$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9f1d29-746e-3628-9f23-b3a478c35829.roa File: 3d9f1d29-746e-3628-9f23-b3a478c35829.roa (raw, json) Hash identifier: oEdDF/c1A+8a9rjb+i1P9YD/R6JIlVPSi+dKfJhttvw= Subject key identifier: 74:33:9E:57:FC:89:49:63:78:58:9E:25:10:FE:97:DF:32:FA:63:2E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5B15CBB72B116DF3FBF73E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9f1d29-746e-3628-9f23-b3a478c35829.roa Signing time: Mon 29 Sep 2025 13:30:11 +0000 ROA not before: Mon 29 Sep 2025 13:30:11 +0000 ROA not after: Sun 28 Dec 2025 14:30:11 +0000 asID: 401963 IP address blocks: 50.152.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:15:cb:b7:2b:11:6d:f3:fb:f7:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 29 13:30:11 2025 GMT Not After : Dec 28 14:30:11 2025 GMT Subject: CN=b30926c8-9464-44b7-8d1c-ceae3011b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:fa:2e:ac:4a:0a:9d:6d:95:ac:1e:de:2f: cc:ac:af:91:58:4b:78:d4:46:35:75:f7:1c:fe:23: ae:ed:37:ba:79:ba:dd:6a:f2:3b:09:01:45:b1:b6: 1a:05:30:e2:f2:89:3a:c4:ca:68:2f:80:dd:d3:8d: 7f:d1:01:1c:92:ae:e0:d8:c3:50:c8:92:e2:5e:01: 7f:50:68:5e:8f:a3:45:20:e5:95:80:1b:09:bd:b4: 2a:cb:15:bb:54:30:bf:25:87:99:f8:a4:25:99:8b: f7:e6:76:cb:ea:99:db:af:3d:b5:d7:1a:39:96:31: 66:74:e8:8d:2c:df:80:7e:85:d6:7f:20:f1:7d:87: c6:ca:22:e9:fe:67:b1:43:b0:ac:dd:38:b5:a1:3e: 61:6e:50:c7:ff:70:1f:a8:a7:bc:2f:9a:c6:b2:09: ae:19:ab:50:21:4d:27:86:f2:1d:0b:9f:84:47:9e: fa:ab:85:69:f4:df:2e:4d:43:6c:87:ed:c9:d5:9d: b9:2e:d3:77:32:48:f4:70:9e:4a:21:e5:bc:2e:86: 2d:2a:69:0b:f5:7a:15:67:7f:4a:17:57:34:4f:fb: 4d:36:6b:9f:13:f7:2a:96:6c:a3:a4:19:ec:6d:d8: 0b:09:2e:3b:e1:3f:75:fa:1b:8c:80:8d:44:75:2c: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:9E:57:FC:89:49:63:78:58:9E:25:10:FE:97:DF:32:FA:63:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9f1d29-746e-3628-9f23-b3a478c35829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.152.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:71:54:68:f5:a1:ff:cb:b9:76:70:5e:c3:43:2e:33:34:84: 82:4e:a0:04:ed:bc:98:61:a3:1d:70:8f:7b:d0:75:6d:e8:23: 6f:ce:f1:82:48:4f:ec:14:b3:e8:52:3c:6a:a6:48:2b:1c:01: 18:05:c4:7d:b3:3a:5d:7b:e2:68:31:11:f0:66:7e:47:9a:5a: 90:55:40:59:1b:30:ba:50:03:e8:be:9c:36:ef:a3:65:8a:14: 17:0e:a2:68:2c:75:e6:b4:15:11:49:55:07:7b:07:07:18:0f: f1:76:3a:b2:52:80:62:09:ff:c7:4f:51:78:91:70:d8:86:8d: 48:0b:94:e4:c7:2f:0d:a0:29:80:c7:82:8b:eb:c8:a5:36:13: 8c:d0:63:00:d9:e4:a5:ed:92:b9:0d:ab:6f:80:f4:80:52:f8: 43:63:c1:e0:c0:6c:08:11:9e:8c:b4:af:94:a4:dd:4d:ff:4a: bc:9f:c0:d1:5b:3a:42:22:eb:7e:f5:e7:e9:1a:f7:17:dc:39: a9:a2:95:25:ef:0b:c0:7c:e5:91:db:e7:f7:55:b6:bc:73:74: 39:4e:14:15:49:21:8b:77:f5:d3:90:8e:1d:0f:07:de:99:54: 3a:6e:f2:11:cf:3f:83:8a:26:48:9c:ca:c6:c5:e5:07:38:68: b9:37:45:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbFcu3KxFt8/v3PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyOTEzMzAxMVoXDTI1MTIyODE0MzAxMVowLzEtMCsGA1UEAxMk YjMwOTI2YzgtOTQ2NC00NGI3LThkMWMtY2VhZTMwMTFiMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVb6LqxKCp1tlawe3i/MrK+RWEt41EY1dfcc /iOu7Te6ebrdavI7CQFFsbYaBTDi8ok6xMpoL4Dd041/0QEckq7g2MNQyJLiXgF/ UGhej6NFIOWVgBsJvbQqyxW7VDC/JYeZ+KQlmYv35nbL6pnbrz211xo5ljFmdOiN LN+AfoXWfyDxfYfGyiLp/mexQ7Cs3Ti1oT5hblDH/3AfqKe8L5rGsgmuGatQIU0n hvIdC5+ER576q4Vp9N8uTUNsh+3J1Z25LtN3Mkj0cJ5KIeW8LoYtKmkL9XoVZ39K F1c0T/tNNmufE/cqlmyjpBnsbdgLCS474T91+huMgI1EdSzMtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQznlf8iUljeFieJRD+l98y+mMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q5ZjFkMjktNzQ2ZS0z NjI4LTlmMjMtYjNhNDc4YzM1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMpgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJxVGj1of/LuXZwXsNDLjM0hIJOoATtvJhhox1wj3vQdW3oI2/O8YJI T+wUs+hSPGqmSCscARgFxH2zOl174mgxEfBmfkeaWpBVQFkbMLpQA+i+nDbvo2WK FBcOomgsdea0FRFJVQd7BwcYD/F2OrJSgGIJ/8dPUXiRcNiGjUgLlOTHLw2gKYDH govryKU2E4zQYwDZ5KXtkrkNq2+A9IBS+ENjweDAbAgRnoy0r5Sk3U3/SryfwNFb OkIi63715+ka9xfcOamilSXvC8B85ZHb5/dVtrxzdDlOFBVJIYt39dOQjh0PB96Z VDpu8hHPP4OKJkicysbF5Qc4aLk3RQc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:11 2025 by rpki-client