$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa File: fb64f956-784f-3f59-866e-00245a36ad48.roa (raw, json) Hash identifier: wc1ZhOJ1162InU/xUoAS8tp0kjg98eKKuhTgJxTL5nI= Subject key identifier: C4:43:67:37:61:59:43:E1:F5:37:53:73:6A:9D:E0:4F:6C:87:57:33 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AEF8BC94A211B8D211A4CAD80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 401707 IP address blocks: 66.206.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c9:4a:21:1b:8d:21:1a:4c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=1dbc733a-2f30-4bc6-83d1-5635f323b000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:79:30:b3:a6:a9:ea:60:aa:67:2c:e5:17: b1:00:53:a7:f5:14:21:15:25:01:36:cf:bf:4d:84: f3:76:0d:71:53:21:ef:35:7b:a4:3a:11:09:c1:56: ba:d5:b5:d1:66:b1:75:b3:9f:d6:99:a7:4d:46:02: 26:42:34:ec:a7:d0:79:6e:85:e9:04:ff:67:a0:f6: 3b:e2:da:c0:16:58:61:5c:4d:4c:0a:b2:46:21:23: 4b:5c:24:d8:4e:97:ee:92:fb:7e:3e:a3:51:91:ce: 89:61:3c:75:b1:c5:77:e7:73:a8:92:e2:e6:b2:16: a3:13:39:1a:00:c8:19:83:a3:e7:1e:3b:6f:ae:3d: 38:46:5e:8a:2c:6f:3d:3e:86:0d:7d:db:be:1f:39: ba:3c:cc:ec:b5:23:eb:98:69:35:70:ff:cd:3a:7c: ea:5c:7d:eb:c0:f2:9b:ed:8f:56:a3:d3:5b:ef:f9: 2b:26:b1:e1:9a:b9:02:cc:41:a4:39:79:77:95:db: 41:14:47:2e:29:64:a4:c5:a1:9b:b8:40:8d:97:b5: fd:39:5e:01:1b:23:8a:72:8d:d2:9b:f6:58:c2:8d: 8a:d5:85:df:22:c2:83:68:53:f8:a3:fd:04:f2:3b: 47:43:de:04:04:19:b2:2a:a6:76:3d:35:e6:f5:8d: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:43:67:37:61:59:43:E1:F5:37:53:73:6A:9D:E0:4F:6C:87:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fb64f956-784f-3f59-866e-00245a36ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:06:15:5b:76:c4:67:b4:c9:b0:d5:c0:ec:1e:d5:37:ca:b0: 84:50:77:58:35:a3:7d:a3:1e:56:99:2f:29:85:db:b3:81:5d: bc:16:8f:55:34:fd:5d:71:d0:4b:83:be:82:a0:d8:93:fd:07: 16:fe:ac:d0:0d:25:00:c6:0a:f6:89:a8:62:8e:89:4b:25:14: a2:cf:e6:be:e0:b8:ef:10:03:bf:cb:ee:2a:91:0b:ca:90:1c: 17:f6:da:30:85:43:ca:57:99:34:94:19:4b:b6:07:79:c5:49: 90:ce:3a:32:b7:17:62:4d:68:cc:32:33:ac:5b:b4:03:96:f5: 14:88:e9:8c:94:96:16:14:ad:a6:0f:2b:04:1d:c2:e7:ff:c5: b5:2e:4f:94:f1:1c:2f:68:90:da:4f:55:29:ed:9d:cd:51:d8: b9:80:63:ed:c4:c8:7a:d9:4d:68:5c:0e:6a:aa:a4:c7:86:58: b6:43:d3:20:77:bc:58:99:92:61:b6:cb:f5:10:ee:48:77:bb: ab:73:c4:d1:15:99:3e:fb:94:43:32:75:a6:04:8b:50:11:31: 13:b2:1d:42:7c:6c:92:e4:f4:f0:ce:27:e3:15:fa:2d:91:10: c5:4e:bd:0e:ca:72:c3:41:21:c7:c6:f3:e6:9a:9d:e4:1e:4e: 4b:05:28:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8lKIRuNIRpMrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MWRiYzczM2EtMmYzMC00YmM2LTgzZDEtNTYzNWYzMjNiMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsN5MLOmqepgqmcs5RexAFOn9RQhFSUBNs+/ TYTzdg1xUyHvNXukOhEJwVa61bXRZrF1s5/WmadNRgImQjTsp9B5boXpBP9noPY7 4trAFlhhXE1MCrJGISNLXCTYTpfukvt+PqNRkc6JYTx1scV353OokuLmshajEzka AMgZg6PnHjtvrj04Rl6KLG89PoYNfdu+Hzm6PMzstSPrmGk1cP/NOnzqXH3rwPKb 7Y9Wo9Nb7/krJrHhmrkCzEGkOXl3ldtBFEcuKWSkxaGbuECNl7X9OV4BGyOKco3S m/ZYwo2K1YXfIsKDaFP4o/0E8jtHQ94EBBmyKqZ2PTXm9Y1NuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRDZzdhWUPh9TdTc2qd4E9sh1czMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmI2NGY5NTYtNzg0Zi0z ZjU5LTg2NmUtMDAyNDVhMzZhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0GFVt2xGe0ybDVwOwe1TfKsIRQd1g1o32jHlaZLymF27OBXbwWj1U0 /V1x0EuDvoKg2JP9Bxb+rNANJQDGCvaJqGKOiUslFKLP5r7guO8QA7/L7iqRC8qQ HBf22jCFQ8pXmTSUGUu2B3nFSZDOOjK3F2JNaMwyM6xbtAOW9RSI6YyUlhYUraYP KwQdwuf/xbUuT5TxHC9okNpPVSntnc1R2LmAY+3EyHrZTWhcDmqqpMeGWLZD0yB3 vFiZkmG2y/UQ7kh3u6tzxNEVmT77lEMydaYEi1ARMROyHUJ8bJLk9PDOJ+MV+i2R EMVOvQ7KcsNBIcfG8+aaneQeTksFKAA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:44 2025 by rpki-client