$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d7c3fb-efa1-32f4-b7eb-a7c3650af738.roa File: 20d7c3fb-efa1-32f4-b7eb-a7c3650af738.roa (raw, json) Hash identifier: xIJ1aq55+LsrRYtNgvW0LigsibM0LzFOnIrY92MM5ks= Subject key identifier: 0B:4E:81:E3:F8:5D:21:41:38:DB:53:88:A3:58:9C:63:72:DD:07:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DBA1EEC7DDC978C068A9E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d7c3fb-efa1-32f4-b7eb-a7c3650af738.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 395676 IP address blocks: 50.234.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:1e:ec:7d:dc:97:8c:06:8a:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1aec4328-6a0f-4c8b-b416-9957487bad9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:5c:60:10:55:43:3c:c1:e7:30:ba:dd:35: c0:41:ea:7f:19:e7:4f:a1:18:36:1a:f8:cc:ff:f6: 5d:35:36:cc:73:d2:48:7d:1e:fe:e2:5a:99:e2:e4: 0d:ea:45:26:b4:1f:47:a4:c3:96:fc:dd:6d:e7:ea: 18:7f:f3:11:d9:c7:7b:b7:a4:62:46:fe:68:7c:8a: 0f:9c:22:e0:18:43:b4:b1:44:9e:79:13:65:4c:e1: d8:14:dd:92:ec:65:15:0d:b5:69:37:6f:9c:f4:61: e4:41:ab:ab:16:c0:65:65:db:cf:21:ed:70:7b:d2: 48:b3:30:ea:72:de:75:23:8d:9f:e1:fe:39:ea:0d: d9:8b:e4:a6:fa:b7:9f:97:d7:f9:36:bf:81:17:5b: ed:be:5d:79:e7:99:44:c8:a9:30:a0:ab:73:87:3d: 56:ac:d6:d0:1f:2f:0a:a8:e6:11:4f:a5:89:ae:a0: 2f:69:1c:6f:22:1d:8b:fa:78:ec:8c:47:c1:a5:7d: e1:9a:9a:84:43:a8:36:8c:09:12:60:c5:83:82:02: 6b:00:15:16:27:6a:9b:3c:95:20:ce:f7:49:79:64: a8:8e:e6:50:3e:46:6e:55:0a:f7:19:71:2b:35:7a: 19:a0:7e:64:81:1e:03:6d:23:2b:7a:16:02:59:b7: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:81:E3:F8:5D:21:41:38:DB:53:88:A3:58:9C:63:72:DD:07:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d7c3fb-efa1-32f4-b7eb-a7c3650af738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.234.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:36:b6:4a:f5:7b:9b:c7:a3:e1:05:70:46:96:29:fe:63:92: a6:0f:71:c8:11:a9:f1:83:0e:54:32:4e:a8:33:3b:fb:bd:d2: 7d:36:77:36:9a:01:41:eb:a3:72:63:48:20:df:1a:43:2b:16: 16:94:32:7d:c0:5f:ef:7c:e0:85:75:e4:f1:1a:93:ef:b1:5f: de:a8:d4:55:61:4e:29:f1:c3:e7:54:ac:0b:42:a4:d2:9a:22: ff:52:73:56:e2:bd:be:54:af:e3:ec:8b:32:87:6b:64:ac:22: a0:9e:21:71:21:fd:8f:d6:13:3c:bd:c9:60:fa:87:e9:01:89: 64:61:a5:86:dc:2d:c7:5c:5d:e2:87:5f:a4:f9:db:df:31:36: fc:a9:94:0e:e5:13:0c:38:6f:c5:b2:df:eb:be:77:53:ef:c6: 15:db:bf:1c:02:d9:58:ed:9a:01:de:cf:53:59:61:18:ce:4c: 67:42:e7:c4:0c:84:04:a0:31:9a:38:7d:43:39:d2:3a:3f:98: e6:27:c8:a4:34:c7:a4:02:32:c1:cf:fe:73:74:41:bd:ed:f0: e7:32:54:8a:96:fe:70:65:d2:37:42:d1:81:c2:65:47:df:5f: 34:75:8c:a6:4d:7a:b6:01:84:95:f3:68:d0:7f:21:71:99:d5: 7f:af:ab:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uh7sfdyXjAaKnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWFlYzQzMjgtNmEwZi00YzhiLWI0MTYtOTk1NzQ4N2JhZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1cYBBVQzzB5zC63TXAQep/GedPoRg2GvjM //ZdNTbMc9JIfR7+4lqZ4uQN6kUmtB9HpMOW/N1t5+oYf/MR2cd7t6RiRv5ofIoP nCLgGEO0sUSeeRNlTOHYFN2S7GUVDbVpN2+c9GHkQaurFsBlZdvPIe1we9JIszDq ct51I42f4f456g3Zi+Sm+refl9f5Nr+BF1vtvl1555lEyKkwoKtzhz1WrNbQHy8K qOYRT6WJrqAvaRxvIh2L+njsjEfBpX3hmpqEQ6g2jAkSYMWDggJrABUWJ2qbPJUg zvdJeWSojuZQPkZuVQr3GXErNXoZoH5kgR4DbSMrehYCWbd54wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtOgeP4XSFBONtTiKNYnGNy3QdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkN2MzZmItZWZhMS0z MmY0LWI3ZWItYTdjMzY1MGFmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ82tkr1e5vHo+EFcEaWKf5jkqYPccgRqfGDDlQyTqgzO/u90n02dzaa AUHro3JjSCDfGkMrFhaUMn3AX+984IV15PEak++xX96o1FVhTinxw+dUrAtCpNKa Iv9Sc1bivb5Ur+PsizKHa2SsIqCeIXEh/Y/WEzy9yWD6h+kBiWRhpYbcLcdcXeKH X6T5298xNvyplA7lEww4b8Wy3+u+d1PvxhXbvxwC2VjtmgHez1NZYRjOTGdC58QM hASgMZo4fUM50jo/mOYnyKQ0x6QCMsHP/nN0Qb3t8OcyVIqW/nBl0jdC0YHCZUff XzR1jKZNerYBhJXzaNB/IXGZ1X+vq3c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:26 2025 by rpki-client