$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa File: d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa (raw, json) Hash identifier: vyXMApd1V7yG4bSy0BR2zKG1PPbYJixfJDpLKixuIP0= Subject key identifier: D9:FC:CD:EC:64:79:AB:47:74:C0:8E:BB:C0:73:F4:1E:54:2D:96:85 Certificate issuer: /CN=50554af3-8108-491d-84e4-240f4874833a Certificate serial: 010D0C9F4328584B1F01722C309A52AF3EAE1140 Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 3561 IP address blocks: 185.123.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:72:2c:30:9a:52:af:3e:ae:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50554af3-8108-491d-84e4-240f4874833a Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ae4abe22-8fba-4948-bc4a-fcd24b530326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:18:e7:71:b0:6a:48:43:fb:7f:2e:49:03:e9: 9f:8d:31:56:49:a0:ce:ab:04:53:f3:c0:20:dd:15: 10:f1:eb:f3:34:6f:3d:8b:b8:d9:75:c9:ae:cc:86: ba:df:f7:08:9b:57:c2:17:6c:6b:29:d0:e9:f9:8b: a0:69:9e:4d:e2:ea:77:84:f4:a4:db:4c:98:f6:c5: 36:d1:89:4d:b5:f4:6d:01:75:7b:70:82:5b:7f:79: ef:5e:19:07:27:72:34:87:c5:58:3a:52:04:09:fd: 66:d3:e2:68:fd:2c:f3:1a:ce:e1:96:23:be:70:35: 51:32:de:01:c1:2a:0a:16:17:a4:7f:39:bd:89:20: 4f:ca:0e:99:09:15:5b:69:69:ae:93:06:01:35:4d: eb:f3:f7:e8:e8:8e:0e:e2:17:61:f3:2f:75:cb:3c: 81:6e:ad:da:a8:a1:e7:9d:dc:41:2e:1e:5d:9f:95: 0d:91:9a:81:e2:3b:ef:8e:3a:58:da:cc:68:a7:83: 8b:19:fb:81:3a:52:bd:51:2f:51:57:5d:b6:42:ad: a3:d3:43:bb:90:e5:d2:20:86:8b:f2:f9:57:ce:a1: 2e:5e:31:30:ee:78:68:90:6f:5a:08:2e:2c:46:15: af:52:3b:0a:aa:76:9d:51:06:33:c4:18:e0:ba:0b: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:CD:EC:64:79:AB:47:74:C0:8E:BB:C0:73:F4:1E:54:2D:96:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl X509v3 Authority Key Identifier: keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer sbgp-ipAddrBlock: critical IPv4: 185.123.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:60:dc:91:89:7d:70:e8:a5:b1:5d:e6:d0:91:eb:eb:92:c9: e7:78:3e:51:63:ea:ab:ce:1b:44:a8:12:80:36:af:3b:37:29: 0e:ed:58:26:72:78:bc:fa:fc:fa:2d:4e:6a:e5:7e:dd:2d:d5: 4a:c9:5f:f9:85:3b:c9:8c:26:4e:d6:9b:4c:74:5a:16:49:9b: af:52:f2:58:f2:48:9b:43:f8:e7:7b:c7:d4:54:f6:1c:4a:14: d7:23:86:22:98:3a:ca:b3:4d:8c:b5:02:b6:da:f3:bb:5b:c4: 37:fe:0f:87:50:de:21:74:a6:9f:44:a4:bc:90:d9:c1:74:df: 6d:19:1b:2b:25:d3:26:22:fd:44:28:30:7a:a5:01:04:a2:05: 1a:0e:5a:7e:53:9e:29:0a:6f:8e:cc:5b:b2:3d:63:3f:6c:4b: 7a:df:bc:40:d7:31:ad:ea:3a:3d:7c:cb:a9:bf:7b:17:1e:24: 66:a2:04:54:d8:11:ce:37:8b:ce:ef:77:8c:2b:68:8b:57:65: 6a:25:0f:0c:fc:96:f3:72:df:25:dd:e4:71:fe:d5:7d:17:58: 40:67:a6:69:a7:65:42:74:5d:bf:1c:45:80:4e:27:77:78:8a: 72:f8:50:42:62:bc:e3:5a:ee:cf:f3:01:5f:f9:61:0b:21:a2: 9d:cc:c8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXIsMJpSrz6uEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA1NTRhZjMtODEwOC00OTFkLTg0ZTQtMjQwZjQ4NzQ4 MzNhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWU0YWJlMjItOGZiYS00OTQ4LWJjNGEtZmNkMjRiNTMwMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hjncbBqSEP7fy5JA+mfjTFWSaDOqwRT88Ag 3RUQ8evzNG89i7jZdcmuzIa63/cIm1fCF2xrKdDp+YugaZ5N4up3hPSk20yY9sU2 0YlNtfRtAXV7cIJbf3nvXhkHJ3I0h8VYOlIECf1m0+Jo/SzzGs7hliO+cDVRMt4B wSoKFhekfzm9iSBPyg6ZCRVbaWmukwYBNU3r8/fo6I4O4hdh8y91yzyBbq3aqKHn ndxBLh5dn5UNkZqB4jvvjjpY2sxop4OLGfuBOlK9US9RV122Qq2j00O7kOXSIIaL 8vlXzqEuXjEw7nhokG9aCC4sRhWvUjsKqnadUQYzxBjgugvV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn8zexkeatHdMCOu8Bz9B5ULZaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1 NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3NDgzM2EvZDZkYjFlNmUtNjRlZi0z NjFjLThiODgtZGYyYTc5ZTMzMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTA1NTRhZjMtODEwOC00OTFkLTg0 ZTQtMjQwZjQ4NzQ4MzNhLzUwNTU0YWYzLTgxMDgtNDkxZC04NGU0LTI0MGY0ODc0 ODMzYS5jcmwwHwYDVR0jBBgwFoAUYvmeS4QUp9StIhJM2+NZd5FvugwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBm NDg3NDgzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERg3JGJfXDopbFd5tCR6+uSyed4PlFj6qvOG0SoEoA2rzs3KQ7tWCZy eLz6/PotTmrlft0t1UrJX/mFO8mMJk7Wm0x0WhZJm69S8ljySJtD+Od7x9RU9hxK FNcjhiKYOsqzTYy1Arba87tbxDf+D4dQ3iF0pp9EpLyQ2cF0320ZGysl0yYi/UQo MHqlAQSiBRoOWn5TnikKb47MW7I9Yz9sS3rfvEDXMa3qOj18y6m/exceJGaiBFTY Ec43i87vd4wraItXZWolDwz8lvNy3yXd5HH+1X0XWEBnpmmnZUJ0Xb8cRYBOJ3d4 inL4UEJivONa7s/zAV/5YQshop3MyPI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:14 2025 by rpki-client