$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa File: 4dadbc53-2a77-3ede-a48d-7193e6717962.roa (raw, json) Hash identifier: i9mH8TKPQvgZ3jJEpVfO4CE7grykrAdrCUa05UFHLGg= Subject key identifier: 05:78:B1:AD:08:6E:25:E2:F6:3A:E6:CA:79:D6:2C:F6:29:51:94:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91D7381309752EFEA80C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 50.252.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1d:73:81:30:97:52:ef:ea:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b59c1c76-05e5-4c7e-ac71-4f1103d6226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:f9:e6:83:f5:50:34:8c:3b:1e:b2:e5:1a: 78:fe:94:14:ff:4f:83:83:20:43:55:3a:e4:59:f1: a9:6a:06:8c:37:c6:58:e2:b0:53:5d:35:89:12:e7: 77:30:86:5d:90:c6:8b:a2:da:5e:ed:d3:42:48:cb: 4a:99:61:4b:f0:c9:1a:17:1f:40:66:cf:00:af:29: 8a:11:ae:98:f4:4e:30:ef:73:13:f2:51:9f:42:2d: 81:81:e1:e4:a3:70:c0:8f:aa:22:fb:3b:46:79:3e: bc:b8:89:09:f0:50:61:30:ec:87:f0:0e:4a:f6:49: f1:6d:f8:cd:15:0c:32:08:2e:22:69:ac:73:c4:5a: 76:9a:ee:63:c9:7a:1b:34:c6:50:b1:f5:39:9e:0e: 04:b2:2e:ff:ad:b3:07:f5:a9:91:3d:b6:c5:ac:68: 29:8e:fc:6a:ca:74:36:ef:74:09:3e:99:fd:d8:82: 84:40:a5:20:73:fc:d3:0e:7f:16:ad:ba:1c:a8:d3: c3:f0:ea:d9:a1:fa:96:e3:7e:a5:e6:06:bb:e7:45: b2:a9:2c:44:ce:66:91:c6:af:13:b0:58:cc:22:26: 36:b8:3c:72:6d:2a:39:15:01:6b:9a:38:39:07:3f: b3:8a:41:f2:16:45:b5:51:51:cc:60:b3:a9:41:7b: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:78:B1:AD:08:6E:25:E2:F6:3A:E6:CA:79:D6:2C:F6:29:51:94:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.252.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:63:f2:d2:93:ce:e3:d9:08:20:2b:2d:9e:31:f0:4d:e9:54: a5:00:ec:c0:11:b7:a7:7a:f8:1f:2b:81:01:d4:ca:9d:1b:73: ab:98:4f:ca:4b:c7:a0:10:5f:14:ac:13:b1:ab:c6:a7:c3:db: 3f:37:2c:da:de:66:39:a6:9e:5a:7d:ef:cf:98:b5:48:8c:f6: bf:bd:a4:e5:18:0d:7e:23:3d:07:a7:e6:50:7e:4c:7e:9d:32: f5:d7:13:88:59:d7:92:54:d8:e5:5e:9a:bd:1d:5a:23:8d:3f: b3:83:a7:86:95:4e:47:a0:f8:ee:9f:62:8b:70:8b:6c:b8:26: 30:e0:1d:85:e8:9e:e8:2a:dc:a7:71:d7:10:2e:94:15:fe:74: f5:cf:3e:ab:4f:bf:d9:15:34:a6:b2:2a:15:24:61:b6:7c:63: 96:ce:6c:86:49:31:9c:4c:a8:aa:8c:b3:6e:82:fe:5a:84:36: 6b:ac:f8:9d:9d:cd:45:8d:52:f1:00:24:6e:1e:1f:5a:49:fb: 4b:e1:77:8c:09:0f:a3:96:5f:cc:77:a1:7c:67:31:4a:3c:80: ad:a1:4a:50:27:20:f9:2c:e0:05:4d:95:a1:c5:9f:97:b8:38: dc:40:17:65:75:6b:b5:7a:e4:74:13:89:00:c7:bc:3c:2c:b3: 97:64:be:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR1zgTCXUu/qgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjU5YzFjNzYtMDVlNS00YzdlLWFjNzEtNGYxMTAzZDYyMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgP55oP1UDSMOx6y5Rp4/pQU/0+DgyBDVTrk WfGpagaMN8ZY4rBTXTWJEud3MIZdkMaLotpe7dNCSMtKmWFL8MkaFx9AZs8ArymK Ea6Y9E4w73MT8lGfQi2BgeHko3DAj6oi+ztGeT68uIkJ8FBhMOyH8A5K9knxbfjN FQwyCC4iaaxzxFp2mu5jyXobNMZQsfU5ng4Esi7/rbMH9amRPbbFrGgpjvxqynQ2 73QJPpn92IKEQKUgc/zTDn8WrbocqNPD8OrZofqW436l5ga750WyqSxEzmaRxq8T sFjMIiY2uDxybSo5FQFrmjg5Bz+zikHyFkW1UVHMYLOpQXstLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV4sa0IbiXi9jrmynnWLPYpUZQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRhZGJjNTMtMmE3Ny0z ZWRlLWE0OGQtNzE5M2U2NzE3OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMvyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1j8tKTzuPZCCArLZ4x8E3pVKUA7MARt6d6+B8rgQHUyp0bc6uYT8pL x6AQXxSsE7GrxqfD2z83LNreZjmmnlp978+YtUiM9r+9pOUYDX4jPQen5lB+TH6d MvXXE4hZ15JU2OVemr0dWiONP7ODp4aVTkeg+O6fYotwi2y4JjDgHYXonugq3Kdx 1xAulBX+dPXPPqtPv9kVNKayKhUkYbZ8Y5bObIZJMZxMqKqMs26C/lqENmus+J2d zUWNUvEAJG4eH1pJ+0vhd4wJD6OWX8x3oXxnMUo8gK2hSlAnIPks4AVNlaHFn5e4 ONxAF2V1a7V65HQTiQDHvDwss5dkvlA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:54 2025 by rpki-client