$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa File: d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa (raw, json) Hash identifier: 8WenCfqV0hy9k34qui5ZW7yRSOvo4w3W5BOe1Mu/oc0= Subject key identifier: 3C:FE:FE:FE:A9:81:FD:44:5B:CE:32:89:55:16:9C:01:09:7D:20:2A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A9E966764E8D6ABBC4C235400 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 40244 IP address blocks: 66.96.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:67:64:e8:d6:ab:bc:4c:23:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=5c9f0570-c871-42b5-8bba-484b428750d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:5a:f3:10:8a:5c:2a:cc:41:c1:f0:7e:00: 75:21:76:7a:0a:df:4c:00:ea:43:0e:87:26:13:37: 19:6c:d1:55:ae:cc:23:34:be:6e:e2:a5:34:91:61: d6:57:aa:7f:a7:a1:20:26:1f:66:cc:98:41:28:f8: 86:64:f6:e8:64:6a:51:7c:20:d2:e4:45:df:8e:a2: 7c:fc:37:9a:90:dd:5b:27:1b:65:47:f9:25:de:91: 2c:fd:5f:d5:2b:78:96:89:70:71:7f:25:ec:9e:99: 97:97:ea:64:b4:85:88:3a:9e:46:04:8c:b1:91:09: 78:10:9b:0e:a2:17:90:99:f5:44:77:5e:80:3a:82: 8a:e2:cd:88:4d:77:41:16:94:4a:ce:2c:13:b5:3d: 8c:00:1d:d3:3b:9f:5e:83:97:2a:ff:5a:db:87:92: 77:e2:e9:8d:d9:43:36:c0:14:22:d1:c2:1b:40:f5: b4:ca:d9:50:97:66:0e:e3:10:62:19:bd:28:2d:1d: 0e:8b:fe:3c:19:24:40:04:43:74:af:56:ce:9e:51: ad:11:24:bd:f3:08:4d:cd:af:2a:86:2b:73:20:18: b9:58:9a:55:4a:21:a1:af:95:ee:68:55:17:e3:c7: 75:8c:ef:a2:9d:39:ea:2d:e5:c3:de:c3:8a:a2:a7: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:FE:FE:A9:81:FD:44:5B:CE:32:89:55:16:9C:01:09:7D:20:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4d:fe:81:58:dd:5e:5e:1b:e8:fe:a8:99:89:14:ea:e7:17: 58:25:17:27:34:f7:b2:2d:60:8c:af:88:17:fa:de:af:f0:a4: e6:8f:b3:f5:9a:e7:3c:7d:f9:0c:39:b6:3e:61:3c:14:9e:64: b7:f5:54:0a:6d:79:d5:8a:48:26:3a:eb:b9:fa:9d:af:55:d6: ea:70:49:6e:58:ce:d8:a2:d5:bf:74:7f:8e:25:1f:88:18:05: 8e:71:e8:bc:9c:70:a9:16:d3:89:80:52:1d:d5:77:eb:84:03: 31:3d:46:10:ad:ce:f3:c3:08:15:d2:de:50:ba:5a:6b:28:0f: 84:dc:47:72:ca:dd:f3:82:92:08:cd:1c:4d:65:4d:15:cc:11: 05:ac:03:42:26:71:aa:bc:99:e7:8b:7a:94:fc:81:60:81:9f: 35:da:9f:4a:df:e5:32:c5:db:7e:13:9c:a4:e9:d1:fa:7c:2e: 78:c3:21:fa:b3:34:9f:d9:cf:75:d0:5b:7f:04:ce:bb:54:c6: cb:93:16:83:d9:91:45:fe:5f:56:6f:26:c4:80:2a:eb:d2:6c: 79:b1:12:3f:9e:95:5e:5a:c4:73:34:55:9b:25:fa:c4:fb:0d: 1f:3b:22:70:54:ea:cb:6f:df:3f:b0:de:42:eb:15:6d:aa:fb: 5d:d0:63:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmdk6NarvEwjVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NWM5ZjA1NzAtYzg3MS00MmI1LThiYmEtNDg0YjQyODc1MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm69a8xCKXCrMQcHwfgB1IXZ6Ct9MAOpDDocm EzcZbNFVrswjNL5u4qU0kWHWV6p/p6EgJh9mzJhBKPiGZPboZGpRfCDS5EXfjqJ8 /DeakN1bJxtlR/kl3pEs/V/VK3iWiXBxfyXsnpmXl+pktIWIOp5GBIyxkQl4EJsO oheQmfVEd16AOoKK4s2ITXdBFpRKziwTtT2MAB3TO59eg5cq/1rbh5J34umN2UM2 wBQi0cIbQPW0ytlQl2YO4xBiGb0oLR0Oi/48GSRABEN0r1bOnlGtESS98whNza8q hitzIBi5WJpVSiGhr5XuaFUX48d1jO+inTnqLeXD3sOKoqcslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz+/v6pgf1EW84yiVUWnAEJfSAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDAxN2IwZDEtNWIxNy0z ZjBiLWE5ZDMtNDhjMTExMTMwZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1N/oFY3V5eG+j+qJmJFOrnF1glFyc097ItYIyviBf63q/wpOaPs/Wa 5zx9+Qw5tj5hPBSeZLf1VAptedWKSCY667n6na9V1upwSW5Yztii1b90f44lH4gY BY5x6LyccKkW04mAUh3Vd+uEAzE9RhCtzvPDCBXS3lC6WmsoD4TcR3LK3fOCkgjN HE1lTRXMEQWsA0Imcaq8meeLepT8gWCBnzXan0rf5TLF234TnKTp0fp8LnjDIfqz NJ/Zz3XQW38EzrtUxsuTFoPZkUX+X1ZvJsSAKuvSbHmxEj+elV5axHM0VZsl+sT7 DR87InBU6stv3z+w3kLrFW2q+13QY/E= -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:49 2025 by rpki-client