$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52ae477a-4be1-3680-a8a6-f5664aa3f2e8.roa File: 52ae477a-4be1-3680-a8a6-f5664aa3f2e8.roa (raw, json) Hash identifier: ZcEVc3fGVKuRdGLGEHL7gFLDMQx1CbRXncoJH9lDCLM= Subject key identifier: AF:5C:E5:56:85:39:93:B7:8C:6D:E9:02:F0:C7:D7:A3:50:E5:AA:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7BB36AB0C6FCB0447C200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52ae477a-4be1-3680-a8a6-f5664aa3f2e8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33667 IP address blocks: 50.207.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:bb:36:ab:0c:6f:cb:04:47:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7be0a715-ac02-4591-96e0-b08245ea2c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:24:cb:d0:e3:cd:24:7e:12:38:85:10:7e:6a: e2:c6:97:1e:39:bc:86:af:b8:d7:15:52:2d:bd:a3: 67:4c:75:44:7e:0c:b8:b7:0b:0e:19:c4:af:23:73: bd:85:c9:70:6d:60:a1:fa:20:3e:6b:44:80:29:6b: 0b:cf:aa:ec:4a:86:15:36:bd:df:b6:8e:af:23:41: ba:1a:0d:6c:57:83:a0:68:5c:44:d9:ed:13:28:0f: 5e:60:46:61:54:43:ea:ec:ab:74:7d:2e:6c:da:e9: 50:01:fc:3c:4d:fc:c4:7a:a1:85:aa:6d:9d:90:19: 5b:d5:17:18:ae:18:3d:7e:cf:de:98:ae:67:85:8a: 79:3a:49:87:53:a2:63:19:e9:83:22:e1:79:f6:51: d2:f8:05:7f:f2:ed:89:92:17:3f:de:af:d7:f1:f1: 96:45:9e:c2:86:d0:bf:32:ed:a1:08:65:68:4b:57: a6:55:fb:fc:4a:d3:56:2a:12:07:23:e6:6c:3f:32: 43:d6:2a:0c:31:58:6d:63:92:41:d2:7d:1c:16:8d: a0:33:ce:10:8a:b9:76:f4:2f:b7:0d:03:34:95:da: c3:58:6d:09:14:3b:74:62:55:04:7c:ef:4f:d3:10: fe:5f:99:11:8a:f5:1f:34:b8:81:08:2e:86:36:71: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:E5:56:85:39:93:B7:8C:6D:E9:02:F0:C7:D7:A3:50:E5:AA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52ae477a-4be1-3680-a8a6-f5664aa3f2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.207.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:61:b5:db:c2:a5:c6:e1:b2:8f:02:40:89:d5:bb:f1:93:f3: 50:e1:be:da:86:39:62:93:5a:0a:57:30:24:19:22:5c:55:d3: e5:17:78:57:27:db:fc:a2:af:16:32:6e:a2:b7:16:e6:39:ee: 38:d7:f2:77:6b:18:de:78:db:46:08:83:8d:73:ac:a8:59:d9: 49:33:4b:4b:b9:7d:ee:82:d4:2b:d5:29:c2:62:bc:7b:8d:98: a7:e7:62:a6:ad:73:e5:de:c5:4e:d5:39:7d:3b:43:b2:74:95: 7d:a6:d9:a0:86:32:eb:f9:97:63:5a:c5:9e:11:45:9d:69:0f: 68:93:77:37:40:c7:f6:ed:4f:6f:fa:05:4c:2f:7f:14:58:03: 02:d1:e8:ef:32:bf:db:23:05:c0:73:6f:fe:89:6f:4b:77:24: 44:76:1e:07:7c:b8:fa:51:42:4b:a9:8b:60:03:a1:e4:20:79: dc:e5:88:e2:ba:5f:5a:43:11:cd:18:27:07:d4:8b:2a:21:73: 2e:df:ec:c9:5c:af:4e:9f:f9:3a:48:be:0b:1f:5c:eb:e5:28: 21:05:c2:66:ec:91:a4:24:03:0d:f3:77:b1:7a:79:da:24:4a: c0:ee:c2:cf:67:c0:7d:64:58:4d:1d:f1:f3:de:9a:ea:1f:0b: cd:95:cf:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t7s2qwxvywRHwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk N2JlMGE3MTUtYWMwMi00NTkxLTk2ZTAtYjA4MjQ1ZWEyYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iTL0OPNJH4SOIUQfmrixpceObyGr7jXFVIt vaNnTHVEfgy4twsOGcSvI3O9hclwbWCh+iA+a0SAKWsLz6rsSoYVNr3fto6vI0G6 Gg1sV4OgaFxE2e0TKA9eYEZhVEPq7Kt0fS5s2ulQAfw8TfzEeqGFqm2dkBlb1RcY rhg9fs/emK5nhYp5OkmHU6JjGemDIuF59lHS+AV/8u2Jkhc/3q/X8fGWRZ7ChtC/ Mu2hCGVoS1emVfv8StNWKhIHI+ZsPzJD1ioMMVhtY5JB0n0cFo2gM84Qirl29C+3 DQM0ldrDWG0JFDt0YlUEfO9P0xD+X5kRivUfNLiBCC6GNnFrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9c5VaFOZO3jG3pAvDH16NQ5aoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJhZTQ3N2EtNGJlMS0z NjgwLWE4YTYtZjU2NjRhYTNmMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMs++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGphtdvCpcbhso8CQInVu/GT81DhvtqGOWKTWgpXMCQZIlxV0+UXeFcn 2/yirxYybqK3FuY57jjX8ndrGN5420YIg41zrKhZ2UkzS0u5fe6C1CvVKcJivHuN mKfnYqatc+XexU7VOX07Q7J0lX2m2aCGMuv5l2NaxZ4RRZ1pD2iTdzdAx/btT2/6 BUwvfxRYAwLR6O8yv9sjBcBzb/6Jb0t3JER2Hgd8uPpRQkupi2ADoeQgedzliOK6 X1pDEc0YJwfUiyohcy7f7Mlcr06f+TpIvgsfXOvlKCEFwmbskaQkAw3zd7F6edok SsDuws9nwH1kWE0d8fPemuofC82Vz8k= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:51 2025 by rpki-client