$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/253ef0e6-1116-3488-b6f0-bae7e7fff14e.roa File: 253ef0e6-1116-3488-b6f0-bae7e7fff14e.roa (raw, json) Hash identifier: VBPSJSiC3EI0hpPVcqHzRwqBKvS6G25e+5taVYKtJ0A= Subject key identifier: A3:D4:B8:6A:16:8D:0C:6B:AB:3C:50:39:51:D4:AE:E1:A8:60:5E:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD28D1B63D8B26CDEE9D88 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/253ef0e6-1116-3488-b6f0-bae7e7fff14e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33662 IP address blocks: 50.209.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:28:d1:b6:3d:8b:26:cd:ee:9d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b7687372-1379-41a4-8c69-bc99b480c739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:0d:c4:20:46:9b:69:7c:b5:8e:ef:6c:0b: 80:bd:fe:06:9c:26:ea:dd:7e:1d:71:7f:93:07:2e: 9b:41:23:a7:e4:fe:ef:d3:75:17:6b:d6:2f:d1:db: 1a:c4:bf:e8:3d:51:7c:47:fe:96:d0:38:05:19:6a: ec:1a:83:b1:25:17:88:fb:70:87:a1:96:5f:52:96: 87:5c:cd:e1:58:6a:8d:6e:cf:79:19:dd:43:d7:64: 89:17:98:f6:5e:50:16:f8:43:40:86:d9:6d:57:1a: e4:36:4d:f4:bf:0f:6d:76:51:2f:c2:4c:94:83:dd: 8e:33:32:26:45:59:87:17:84:33:f5:73:08:9c:0f: 60:d9:51:de:e6:88:5f:3c:d5:00:1e:be:29:4d:f0: f5:bb:e3:06:e0:05:18:dd:37:71:da:6b:12:f4:c9: d8:e4:0a:1f:c2:95:68:ab:d1:ac:31:49:f2:0c:64: 83:91:ef:7a:0d:f3:61:09:4d:67:1e:43:aa:97:17: 9f:06:a6:e2:00:ed:6e:3d:ba:ee:02:b4:c7:90:6a: af:bf:fe:99:0f:73:a5:41:42:87:51:ca:a7:c3:f9: f3:8a:3e:9b:1e:45:68:e4:57:a9:48:43:92:e7:d5: 5d:00:bf:ff:ec:92:3f:97:7b:48:a4:70:6b:28:67: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:B8:6A:16:8D:0C:6B:AB:3C:50:39:51:D4:AE:E1:A8:60:5E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/253ef0e6-1116-3488-b6f0-bae7e7fff14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:0d:1f:75:09:b9:76:0c:4a:f8:ec:f5:71:5e:d8:35:23:9e: 5f:5d:17:35:94:5e:db:b2:dd:0b:19:de:d1:8e:39:78:e6:8d: 30:26:36:e7:c3:07:d2:c8:7a:b6:00:c0:49:34:a4:9b:d7:69: d1:92:92:0d:a3:49:b3:cc:f7:d6:de:65:02:9e:e5:b5:bf:0e: 79:7f:dc:64:73:6b:19:cd:86:79:a4:fc:cf:34:f5:d6:09:1a: 87:4f:1f:c2:f0:9d:e3:cf:d1:22:a0:ab:77:97:c4:6b:fc:74: cb:4d:54:af:2c:e7:9d:c3:bc:66:41:33:35:56:fc:05:00:e8: 2e:8d:0b:df:14:e5:07:e8:8e:93:58:a3:52:fc:3e:85:6b:5a: 5c:fc:30:9a:d2:6f:6b:6a:d6:31:3c:97:a5:84:18:89:45:ee: ef:3b:a6:7c:4b:67:45:95:ba:de:c3:67:1f:cd:2e:22:88:92: 05:9d:e5:b0:f5:d7:4d:40:6b:39:4c:27:8f:28:53:5e:b2:7a: 58:a7:9b:f2:f2:39:8e:62:b0:bf:e6:f9:23:ae:d8:27:57:e3: fa:81:09:43:3d:f3:51:a3:32:85:2f:17:50:3a:e8:31:67:52: 7b:63:8c:81:ee:69:c8:5c:89:05:cb:e4:35:e4:29:3d:4d:95: 23:30:24:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SjRtj2LJs3unYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Yjc2ODczNzItMTM3OS00MWE0LThjNjktYmM5OWI0ODBjNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHkNxCBGm2l8tY7vbAuAvf4GnCbq3X4dcX+T By6bQSOn5P7v03UXa9Yv0dsaxL/oPVF8R/6W0DgFGWrsGoOxJReI+3CHoZZfUpaH XM3hWGqNbs95Gd1D12SJF5j2XlAW+ENAhtltVxrkNk30vw9tdlEvwkyUg92OMzIm RVmHF4Qz9XMInA9g2VHe5ohfPNUAHr4pTfD1u+MG4AUY3Tdx2msS9MnY5AofwpVo q9GsMUnyDGSDke96DfNhCU1nHkOqlxefBqbiAO1uPbruArTHkGqvv/6ZD3OlQUKH Ucqnw/nzij6bHkVo5FepSEOS59VdAL//7JI/l3tIpHBrKGcAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPUuGoWjQxrqzxQOVHUruGoYF4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUzZWYwZTYtMTExNi0z NDg4LWI2ZjAtYmFlN2U3ZmZmMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFMtFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4NH3UJuXYMSvjs9XFe2DUjnl9dFzWUXtuy3QsZ3tGOOXjmjTAmNufD B9LIerYAwEk0pJvXadGSkg2jSbPM99beZQKe5bW/Dnl/3GRzaxnNhnmk/M809dYJ GodPH8LwnePP0SKgq3eXxGv8dMtNVK8s553DvGZBMzVW/AUA6C6NC98U5QfojpNY o1L8PoVrWlz8MJrSb2tq1jE8l6WEGIlF7u87pnxLZ0WVut7DZx/NLiKIkgWd5bD1 101AazlMJ48oU16yelinm/LyOY5isL/m+SOu2CdX4/qBCUM981GjMoUvF1A66DFn UntjjIHuachciQXL5DXkKT1NlSMwJH0= -----END CERTIFICATE-----Generated at Tue Jul 1 17:41:05 2025 by rpki-client