$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa File: 42d275a6-2920-3503-8bc8-18cdead41ead.roa (raw, json) Hash identifier: bRhBbyxW64ZMG65zdFdMpkTvJLg1W19hTHwlAR0+ugI= Subject key identifier: 0F:41:51:37:5E:BC:BB:51:79:D6:6A:D7:83:2E:A2:85:B1:49:45:81 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A3B7AF5408500E6F9A371C940 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 29802 IP address blocks: 91.191.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f5:40:85:00:e6:f9:a3:71:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=b7521fad-44fa-46ba-8ab6-87f6a032ff91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:36:52:fd:26:04:9c:0a:4d:68:4b:0b:07: d7:56:1c:a4:16:94:35:00:29:c7:bb:31:84:03:d5: 09:58:da:63:81:b3:a5:80:01:f6:c0:1f:39:29:43: 2c:ce:c6:a2:99:90:16:ab:8d:57:58:f6:ff:12:2d: f2:aa:5e:ba:df:f9:30:9f:d5:28:22:76:ea:51:de: 93:ac:29:74:c3:8b:52:02:df:b2:46:04:61:91:1f: 7b:f6:23:ec:6d:e6:11:08:6b:21:0c:a6:f8:41:13: 69:2c:ef:6a:75:59:6d:1e:23:cc:0c:cd:de:a3:db: a3:70:01:20:23:e0:89:f7:e0:e8:31:3f:64:fb:6e: b7:64:51:d0:67:e6:e1:f5:93:5b:98:ce:de:be:49: 85:d8:4a:f9:21:4b:57:70:7e:c6:4b:51:0e:fa:11: 13:81:69:41:31:3f:05:ee:0a:65:04:b7:b3:a0:28: 3b:2d:46:0e:93:e2:e7:b5:2f:34:40:5f:95:4b:2f: 6f:1c:af:b8:d0:f9:e7:b9:af:2d:ca:d6:8e:52:c0: 42:2e:7e:89:7d:3a:0c:7c:d4:07:e1:6c:29:42:e6: 76:d0:d5:58:06:25:d4:ab:78:58:fb:53:5f:d0:f1: 2b:5d:d6:74:83:d1:14:78:03:99:4c:6a:fe:b2:3e: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:51:37:5E:BC:BB:51:79:D6:6A:D7:83:2E:A2:85:B1:49:45:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d4:d3:4a:32:fe:f4:1f:71:22:3e:8c:1d:b5:4c:56:3f:b7: 36:44:c4:68:4f:a7:9d:8d:0d:d5:01:f7:1b:b4:d9:07:28:02: 0f:bb:13:8c:bc:55:f7:e3:30:3c:42:ce:10:b3:19:fd:e3:87: 75:b4:8d:88:18:c9:c1:75:2f:65:08:2b:26:b9:b4:cc:60:12: 3b:0d:1a:fa:8c:29:95:1e:6a:ed:10:0b:8e:94:be:a3:db:36: de:51:2c:03:f0:ed:2f:92:44:c4:80:7d:84:f2:73:e5:9a:3c: dd:e9:df:8f:15:aa:a4:1c:47:80:b5:76:0c:f4:ca:2a:49:79: f2:83:13:56:16:2c:64:18:5e:11:06:58:d3:9b:f9:f8:83:79: c0:8e:ac:33:5c:1b:16:a9:44:49:9f:c1:3d:f2:7f:8a:33:61: 87:13:7a:ca:cd:34:ee:55:85:25:b9:a9:59:02:0c:04:ee:a3: 7e:06:0b:5b:4f:11:40:ca:64:c2:22:d6:1f:02:c2:f4:e7:f9: aa:e8:9a:02:e3:53:ed:58:b2:7c:cc:d0:96:f1:a5:02:ae:8c: 08:90:ca:2e:0c:a8:e3:de:b5:a7:53:b0:56:a0:e0:57:2a:3d: 7b:24:d6:d4:90:42:5d:7e:22:81:1c:e3:8f:5d:48:5f:91:f1: b6:3c:d7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evVAhQDm+aNxyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk Yjc1MjFmYWQtNDRmYS00NmJhLThhYjYtODdmNmEwMzJmZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilk2Uv0mBJwKTWhLCwfXVhykFpQ1ACnHuzGE A9UJWNpjgbOlgAH2wB85KUMszsaimZAWq41XWPb/Ei3yql663/kwn9UoInbqUd6T rCl0w4tSAt+yRgRhkR979iPsbeYRCGshDKb4QRNpLO9qdVltHiPMDM3eo9ujcAEg I+CJ9+DoMT9k+263ZFHQZ+bh9ZNbmM7evkmF2Er5IUtXcH7GS1EO+hETgWlBMT8F 7gplBLezoCg7LUYOk+LntS80QF+VSy9vHK+40Pnnua8tytaOUsBCLn6JfToMfNQH 4WwpQuZ20NVYBiXUq3hY+1Nf0PErXdZ0g9EUeAOZTGr+sj5BHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9BUTdevLtRedZq14MuooWxSUWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDJkMjc1YTYtMjkyMC0z NTAzLThiYzgtMThjZGVhZDQxZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3U00oy/vQfcSI+jB21TFY/tzZExGhPp52NDdUB9xu02QcoAg+7E4y8 VffjMDxCzhCzGf3jh3W0jYgYycF1L2UIKya5tMxgEjsNGvqMKZUeau0QC46UvqPb Nt5RLAPw7S+SRMSAfYTyc+WaPN3p348VqqQcR4C1dgz0yipJefKDE1YWLGQYXhEG WNOb+fiDecCOrDNcGxapREmfwT3yf4ozYYcTesrNNO5VhSW5qVkCDATuo34GC1tP EUDKZMIi1h8CwvTn+aromgLjU+1YsnzM0JbxpQKujAiQyi4MqOPetadTsFag4Fcq PXsk1tSQQl1+IoEc449dSF+R8bY813k= -----END CERTIFICATE-----Generated at Wed Jul 2 07:30:48 2025 by rpki-client