa:56:ec:99:ac:be:81: 9d:90:d2:fc:04:75:d3:e9:e0:fb:ff:2c:25:58:1f:12:c8:fa: 48:fb:db:3f:3a:20:3e:14:6a:33:df:dd:80:3e:40:fb:f4:bc: 71:70:4b:a7:11:bb:17:6c:06:7f:8b:fd:08:5a:5d:e4:98:31: 22:7d:35:0a:61:4c:55:52:5a:d0:80:68:aa:5a:54:f7:af:38: d9:ac:d7:f2:61:f7:0a:d3:28:81:08:8f:9c:f9:26:3a:27:3d: 9d:6d:1a:8e:07:c6:8f:39:77:67:04:a0:cf:5f:d9:fb:ae:2a: 60:c7:43:9e:21:3b:16:e9:c3:db:69:dd:28:46:b7:e4:f7:4a: 20:2d:e5:86:df:fd:86:3b:40:bc:25:43:d7:63:2d:18:21:a6: 09:4f:ef:ca:9b:eb:9b:85:de:ad:18:da:fe:c9:97:c2:b9:68: d5:08:e9:e0:5f:b3:64:19:f8:b1:cd:e9:2e:b8:c3:23:bb:30: 05:53:d8:ea:c5:37:78:ab:83:b0:b3:c6:3a:b2:2c:8f:93:81: 3d:da:d3:b0:4a:4b:f2:fa:ad:99:2a:c2:7e:16:4f:60:da:4e: f3:b9:66:5c:2e:fb:08:4b:e5:d0:ab:8a:66:ec:9b:6f:c3:71: 07:95:f3:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/nWyCtBt5zxkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDM1YmFjNzEtMjA5NS00M2JiLWE2MmQtNmVhYWE5MDdkYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXL1uB6VEMKbCZa/2ouN9AKLLeNgMlcjh6KV RFIYN/3MS/WmZXkt8+DMUpA/v8osZJMoTPpPi2hqk9NkPihrmXZqI5v8P9AXyjay qrK1f+l0lkiw6DHnUnfTxh5xtVvdT0YGyItezyxGrQnWq8LPaNS/kP/IoFChve4J DxkNzxmebgvYNpiXfM48uQ7EkiaevMzxvr7Wnsp+yG4/+LtPul7wGDYxefHh4DWK jYekVjjmGtqlVddUv+LIqvQryEJFzRMz3NuDJ7GsfpD719lgaT1/SGgKjyiayVAe yfs3ewhE+LmZqmYwZfcCgTJd96Sec4O9Y7KUSu6bhxRLt+3mIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkue1iwFDb/AXjyraR8hpSTdyBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDExZTBhNmQtOTI2Mi0z YzMxLTgxNjYtZWJhN2UyY2IxNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3lK7KMFEiOUO1m+lbsmay+gZ2Q0vwEddPp4Pv/LCVYHxLI+kj72z86 ID4UajPf3YA+QPv0vHFwS6cRuxdsBn+L/QhaXeSYMSJ9NQphTFVSWtCAaKpaVPev ONms1/Jh9wrTKIEIj5z5JjonPZ1tGo4Hxo85d2cEoM9f2fuuKmDHQ54hOxbpw9tp 3ShGt+T3SiAt5Ybf/YY7QLwlQ9djLRghpglP78qb65uF3q0Y2v7Jl8K5aNUI6eBf s2QZ+LHN6S64wyO7MAVT2OrFN3irg7CzxjqyLI+TgT3a07BKS/L6rZkqwn4WT2Da TvO5Zlwu+whL5dCrimbsm2/DcQeV8zE= -----END CERTIFICATE-----Generated at Mon Jun 9 18:29:24 2025 by rpki-client