$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json) Hash identifier: 5UF3af9oF+PebF15vic6yaMWgefJzKYWF1fwzGLKP10= Subject key identifier: F8:0B:FD:4D:18:94:3D:14:54:7F:CE:D9:74:37:01:9C:FD:9C:89:8F Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B1C36B8E77CDED48A37AD7990 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 29802 IP address blocks: 91.191.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:b8:e7:7c:de:d4:8a:37:ad:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=03caf5ab-e3ae-4cf2-9310-21b278f39108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:13:8f:05:42:0f:3b:40:5b:ad:aa:95:b8: b7:19:6d:ff:51:f6:a2:74:99:5c:9a:cf:ec:94:39: 2e:3c:9a:e5:ed:e3:d5:fe:68:ea:34:06:ce:0a:0a: 03:8c:d6:db:96:ad:a0:0a:72:12:0a:a7:d2:dc:d4: 85:cc:85:46:77:de:6d:cf:e5:d2:cb:dd:23:52:7c: 0d:96:43:b3:e1:f9:ca:b6:e4:8b:1f:c8:8e:45:f3: 6e:11:6f:6e:52:df:76:3a:c9:c9:52:03:f5:3c:c2: b1:b1:cf:69:61:5f:11:2a:f4:4b:e9:a7:02:2f:ce: 95:b8:88:08:b5:db:88:ec:c3:1f:f9:c3:6d:11:aa: d6:85:7d:57:fd:14:3e:0b:d5:b8:f7:a4:c4:34:8c: 37:cc:35:1b:4d:00:5f:65:73:00:05:58:8d:42:52: e8:19:51:ae:12:3d:0d:35:45:34:67:3b:a8:87:04: 1c:90:28:29:4b:b6:ad:13:6e:26:6e:fc:05:01:d5: 41:bb:e6:da:3e:e6:90:23:2f:67:47:df:5a:94:80: 3c:55:f0:13:cb:81:72:64:56:27:f9:5e:9d:da:08: 34:ce:fc:2d:9d:3f:4a:b1:b8:3e:d4:c4:58:94:ba: 56:20:b0:00:50:c5:6a:e9:06:39:f5:18:b7:dc:e1: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:FD:4D:18:94:3D:14:54:7F:CE:D9:74:37:01:9C:FD:9C:89:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b8:82:be:0b:09:02:12:f6:c1:77:21:dc:39:9d:14:1e:39: 1b:7e:bb:64:69:da:da:b5:03:53:7b:49:08:d2:85:91:a6:68: 56:d1:b8:a1:a9:72:da:fd:b4:ac:6a:be:58:62:87:be:ff:51: b2:4c:f6:95:54:fc:84:1a:ed:9a:58:7e:1a:22:45:b4:65:ee: 53:8d:66:9d:d5:c0:5a:05:4c:89:00:07:e4:1f:24:f9:4d:ac: b0:1b:84:74:c6:e6:48:1d:87:a3:0f:62:6e:cf:20:5a:39:af: c7:dd:21:45:ec:6d:9d:71:8f:2c:f8:88:07:d3:2d:55:bc:ba: 0f:cb:49:a0:32:93:cf:0f:7e:27:0d:5f:0d:9e:48:b1:7f:8b: d3:b3:79:82:fc:42:5c:b8:05:1a:58:f1:4e:1e:5b:c7:f9:28: 6c:58:22:82:3c:4f:eb:5d:4e:68:9c:7b:fe:8b:1b:17:1b:ad: 3c:66:7c:92:d4:c1:aa:d3:c7:29:4c:4a:73:00:7c:1a:78:61: 0a:b2:46:b3:fe:d8:18:29:fc:bf:5f:e7:d1:df:85:81:2b:6d: d7:ed:32:d2:5c:f3:33:50:b9:27:2e:ba:86:73:ff:7e:a4:ce: be:a6:5e:f8:06:21:01:f9:6f:c0:98:55:58:1d:57:0e:d3:66: 42:9f:ab:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNrjnfN7UijeteZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDNjYWY1YWItZTNhZS00Y2YyLTkzMTAtMjFiMjc4ZjM5MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAragTjwVCDztAW62qlbi3GW3/UfaidJlcms/s lDkuPJrl7ePV/mjqNAbOCgoDjNbblq2gCnISCqfS3NSFzIVGd95tz+XSy90jUnwN lkOz4fnKtuSLH8iORfNuEW9uUt92OsnJUgP1PMKxsc9pYV8RKvRL6acCL86VuIgI tduI7MMf+cNtEarWhX1X/RQ+C9W496TENIw3zDUbTQBfZXMABViNQlLoGVGuEj0N NUU0ZzuohwQckCgpS7atE24mbvwFAdVBu+baPuaQIy9nR99alIA8VfATy4FyZFYn +V6d2gg0zvwtnT9Ksbg+1MRYlLpWILAAUMVq6QY59Ri33OFL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgL/U0YlD0UVH/O2XQ3AZz9nImPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDY5MWQ3N2EtMmEyZS0z NjMxLTllMDUtMzhhNzk4ZjBiOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA24gr4LCQIS9sF3Idw5nRQeORt+u2Rp2tq1A1N7SQjShZGmaFbRuKGp ctr9tKxqvlhih77/UbJM9pVU/IQa7ZpYfhoiRbRl7lONZp3VwFoFTIkAB+QfJPlN rLAbhHTG5kgdh6MPYm7PIFo5r8fdIUXsbZ1xjyz4iAfTLVW8ug/LSaAyk88PficN Xw2eSLF/i9OzeYL8Qly4BRpY8U4eW8f5KGxYIoI8T+tdTmice/6LGxcbrTxmfJLU warTxylMSnMAfBp4YQqyRrP+2Bgp/L9f59HfhYErbdftMtJc8zNQuScuuoZz/36k zr6mXvgGIQH5b8CYVVgdVw7TZkKfqzQ= -----END CERTIFICATE-----Generated at Sun Sep 14 13:56:42 2025 by rpki-client