$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f771094a-cddd-3691-82e7-11cca8d0197d.roa File: f771094a-cddd-3691-82e7-11cca8d0197d.roa (raw, json) Hash identifier: GyN9MBtxxX+ZKOUCn2/Z4WfjGYUrYIVryXCS24yu5Dc= Subject key identifier: 71:3B:E0:1D:37:56:E0:63:2B:0B:01:42:3D:01:C9:1A:54:3C:F0:B1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B004BEA3E1784D6883B0BC980 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f771094a-cddd-3691-82e7-11cca8d0197d.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 394727 IP address blocks: 23.227.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ea:3e:17:84:d6:88:3b:0b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=6faf1562-2331-42d1-80b3-fb8e3b10d7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:8a:e9:85:8b:df:d4:1f:ba:73:40:2e:bd: 60:0c:82:af:2f:7c:4d:76:93:e5:7f:fc:d4:6c:e6: d2:e9:d0:23:46:f5:52:7a:c8:97:67:26:ba:f5:b7: 46:3c:b6:29:02:91:f0:bf:10:12:78:e2:9d:fd:9b: da:7e:47:36:dd:3a:93:ba:48:4f:57:e2:da:bc:7c: aa:1e:c9:71:a9:29:57:4c:05:02:8a:c1:aa:ee:72: ae:44:83:f1:c0:f5:de:fb:e3:3c:23:41:50:6d:cc: 29:6b:ae:e6:90:43:ab:72:4d:36:39:29:1a:f2:25: fb:ce:87:11:7f:4b:4c:f0:f8:98:21:bf:54:26:1c: 46:ea:b3:09:7b:ea:02:f8:f9:45:8c:ca:55:a6:c8: 11:3a:e5:0d:d0:26:6a:84:4b:57:3b:00:89:d1:c2: bc:8c:33:cc:79:f4:f1:79:2a:33:a0:96:c8:27:9e: 9b:06:df:dc:c2:bd:62:31:78:b7:a5:34:30:d9:12: ba:da:77:09:0d:ad:64:5c:fe:10:35:24:03:f7:22: a2:90:25:dc:d3:85:6b:dc:9d:59:9a:35:9d:9c:2a: 96:6f:de:0b:5e:d5:ff:3c:19:25:b4:b7:5e:a0:a1: 2e:2a:06:80:a0:f1:0c:cf:6b:62:4e:4a:87:b6:ff: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:E0:1D:37:56:E0:63:2B:0B:01:42:3D:01:C9:1A:54:3C:F0:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f771094a-cddd-3691-82e7-11cca8d0197d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:9d:66:fd:96:6f:24:b4:a9:e8:e5:20:d3:8e:1e:01:c2: 91:9c:34:26:9a:f4:12:4d:79:4c:93:b2:78:b5:00:d3:45:d8: a7:4a:7d:f6:67:2b:10:b5:0e:f2:29:24:96:69:17:1f:14:16: 39:88:5d:60:3c:31:c2:44:06:e9:05:4e:12:b3:e3:b8:82:c8: 62:9a:38:2a:35:0a:98:dd:e0:b7:a6:d9:1f:14:ed:4f:05:e9: 75:50:bd:02:8b:e2:b5:d9:d6:06:f9:6b:2c:72:a5:b1:c5:79: cb:b6:48:90:7e:97:a1:ce:bd:c7:ea:ed:98:00:51:1e:44:31: e8:92:33:fd:96:99:ef:e6:a5:ec:ae:85:40:38:a1:5a:c3:5a: 3e:26:2a:9c:ce:be:a9:de:cb:3f:74:50:42:6c:d5:36:c1:28: 27:86:68:57:16:a8:08:9b:f5:13:4b:3b:9b:68:cd:e2:16:d0: dd:de:33:db:e5:83:1f:b6:f4:b0:12:1e:b6:61:d8:61:53:e9: 0b:65:9f:01:21:02:3d:49:ef:a6:f3:cb:76:06:71:46:09:4c: 4e:9f:79:82:c4:97:29:ec:8b:7d:f8:85:ab:cc:a0:ea:dd:21: b0:07:2b:c1:bf:c7:13:12:be:68:c6:09:d9:c6:dc:3a:1b:85: c2:9e:32:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+o+F4TWiDsLyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NmZhZjE1NjItMjMzMS00MmQxLTgwYjMtZmI4ZTNiMTBkN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yOK6YWL39QfunNALr1gDIKvL3xNdpPlf/zU bObS6dAjRvVSesiXZya69bdGPLYpApHwvxASeOKd/Zvafkc23TqTukhPV+LavHyq HslxqSlXTAUCisGq7nKuRIPxwPXe++M8I0FQbcwpa67mkEOrck02OSka8iX7zocR f0tM8PiYIb9UJhxG6rMJe+oC+PlFjMpVpsgROuUN0CZqhEtXOwCJ0cK8jDPMefTx eSozoJbIJ56bBt/cwr1iMXi3pTQw2RK62ncJDa1kXP4QNSQD9yKikCXc04Vr3J1Z mjWdnCqWb94LXtX/PBkltLdeoKEuKgaAoPEMz2tiTkqHtv8G9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE74B03VuBjKwsBQj0ByRpUPPCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjc3MTA5NGEtY2RkZC0z NjkxLTgyZTctMTFjY2E4ZDAxOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+OnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMYnWb9lm8ktKno5SDTjh4BwpGcNCaa9BJNeUyTsni1ANNF2KdKffZn KxC1DvIpJJZpFx8UFjmIXWA8McJEBukFThKz47iCyGKaOCo1Cpjd4Lem2R8U7U8F 6XVQvQKL4rXZ1gb5ayxypbHFecu2SJB+l6HOvcfq7ZgAUR5EMeiSM/2Wme/mpeyu hUA4oVrDWj4mKpzOvqneyz90UEJs1TbBKCeGaFcWqAib9RNLO5tozeIW0N3eM9vl gx+29LASHrZh2GFT6QtlnwEhAj1J76bzy3YGcUYJTE6feYLElynsi334havMoOrd IbAHK8G/xxMSvmjGCdnG3DobhcKeMhs= -----END CERTIFICATE-----Generated at Mon Nov 3 02:45:37 2025 by rpki-client