$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa File: f5f4a6f1-995d-3517-a463-04c47c4433da.roa (raw, json) Hash identifier: ffKyYlnUWM9YWqEBa5+Y7iPLfXNY5Q4NpfJXRjSBkiU= Subject key identifier: 81:CD:AA:06:86:EC:48:78:63:48:7B:CC:D5:B3:0F:CE:41:3F:E7:39 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFC1BFAB93170C302C9D79500 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 23.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fa:b9:31:70:c3:02:c9:d7:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=41b9e2cd-f201-4739-af24-6112dfeef666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:e4:8a:ee:d4:6a:50:0d:d2:2e:56:50:a3: d0:08:e9:01:97:a2:b2:4a:39:17:c8:54:b9:3d:e6: ac:88:5c:93:47:34:25:45:24:3e:a3:20:60:12:b9: 10:50:1e:da:5e:70:c5:05:0a:94:95:5f:83:d3:bf: e4:62:8a:fa:e9:51:42:7b:fd:a0:07:02:c5:ce:ce: 4b:66:22:4a:d1:bc:03:cf:06:80:d4:33:5c:47:34: f6:7a:8f:00:e0:68:91:77:53:2f:32:84:22:c6:77: bc:66:fe:ca:ef:5c:86:cb:d0:31:b4:b4:7d:7b:81: 52:34:46:a0:ad:ad:78:e2:f9:64:d7:58:74:5c:98: 5a:3e:7e:3f:49:aa:ab:15:17:ad:92:df:af:eb:b0: 84:d5:bc:1f:2a:89:ae:92:15:0d:79:be:f2:11:c7: a8:bb:31:7b:06:2e:43:0c:f1:a4:83:b6:b7:e6:91: 5a:51:65:05:ac:83:59:f3:f8:a4:14:7f:31:c4:01: 30:c0:32:f9:7e:d3:ff:d7:bc:f5:81:16:d8:49:f8: e2:dd:8f:31:c3:7f:03:14:4f:4f:33:5c:65:4a:fc: c8:11:74:c3:5c:cd:8e:03:d7:89:87:b8:82:d4:d8: 14:f5:dd:91:ff:cb:3f:39:d3:71:0c:48:ff:8b:a5: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:AA:06:86:EC:48:78:63:48:7B:CC:D5:B3:0F:CE:41:3F:E7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:60:00:df:47:c7:86:f7:1b:98:e2:8d:2f:d2:81:fd:92:74: 5d:fd:a7:97:c3:72:33:66:63:91:c3:de:56:35:3a:90:a2:cf: b5:ea:b7:70:59:42:0f:6e:24:34:2b:5d:1f:3e:49:bd:0a:c1: 5e:f3:33:2b:fb:4b:13:2a:40:6f:f8:95:7a:d7:b4:af:c5:a2: 2c:e3:fe:34:83:d5:40:77:56:2f:46:9a:b8:85:ef:12:0c:31: bc:d4:d5:12:d3:04:ac:19:9b:78:84:f2:21:92:fd:5a:93:69: 11:f2:f7:72:29:b1:88:df:6d:76:cb:8d:fe:cb:2b:d7:0d:dd: 8b:1e:de:29:89:e7:18:24:6d:af:f8:3d:4a:6f:6e:d2:f4:4f: 2c:dc:5c:ac:73:5d:c9:4a:be:5b:44:5a:79:b1:4b:42:b5:1c: 4b:b0:4a:7e:5d:ce:00:b3:f5:d9:6c:84:af:c0:81:4d:87:65: b7:28:52:a0:eb:56:ae:f9:31:15:ea:f8:91:6b:84:d6:d8:66: 72:e5:dd:88:04:33:e3:48:1d:83:df:8d:e2:35:87:e1:36:ac: b1:8e:73:df:8a:df:6b:4b:d4:82:f4:16:80:ff:73:0a:7e:3e: 38:20:45:06:71:4e:48:c7:72:e2:3f:76:8d:8c:e3:0a:2e:74: 12:28:02:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/q5MXDDAsnXlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDFiOWUyY2QtZjIwMS00NzM5LWFmMjQtNjExMmRmZWVmNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsnkiu7UalAN0i5WUKPQCOkBl6KySjkXyFS5 PeasiFyTRzQlRSQ+oyBgErkQUB7aXnDFBQqUlV+D07/kYor66VFCe/2gBwLFzs5L ZiJK0bwDzwaA1DNcRzT2eo8A4GiRd1MvMoQixne8Zv7K71yGy9AxtLR9e4FSNEag ra144vlk11h0XJhaPn4/SaqrFRetkt+v67CE1bwfKomukhUNeb7yEceouzF7Bi5D DPGkg7a35pFaUWUFrINZ8/ikFH8xxAEwwDL5ftP/17z1gRbYSfji3Y8xw38DFE9P M1xlSvzIEXTDXM2OA9eJh7iC1NgU9d2R/8s/OdNxDEj/i6VaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHNqgaG7Eh4Y0h7zNWzD85BP+c5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjVmNGE2ZjEtOTk1ZC0z NTE3LWE0NjMtMDRjNDdjNDQzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGF2+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBgAN9Hx4b3G5jijS/Sgf2SdF39p5fDcjNmY5HD3lY1OpCiz7Xqt3BZ Qg9uJDQrXR8+Sb0KwV7zMyv7SxMqQG/4lXrXtK/Foizj/jSD1UB3Vi9GmriF7xIM MbzU1RLTBKwZm3iE8iGS/VqTaRHy93IpsYjfbXbLjf7LK9cN3Yse3imJ5xgkba/4 PUpvbtL0TyzcXKxzXclKvltEWnmxS0K1HEuwSn5dzgCz9dlshK/AgU2HZbcoUqDr Vq75MRXq+JFrhNbYZnLl3YgEM+NIHYPfjeI1h+E2rLGOc9+K32tL1IL0FoD/cwp+ PjggRQZxTkjHcuI/do2M4woudBIoAvs= -----END CERTIFICATE-----Generated at Sun Sep 14 13:54:16 2025 by rpki-client