$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa File: fb64f956-784f-3f59-866e-00245a36ad48.roa (raw, json) Hash identifier: DDxrupE4Y20RhlNjJAjKSCmVzPk1OpdjgHBdDPN/7Rw= Subject key identifier: 22:03:0F:F0:E3:9D:6B:28:7C:C4:BB:EC:D2:62:74:0F:A1:C9:DE:BD Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A0F3695C7CAFAD965DEC6AA80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa Signing time: Mon 02 Jun 2025 16:27:52 +0000 ROA not before: Mon 02 Jun 2025 16:27:52 +0000 ROA not after: Sun 31 Aug 2025 16:27:52 +0000 asID: 401707 IP address blocks: 66.206.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:36:95:c7:ca:fa:d9:65:de:c6:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 2 16:27:52 2025 GMT Not After : Aug 31 16:27:52 2025 GMT Subject: CN=f0b51b3a-6446-4438-9a0d-56380c8832fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:4a:d0:5b:3f:44:cb:bf:b8:4e:7d:1c:b8: 47:fb:34:c9:f0:8a:09:1f:8e:23:cc:1a:cd:29:7d: 4f:67:5e:84:19:0b:63:d4:81:06:18:5d:49:a2:b7: 87:2c:89:e8:af:cc:94:e0:a8:77:ce:d6:df:84:6a: 7f:2f:98:12:d9:c8:c1:86:cd:79:14:7f:5a:f7:64: 15:03:33:23:d0:b2:b2:d3:d4:6e:23:a2:4c:c2:9c: d7:5d:14:6d:99:cf:e2:e0:a9:83:5e:b9:b4:0b:d9: a3:08:5d:0f:79:9b:d3:dd:bf:9f:1b:2b:21:3d:ea: 20:31:95:7b:95:6d:ba:ac:16:b6:6f:6a:f5:85:4e: 29:0a:33:b1:74:18:72:a2:83:26:9b:4b:69:2d:fd: e3:ec:7e:43:f2:4c:83:cf:46:32:fc:27:99:9f:9e: 2d:c4:c9:e5:e2:14:b8:c1:57:50:a9:9d:5a:6c:7f: a2:d0:dc:f5:c6:0b:59:65:56:dd:8c:74:88:f7:9b: 1a:7c:df:8e:0f:fe:11:4a:e8:47:2c:39:1b:40:fd: 98:1a:bd:dc:df:44:e1:6c:d1:2c:fa:3a:0e:65:2c: 6a:44:ea:35:62:e1:dc:49:8f:d7:c5:25:84:07:e9: 85:99:b5:cf:f0:07:8b:d4:9c:00:b3:8b:b4:1c:65: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:0F:F0:E3:9D:6B:28:7C:C4:BB:EC:D2:62:74:0F:A1:C9:DE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:32:7e:ea:94:94:24:91:fa:a6:fd:57:70:55:cd:21:8c:85: 2c:f1:09:cd:46:9b:26:e0:52:2c:c5:20:39:ba:91:be:4a:f6: 0b:8a:cd:27:77:5f:7a:0b:f0:aa:e3:87:d1:f3:71:35:7a:3b: 84:90:24:67:f1:10:59:a0:a5:d6:30:c1:a7:cf:bb:82:be:b2: 10:52:31:61:56:82:2e:e1:3a:0f:84:9e:27:51:ef:bf:cf:df: 7a:93:82:c1:ce:9a:4f:f8:ef:32:af:ee:5b:fa:3e:16:cf:da: 56:03:fd:55:bf:db:40:ad:08:63:dc:fd:ad:37:a1:43:a0:f5: 0c:27:6e:3b:49:bd:c3:4d:af:da:34:68:59:09:49:4d:3d:6d: ca:17:a1:bd:55:e7:0e:26:44:92:4b:ec:ed:78:0a:a3:7d:8f: de:d7:38:67:30:f8:c3:f9:0e:c9:ad:04:91:18:06:84:be:c5: 69:16:cd:be:5f:c7:d5:61:31:af:fc:68:b0:1c:a2:a4:6d:b4: 6c:13:32:64:65:0a:74:1c:0a:51:cc:73:f1:1c:d8:0f:10:7a: 95:2c:80:83:e9:e3:0e:28:3c:d0:c4:d1:b4:18:61:e3:be:0f: 56:5e:7c:cc:f5:2c:64:85:5c:c1:1b:4a:d3:d2:83:3a:3d:ef: 91:8d:1b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoPNpXHyvrZZd7GqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYwMjE2Mjc1MloXDTI1MDgzMTE2Mjc1MlowLzEtMCsGA1UEAxMk ZjBiNTFiM2EtNjQ0Ni00NDM4LTlhMGQtNTYzODBjODgzMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqdK0Fs/RMu/uE59HLhH+zTJ8IoJH44jzBrN KX1PZ16EGQtj1IEGGF1JoreHLInor8yU4Kh3ztbfhGp/L5gS2cjBhs15FH9a92QV AzMj0LKy09RuI6JMwpzXXRRtmc/i4KmDXrm0C9mjCF0PeZvT3b+fGyshPeogMZV7 lW26rBa2b2r1hU4pCjOxdBhyooMmm0tpLf3j7H5D8kyDz0Yy/CeZn54txMnl4hS4 wVdQqZ1abH+i0Nz1xgtZZVbdjHSI95safN+OD/4RSuhHLDkbQP2YGr3c30ThbNEs +joOZSxqROo1YuHcSY/XxSWEB+mFmbXP8AeL1JwAs4u0HGWuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIDD/DjnWsofMS77NJidA+hyd69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmI2NGY5NTYtNzg0Zi0z ZjU5LTg2NmUtMDAyNDVhMzZhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEyfuqUlCSR+qb9V3BVzSGMhSzxCc1GmybgUizFIDm6kb5K9guKzSd3 X3oL8Krjh9HzcTV6O4SQJGfxEFmgpdYwwafPu4K+shBSMWFWgi7hOg+EnidR77/P 33qTgsHOmk/47zKv7lv6PhbP2lYD/VW/20CtCGPc/a03oUOg9QwnbjtJvcNNr9o0 aFkJSU09bcoXob1V5w4mRJJL7O14CqN9j97XOGcw+MP5DsmtBJEYBoS+xWkWzb5f x9VhMa/8aLAcoqRttGwTMmRlCnQcClHMc/Ec2A8QepUsgIPp4w4oPNDE0bQYYeO+ D1ZefMz1LGSFXMEbStPSgzo975GNGxg= -----END CERTIFICATE-----Generated at Mon Jun 9 06:48:31 2025 by rpki-client