$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa File: 50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa (raw, json) Hash identifier: gfp+O3l/mtUh/KSW/hHEqnJTFNBDA3TgpDSpBeAory8= Subject key identifier: 16:73:00:EA:EC:49:1E:98:E2:23:43:22:74:D1:C7:B4:47:77:94:8F Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584ADD66834B1A882ED21C0C2F00 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 11650 IP address blocks: 199.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:83:4b:1a:88:2e:d2:1c:0c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=fe8a08dc-399a-4038-9d27-98ede7b126f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7e:18:b0:e5:1a:fb:50:75:77:b5:86:55:1a: 8d:8d:d7:dd:5f:40:6b:71:73:fb:0e:68:30:97:59: 5c:35:93:31:66:8c:f0:f0:31:ab:8c:ea:ca:e8:da: 10:df:0f:59:e9:ec:2f:3a:ea:a2:db:7c:69:e1:3b: 9e:76:d2:ca:70:d3:38:be:fb:6c:e0:8a:ad:87:0e: 80:9f:fa:c5:9d:8d:3d:95:c4:c7:44:f5:c0:79:cd: e5:8b:1c:09:07:02:55:f0:78:50:0f:a7:cd:58:88: 7e:64:5b:0d:2c:3f:93:f7:ad:df:33:25:f7:c6:03: d1:d8:42:98:de:08:a2:1c:4b:ef:ed:3e:51:c6:09: 27:ed:ae:6e:f6:f9:67:d6:a3:f4:f9:5c:1e:30:c1: 65:b6:f7:ab:e1:b5:be:08:ae:f8:79:4c:b9:ea:2c: a2:76:46:1a:8b:aa:65:30:e1:aa:02:c2:1b:af:28: 22:9f:dd:c4:1d:2d:81:a6:a5:a0:78:61:70:e1:63: 96:57:52:5d:f3:6d:39:6e:e0:ea:e2:77:ae:5f:50: d5:ff:a8:a3:82:00:0c:3d:04:c8:c3:06:7b:af:15: 83:5b:a4:e5:3d:6d:7e:dc:9c:f9:a4:94:3d:a8:8e: 83:2a:34:02:cf:7a:b0:d3:ef:23:ff:32:ae:55:d5: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:00:EA:EC:49:1E:98:E2:23:43:22:74:D1:C7:B4:47:77:94:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 199.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e3:5e:fd:76:6d:ae:e9:ea:53:a7:62:47:aa:30:a4:45:98: d4:8c:f3:7f:d8:07:eb:4f:dd:55:d6:ba:b6:11:1e:82:79:fc: 02:2d:44:26:d4:5d:6e:0b:97:1b:60:33:12:ea:a2:22:f3:b3: 2a:bd:8d:06:f9:20:96:af:fb:bd:e2:0b:76:5c:c9:cb:a1:3d: ac:67:59:c5:44:d5:b9:21:a7:52:92:b6:45:48:a6:d9:3c:d6: dd:18:b8:b3:2e:67:fd:3a:d2:6d:c6:5f:43:3d:ca:8a:16:6e: bb:a1:54:8e:e5:cb:5f:4e:67:1f:7b:e6:8d:be:33:6c:7a:cd: 40:ce:e1:0a:26:5a:81:76:4a:f9:9f:c8:c2:d1:c2:1c:35:9f: c5:c3:71:71:15:3a:70:5e:03:ad:6a:54:9a:5e:c4:d1:d8:78: d5:97:59:ef:da:34:fb:80:dd:6c:7f:c1:53:8f:f1:7d:55:c4: 6e:9d:7d:83:73:33:65:ac:41:1d:bd:d6:0d:90:c8:5d:d3:20: e3:66:cb:20:fd:41:e9:32:9a:54:9b:42:cc:54:bb:e8:81:f9: 1b:8a:ed:14:53:8c:68:83:a0:38:a8:ec:b4:db:47:fb:c4:87: 69:2f:20:16:d4:e1:72:55:fd:1d:a2:42:19:f7:60:34:56:73: 84:3d:63:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoNLGogu0hwMLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmU4YTA4ZGMtMzk5YS00MDM4LTlkMjctOThlZGU3YjEyNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn4YsOUa+1B1d7WGVRqNjdfdX0BrcXP7Dmgw l1lcNZMxZozw8DGrjOrK6NoQ3w9Z6ewvOuqi23xp4TuedtLKcNM4vvts4Iqthw6A n/rFnY09lcTHRPXAec3lixwJBwJV8HhQD6fNWIh+ZFsNLD+T963fMyX3xgPR2EKY 3giiHEvv7T5Rxgkn7a5u9vln1qP0+VweMMFltver4bW+CK74eUy56iyidkYai6pl MOGqAsIbrygin93EHS2BpqWgeGFw4WOWV1Jd8205buDq4neuX1DV/6ijggAMPQTI wwZ7rxWDW6TlPW1+3Jz5pJQ9qI6DKjQCz3qw0+8j/zKuVdXtlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZzAOrsSR6Y4iNDInTRx7RHd5SPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvNTBjMDM3ZjgtYjBmNS0z YzNiLThmZmUtNDM5NWU0OWM2NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjjXv12ba7p6lOnYkeqMKRFmNSM83/YB+tP3VXWurYRHoJ5/AItRCbU XW4LlxtgMxLqoiLzsyq9jQb5IJav+73iC3ZcycuhPaxnWcVE1bkhp1KStkVIptk8 1t0YuLMuZ/060m3GX0M9yooWbruhVI7ly19OZx975o2+M2x6zUDO4QomWoF2Svmf yMLRwhw1n8XDcXEVOnBeA61qVJpexNHYeNWXWe/aNPuA3Wx/wVOP8X1VxG6dfYNz M2WsQR291g2QyF3TIONmyyD9QekymlSbQsxUu+iB+RuK7RRTjGiDoDio7LTbR/vE h2kvIBbU4XJV/R2iQhn3YDRWc4Q9Y3E= -----END CERTIFICATE-----Generated at Wed Aug 20 23:06:07 2025 by rpki-client