$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa File: 9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa (raw, json) Hash identifier: mBpQTm4xem+AMRQq9Es8CnSfIhXQVbmDJyG1NJsgykM= Subject key identifier: C2:9E:61:BE:35:6B:A6:D5:C2:C2:08:20:74:C9:BD:16:9C:32:AE:B1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B4A472022AFEE5BEBC9879000 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 401299 IP address blocks: 66.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:20:22:af:ee:5b:eb:c9:87:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=79661f97-69b7-481e-8336-5d08c5450ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:7d:ec:b1:f5:e7:a8:b8:ca:08:f2:12:aa: d5:9c:0b:a7:c6:8c:40:ae:73:10:15:b9:a3:58:36: c4:8b:53:27:bd:b3:99:85:d9:1f:9f:e2:2c:20:b8: 6e:1b:53:b1:8e:3c:88:55:53:76:97:dd:58:fb:80: 1f:17:52:a0:99:38:b5:13:20:5c:6f:12:a7:43:f9: 0d:c2:57:60:1b:29:ff:9f:64:2a:92:17:56:1a:1e: 19:73:90:bb:fc:61:76:08:8a:e9:13:96:f3:99:1e: a8:3d:c2:1b:d7:ee:c4:57:0a:87:28:48:84:17:69: 6e:81:5c:6a:12:d2:f6:a8:c3:9d:20:a9:0b:fb:0f: ef:22:6a:1d:05:ba:3d:df:13:98:20:5a:5e:fa:c7: 65:cd:76:a1:4e:02:f5:ff:de:eb:38:0e:05:ba:94: 7e:80:e0:53:ab:b5:ad:39:d8:15:2e:7e:c3:55:34: 55:ee:01:ce:2a:a0:d9:d7:79:12:bf:c6:97:48:f0: a2:84:cc:f1:9f:b5:92:a8:84:c4:e0:86:8b:b6:46: 59:42:7c:9d:5d:24:f5:d1:93:e9:3e:57:e5:c3:b1: ea:c6:79:3e:13:45:a9:28:4a:54:db:0f:71:09:1c: 9c:3e:86:ad:fc:83:43:eb:21:e6:2e:7b:c7:d7:d3: 26:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:61:BE:35:6B:A6:D5:C2:C2:08:20:74:C9:BD:16:9C:32:AE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9d:d1:30:41:d0:ad:76:d8:40:be:53:f1:35:c1:f8:12:11: 8d:ff:83:a4:9f:ce:29:d9:ca:5b:d9:20:b3:ce:7f:a6:fe:1c: f9:30:5d:bb:97:d1:c9:2d:96:f3:cb:ce:63:ff:d5:28:5f:72: 1d:20:6b:50:6c:f5:15:68:d1:bb:4b:86:64:db:f1:54:80:94: 9d:ec:5b:bc:3d:a8:9e:ae:06:17:01:26:73:24:f6:92:ea:50: 90:a9:46:6c:8b:a0:53:df:02:c4:0c:f5:6b:99:24:64:1e:73: 2a:e9:73:80:e3:d0:51:9d:49:4b:2f:0b:54:0f:ce:44:9b:aa: 7d:e9:ce:75:f6:8c:c1:fb:75:64:94:5b:46:e4:4d:ec:c3:ae: 7e:3d:3b:92:b7:a6:17:91:7f:55:89:23:7f:08:01:79:ed:26: 8a:97:c2:c5:7b:6c:5a:b0:30:49:2e:1f:5b:64:19:4e:53:e3: 26:95:64:4a:bc:c7:d8:6c:05:fe:27:21:35:7d:81:ab:c2:5c: 43:1e:58:46:dc:f6:f0:18:46:b4:fe:48:82:8e:4c:3e:b6:cf: c9:1d:5c:ac:91:01:d2:a9:7c:3c:c9:26:4d:c9:db:ac:38:8f: fd:a9:5f:ec:5b:8d:b6:2b:c2:1f:13:f4:46:7d:bb:72:d7:ae: 88:3f:6d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyAir+5b68mHkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk Nzk2NjFmOTctNjliNy00ODFlLTgzMzYtNWQwOGM1NDUwZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyh97LH156i4ygjyEqrVnAunxoxArnMQFbmj WDbEi1MnvbOZhdkfn+IsILhuG1OxjjyIVVN2l91Y+4AfF1KgmTi1EyBcbxKnQ/kN wldgGyn/n2QqkhdWGh4Zc5C7/GF2CIrpE5bzmR6oPcIb1+7EVwqHKEiEF2lugVxq EtL2qMOdIKkL+w/vImodBbo93xOYIFpe+sdlzXahTgL1/97rOA4FupR+gOBTq7Wt OdgVLn7DVTRV7gHOKqDZ13kSv8aXSPCihMzxn7WSqITE4IaLtkZZQnydXST10ZPp Plflw7Hqxnk+E0WpKEpU2w9xCRycPoat/IND6yHmLnvH19MmhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKeYb41a6bVwsIIIHTJvRacMq6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOWU3ZTA1N2EtZDA3Zi0z NTFkLWIyODEtYTJjNmNmNzEzYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKd0TBB0K122EC+U/E1wfgSEY3/g6SfzinZylvZILPOf6b+HPkwXbuX 0cktlvPLzmP/1Shfch0ga1Bs9RVo0btLhmTb8VSAlJ3sW7w9qJ6uBhcBJnMk9pLq UJCpRmyLoFPfAsQM9WuZJGQecyrpc4Dj0FGdSUsvC1QPzkSbqn3pznX2jMH7dWSU W0bkTezDrn49O5K3pheRf1WJI38IAXntJoqXwsV7bFqwMEkuH1tkGU5T4yaVZEq8 x9hsBf4nITV9gavCXEMeWEbc9vAYRrT+SIKOTD62z8kdXKyRAdKpfDzJJk3J26w4 j/2pX+xbjbYrwh8T9EZ9u3LXrog/bUk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:31 2025 by rpki-client