$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa File: e28df75e-d707-3bbb-95d5-6b8336de1526.roa (raw, json) Hash identifier: lgeKXRl82VoNpNXleCWgSjhGGe4Z+Wc8tWKhB6Pb08I= Subject key identifier: C6:65:45:8A:76:F6:A9:A0:3D:02:CD:2C:E8:E6:03:9D:78:6E:8B:4C Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFEE6A4396482E1C53D0E8D80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 199.167.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a4:39:64:82:e1:c5:3d:0e:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=70052f7c-6372-484c-a6b7-4b73ab356861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:1e:2c:f3:6f:54:6f:ce:80:34:b4:82:5a: 23:50:7e:63:79:74:db:90:e8:22:f4:66:21:5d:aa: b8:1d:8b:5e:cd:ee:25:a2:aa:3e:55:b7:b3:7e:e1: 2f:43:42:dd:19:1d:7f:55:36:12:05:dd:ec:08:01: 82:03:d9:79:05:f5:8e:73:c8:0a:6a:0b:bf:d3:7d: 7b:de:06:54:b0:a6:fe:f9:b3:53:c6:93:04:e5:a6: a9:58:d5:98:b2:ee:dd:c8:e1:cd:e1:c5:43:d4:65: 51:31:91:99:5c:07:e4:a8:1e:0d:ab:23:a4:fd:fe: 6e:18:7b:1b:23:45:73:b0:18:75:13:60:9a:5b:3a: be:cd:5e:ba:43:41:cf:49:88:04:de:df:3d:14:7d: 2d:f8:63:ae:af:c4:28:76:dd:cc:c1:7c:2e:a9:48: e0:b0:97:32:f4:94:d9:88:8a:5a:39:85:c1:a4:4f: 30:74:55:66:5d:94:57:be:db:e1:95:51:20:a0:85: b3:7e:5b:38:56:3c:cc:25:93:86:16:34:ae:68:9d: 22:50:97:8e:46:44:e6:44:ca:52:41:c1:81:6f:e8: 85:cd:6a:54:53:1d:b8:bf:91:8d:77:5b:5a:15:6e: bf:a4:94:16:4d:83:65:22:d0:92:5e:50:1b:a6:ac: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:65:45:8A:76:F6:A9:A0:3D:02:CD:2C:E8:E6:03:9D:78:6E:8B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e6:b1:4a:1b:76:d1:7a:bc:79:3f:d3:fe:ea:8a:c9:9a:c7: 05:3a:27:90:89:6c:a9:90:a2:19:1c:2d:e4:61:61:d4:71:03: bf:46:c3:cb:ce:3a:83:13:12:34:2a:84:5e:a3:36:95:42:e9: e7:66:19:80:4a:f8:5a:23:67:e5:18:db:22:86:10:87:8c:c9: 43:f9:9d:e2:3e:c7:45:e0:b1:8e:0c:45:86:be:08:ac:1f:a5: 90:a9:e1:5d:02:6e:33:86:f3:24:24:22:64:d5:a8:32:22:69: f0:6e:ca:05:ff:30:20:24:b5:9e:20:e3:5b:ef:72:2e:2a:07: f5:60:43:64:f6:d5:a4:4c:8a:61:8e:94:0e:5e:46:db:98:f4: ad:b4:e8:17:ab:9b:e5:eb:7a:62:85:17:bc:25:a2:b5:cc:ab: c7:f7:0b:7c:4b:43:be:b0:cc:ff:57:16:d8:3c:3c:30:c1:c4: 5a:ee:73:e4:af:f8:31:c6:96:57:5d:a4:e1:78:f8:ae:b1:6a: 5b:0c:b9:5c:b6:e5:67:ac:32:0b:c6:dd:e1:3d:2b:23:97:b0: c7:3d:97:b4:e7:30:8e:75:44:21:15:2f:26:9d:bd:df:43:06: a6:74:03:50:04:aa:43:0c:7f:88:44:6c:0a:ed:20:d8:04:36: 4b:38:0b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qQ5ZILhxT0OjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NzAwNTJmN2MtNjM3Mi00ODRjLWE2YjctNGI3M2FiMzU2ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdoeLPNvVG/OgDS0glojUH5jeXTbkOgi9GYh Xaq4HYteze4loqo+VbezfuEvQ0LdGR1/VTYSBd3sCAGCA9l5BfWOc8gKagu/0317 3gZUsKb++bNTxpME5aapWNWYsu7dyOHN4cVD1GVRMZGZXAfkqB4NqyOk/f5uGHsb I0VzsBh1E2CaWzq+zV66Q0HPSYgE3t89FH0t+GOur8Qodt3MwXwuqUjgsJcy9JTZ iIpaOYXBpE8wdFVmXZRXvtvhlVEgoIWzfls4VjzMJZOGFjSuaJ0iUJeORkTmRMpS QcGBb+iFzWpUUx24v5GNd1taFW6/pJQWTYNlItCSXlAbpqy+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZlRYp29qmgPQLNLOjmA514botMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZTI4ZGY3NWUtZDcwNy0z YmJiLTk1ZDUtNmI4MzM2ZGUxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7msUobdtF6vHk/0/7qismaxwU6J5CJbKmQohkcLeRhYdRxA79Gw8vO OoMTEjQqhF6jNpVC6edmGYBK+FojZ+UY2yKGEIeMyUP5neI+x0XgsY4MRYa+CKwf pZCp4V0CbjOG8yQkImTVqDIiafBuygX/MCAktZ4g41vvci4qB/VgQ2T21aRMimGO lA5eRtuY9K206Berm+XremKFF7wlorXMq8f3C3xLQ76wzP9XFtg8PDDBxFruc+Sv +DHGllddpOF4+K6xalsMuVy25WesMgvG3eE9KyOXsMc9l7TnMI51RCEVLyadvd9D BqZ0A1AEqkMMf4hEbArtINgENks4C2M= -----END CERTIFICATE-----Generated at Sun Sep 14 13:56:15 2025 by rpki-client