$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598232a6-6b37-3cd6-94eb-af76653d3448.roa File: 598232a6-6b37-3cd6-94eb-af76653d3448.roa (raw, json) Hash identifier: vIhtlQ6CMJtH5ZFJITv22V6ZXwog6S7x8kbeIe1fX9k= Subject key identifier: E0:D7:5A:4F:B4:6C:E1:DF:E7:D7:BC:7D:73:D3:EE:74:37:D3:84:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC42A71ECD7CBE90D39FB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598232a6-6b37-3cd6-94eb-af76653d3448.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 50.171.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:2a:71:ec:d7:cb:e9:0d:39:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=af777783-ec59-4341-a0d5-f15fd5385f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:ff:8e:95:ba:d1:6a:71:ca:ea:b3:7d:f7: ac:55:45:43:aa:15:2f:0a:20:61:1f:2c:36:b1:cf: ba:c7:a7:c2:3f:da:c5:4e:53:78:c1:bb:a8:58:f0: 4f:8d:bc:c4:5a:07:e0:88:2a:e9:65:68:4e:35:e2: cd:47:fd:05:15:a6:f2:06:ac:80:f6:36:a1:2f:c7: 7c:32:a4:0b:ab:9b:d8:90:94:83:8b:fa:b6:8b:bf: aa:27:76:ec:0d:7b:a2:0d:16:bb:2b:d6:8b:ac:d0: 21:73:e5:85:13:80:c2:fd:59:f9:48:c4:a0:30:21: 5e:66:0e:fa:c6:46:8d:96:c6:55:79:5f:3e:13:86: f3:4c:84:a0:df:72:03:cb:0b:4b:de:ef:f2:d6:90: 85:9d:e1:59:11:a2:cf:e2:cb:73:b2:8e:5c:67:9b: 6c:5e:3f:8f:25:3c:91:1f:92:6e:f1:73:3d:7f:fe: dc:24:fe:73:c2:57:24:56:e7:d0:18:c4:0d:ed:58: b4:4e:dc:71:9e:d4:48:d5:2b:b0:00:01:9b:c5:f5: 1a:fe:43:cf:96:fb:6a:e8:8c:18:3e:a7:85:4a:07: c3:3a:6a:6e:4b:d4:45:c7:90:63:84:43:7b:14:34: e1:ad:49:8e:48:fe:35:82:9a:26:59:f4:5b:4e:38: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:5A:4F:B4:6C:E1:DF:E7:D7:BC:7D:73:D3:EE:74:37:D3:84:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598232a6-6b37-3cd6-94eb-af76653d3448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.171.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a4:7c:fd:8f:9d:7b:32:30:16:8d:1d:b5:f8:0b:b2:3e:16: f8:2f:4f:00:31:d1:23:8b:66:55:4b:1c:04:dd:84:65:f6:ad: 68:1d:bd:fb:9b:f4:76:1e:66:6e:93:e5:dd:29:31:0d:6d:7d: df:de:11:3b:ea:08:92:e0:fe:52:9e:35:f7:65:e2:2d:a0:48: 00:53:7e:ad:5e:1d:26:f1:b3:93:e5:23:fe:58:18:62:1d:22: 74:ff:ff:fa:d3:b1:40:2b:fc:19:99:87:78:5a:da:f6:b7:b7: 1f:0d:7d:ac:e2:18:5a:bd:2e:71:ed:ce:74:01:9e:ff:f7:6e: c0:04:39:9d:a4:79:72:2f:64:4d:8e:4b:53:71:19:56:3c:16: 2d:72:77:64:01:9b:63:4e:da:6a:5b:a9:f8:85:7d:bd:f0:e8: 7d:37:68:42:8b:ab:e3:a6:32:9c:a0:df:26:e7:c4:a1:f5:32: f1:47:99:ac:99:8f:61:5f:b1:39:5e:9d:a9:cc:df:b2:45:e6: f6:6a:2c:7a:95:b6:f9:14:61:ac:75:e5:c7:c6:5c:40:da:cc: bf:b3:a3:ab:b0:44:47:14:da:52:a1:ad:43:f1:5d:9b:15:1d: c2:9a:ad:e3:33:a4:b4:9c:ac:37:3e:39:0b:5d:c0:80:4f:67: 4f:e4:b4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxCpx7NfL6Q05+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWY3Nzc3ODMtZWM1OS00MzQxLWEwZDUtZjE1ZmQ1Mzg1ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM//jpW60WpxyuqzffesVUVDqhUvCiBhHyw2 sc+6x6fCP9rFTlN4wbuoWPBPjbzEWgfgiCrpZWhONeLNR/0FFabyBqyA9jahL8d8 MqQLq5vYkJSDi/q2i7+qJ3bsDXuiDRa7K9aLrNAhc+WFE4DC/Vn5SMSgMCFeZg76 xkaNlsZVeV8+E4bzTISg33IDywtL3u/y1pCFneFZEaLP4stzso5cZ5tsXj+PJTyR H5Ju8XM9f/7cJP5zwlckVufQGMQN7Vi0TtxxntRI1SuwAAGbxfUa/kPPlvtq6IwY PqeFSgfDOmpuS9RFx5BjhEN7FDThrUmOSP41gpomWfRbTjikAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODXWk+0bOHf59e8fXPT7nQ304QmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk4MjMyYTYtNmIzNy0z Y2Q2LTk0ZWItYWY3NjY1M2QzNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqvTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqkfP2PnXsyMBaNHbX4C7I+FvgvTwAx0SOLZlVLHATdhGX2rWgdvfub 9HYeZm6T5d0pMQ1tfd/eETvqCJLg/lKeNfdl4i2gSABTfq1eHSbxs5PlI/5YGGId InT///rTsUAr/BmZh3ha2va3tx8NfaziGFq9LnHtznQBnv/3bsAEOZ2keXIvZE2O S1NxGVY8Fi1yd2QBm2NO2mpbqfiFfb3w6H03aEKLq+OmMpyg3ybnxKH1MvFHmayZ j2FfsTlenanM37JF5vZqLHqVtvkUYax15cfGXEDazL+zo6uwREcU2lKhrUPxXZsV HcKareMzpLScrDc+OQtdwIBPZ0/ktJU= -----END CERTIFICATE-----Generated at Sun Aug 24 06:10:11 2025 by rpki-client