$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json) Hash identifier: QunNg5yWMfjeQLuOAQR7vQx0aOpE5noex/IA0Euqvk4= Subject key identifier: C4:95:0B:8B:51:68:03:A4:F9:5C:B3:8F:37:0B:2C:94:FE:A5:CC:FE Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A3B7AEEF2B2482799F1037E80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 29802 IP address blocks: 91.191.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ee:f2:b2:48:27:99:f1:03:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=33b4e3fb-96ed-4adc-a696-44ed07bc43dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:a4:69:b2:f7:75:b3:ad:3a:bc:2a:73:2d: b2:c8:f1:ed:16:66:ba:83:aa:15:d1:0b:f9:89:66: a8:d5:0a:4f:91:1e:b0:60:30:e3:a0:0e:af:17:7f: ec:b6:ee:08:a8:4a:06:d8:9e:9e:20:58:29:66:a0: 2d:f1:e1:1a:0e:23:0a:89:60:15:1f:a7:90:b7:27: 6b:ae:94:8b:95:7b:24:fd:3e:26:a6:15:7e:b7:09: 50:e6:c0:af:a3:4f:cf:1a:e1:1c:bb:31:63:f4:eb: f5:4b:8b:6f:7f:b2:00:df:e3:d6:c9:05:44:01:af: b5:fe:14:42:90:f5:ea:28:11:11:0d:db:a8:7e:d2: c8:f1:9d:65:37:8b:d6:7d:23:e2:8e:64:b8:ea:19: bf:ce:3e:c9:e9:4b:9b:19:01:b9:a8:c2:a4:c1:c1: fa:6c:d0:e5:d1:87:aa:a1:a3:d4:06:00:40:ec:63: 02:7e:77:b6:3f:a0:e4:4c:41:06:67:38:83:2a:78: 22:cb:04:10:ea:12:55:a9:4a:83:64:9b:73:92:56: 6a:9d:cc:d2:40:35:81:19:21:2f:09:f0:c6:ec:b3: 09:b2:10:42:8f:be:48:50:39:ec:9d:d0:62:94:36: a1:da:fc:60:59:0e:d6:8d:67:c6:03:52:9d:69:a6: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:0B:8B:51:68:03:A4:F9:5C:B3:8F:37:0B:2C:94:FE:A5:CC:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a0:06:03:e1:a6:9f:27:db:46:40:7a:40:a3:70:ed:9a:79: 21:2d:0c:74:d1:0e:84:e9:a2:f6:db:46:1d:79:5a:99:70:34: c8:34:59:f9:43:89:49:c4:4d:80:6e:7d:85:c2:2d:cb:61:bf: ac:94:05:1b:86:d3:82:27:d4:1e:69:88:00:13:34:8b:07:7d: b9:83:2d:13:e0:40:bc:ae:d4:fa:49:51:a3:07:8f:c1:3e:d7: 3e:38:ec:4a:d6:aa:83:38:6f:a8:f4:71:61:ba:ac:e7:3c:36: 57:d0:a6:7b:d3:2b:98:c6:13:f5:37:d1:f5:3a:11:f3:cb:3f: d0:4b:c2:24:e8:40:eb:76:40:14:f9:6c:fc:cf:24:31:58:e8: d4:2d:f6:5e:1f:ad:73:46:3c:e5:aa:1d:e5:0c:67:b5:94:67: a0:77:b3:77:3a:ec:e0:24:1f:0f:ec:c5:4d:67:d5:96:24:c9: c2:6b:b7:fe:fa:a8:05:7b:74:2b:56:14:74:e9:ac:18:53:c0: 2e:07:e0:b0:97:d7:6f:54:9e:d8:80:de:0b:bb:64:04:e3:3f: 53:0c:8b:fd:70:41:83:9c:59:76:7e:60:91:ea:fd:e3:87:12: 7e:5d:62:51:09:1b:19:2b:d7:12:4a:21:06:1d:54:e4:df:fe: e3:fa:1b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eu7yskgnmfEDfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MzNiNGUzZmItOTZlZC00YWRjLWE2OTYtNDRlZDA3YmM0M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKmkabL3dbOtOrwqcy2yyPHtFma6g6oV0Qv5 iWao1QpPkR6wYDDjoA6vF3/stu4IqEoG2J6eIFgpZqAt8eEaDiMKiWAVH6eQtydr rpSLlXsk/T4mphV+twlQ5sCvo0/PGuEcuzFj9Ov1S4tvf7IA3+PWyQVEAa+1/hRC kPXqKBERDduoftLI8Z1lN4vWfSPijmS46hm/zj7J6UubGQG5qMKkwcH6bNDl0Yeq oaPUBgBA7GMCfne2P6DkTEEGZziDKngiywQQ6hJVqUqDZJtzklZqnczSQDWBGSEv CfDG7LMJshBCj75IUDnsndBilDah2vxgWQ7WjWfGA1KdaabaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSVC4tRaAOk+VyzjzcLLJT+pcz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDY5MWQ3N2EtMmEyZS0z NjMxLTllMDUtMzhhNzk4ZjBiOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFegBgPhpp8n20ZAekCjcO2aeSEtDHTRDoTpovbbRh15WplwNMg0WflD iUnETYBufYXCLcthv6yUBRuG04In1B5piAATNIsHfbmDLRPgQLyu1PpJUaMHj8E+ 1z447ErWqoM4b6j0cWG6rOc8NlfQpnvTK5jGE/U30fU6EfPLP9BLwiToQOt2QBT5 bPzPJDFY6NQt9l4frXNGPOWqHeUMZ7WUZ6B3s3c67OAkHw/sxU1n1ZYkycJrt/76 qAV7dCtWFHTprBhTwC4H4LCX129UntiA3gu7ZATjP1MMi/1wQYOcWXZ+YJHq/eOH En5dYlEJGxkr1xJKIQYdVOTf/uP6G8c= -----END CERTIFICATE-----Generated at Tue Jul 1 00:28:50 2025 by rpki-client