$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa File: 8c82c981-041e-3b24-ac57-4809be2f9c89.roa (raw, json) Hash identifier: a7WT79lIP9+vieooU2/3VFSQ8LhkZ2CrPcn5TQ5lswo= Subject key identifier: B3:86:C6:59:9A:51:2E:0D:49:9E:1E:80:0B:A4:0A:2C:D8:4F:AD:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9DB797CC0970AEEB0A800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33491 IP address blocks: 50.228.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:db:79:7c:c0:97:0a:ee:b0:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=88091f63-af1e-4220-89ff-996bad13d5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:c9:f0:fc:15:66:f7:9b:a6:13:2e:16:79: a0:6e:cc:e4:23:25:4e:96:ac:43:4a:cc:87:a7:cb: 42:a9:09:4a:74:8f:a6:91:77:45:65:c5:d9:b6:c1: b2:1e:6f:81:d6:9e:ab:63:88:0c:5b:f8:56:66:83: 8f:7f:4a:5d:69:5d:b7:59:da:05:06:c5:68:51:be: cb:c1:c4:67:f9:12:29:48:52:5b:2f:ff:17:2b:4b: 83:5e:80:82:21:27:85:f9:31:52:cc:d6:c1:8c:fe: 13:96:75:20:0b:49:7c:57:6a:59:2c:37:fe:f3:52: 2f:6b:42:b0:3f:49:e4:43:d6:7c:38:c9:1a:58:3e: e3:ca:52:11:95:0e:2b:87:9b:71:07:b2:cd:dc:e8: df:e3:88:4c:da:d4:2a:43:d4:b7:86:84:4d:90:57: e7:bc:02:64:d3:78:5e:aa:29:6e:38:2d:8f:e2:84: 1f:27:61:86:7f:0d:ac:01:b9:1b:d5:a3:2a:a5:07: 00:52:e1:d2:7e:77:bb:69:4c:24:d7:d6:6c:77:31: 4a:12:e2:6b:5b:42:15:65:78:d5:1f:e4:b1:a3:6b: 55:15:41:5b:03:39:8f:f4:f3:51:12:78:93:76:5e: 05:f1:af:27:01:73:f9:ae:b1:d3:06:a1:61:a1:ec: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:C6:59:9A:51:2E:0D:49:9E:1E:80:0B:A4:0A:2C:D8:4F:AD:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.228.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a1:c1:f1:ea:35:32:bb:c4:d2:55:42:61:da:b9:05:4b:83: 75:b1:5c:bc:26:e8:77:4f:3c:ff:38:73:83:f5:f6:f8:a5:66: 2d:81:ef:08:03:a5:13:02:50:d7:fa:f0:95:2d:5e:cd:66:c2: 36:e1:e7:77:f3:3d:c2:a1:cb:97:6a:97:7a:05:ed:06:c3:b0: 2a:fe:08:9f:0b:58:f8:fe:5c:b2:06:27:ab:89:bd:12:6b:3e: 78:65:78:fc:8f:74:c4:6e:41:36:18:13:51:c4:a0:27:ac:38: e1:f7:e9:7e:ce:b3:df:2a:98:b7:3d:2e:46:2e:19:a8:52:b2: 53:bd:b3:39:e5:6e:37:f3:72:ea:52:98:60:da:16:50:10:89: f2:c1:b2:c3:cb:3c:3a:95:be:99:e8:19:5d:1b:d0:85:a0:d4: 54:66:5e:59:04:04:05:e9:33:6d:31:23:f0:54:72:6f:4b:fb: fe:51:5e:d6:5a:b8:ab:a1:2a:d5:00:52:dc:48:dd:65:e9:21: ef:e1:33:aa:80:d5:e8:42:fc:16:16:30:08:a0:39:35:b3:cf: 47:57:bd:53:49:70:4f:2c:0e:e2:e6:ad:6f:4c:94:d8:b6:b6: 34:35:81:e8:4b:cf:9f:12:13:95:92:73:dc:d5:27:c7:fa:c2: 1a:3e:0a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9udt5fMCXCu6wqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODgwOTFmNjMtYWYxZS00MjIwLTg5ZmYtOTk2YmFkMTNkNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n/J8PwVZvebphMuFnmgbszkIyVOlqxDSsyH p8tCqQlKdI+mkXdFZcXZtsGyHm+B1p6rY4gMW/hWZoOPf0pdaV23WdoFBsVoUb7L wcRn+RIpSFJbL/8XK0uDXoCCISeF+TFSzNbBjP4TlnUgC0l8V2pZLDf+81Iva0Kw P0nkQ9Z8OMkaWD7jylIRlQ4rh5txB7LN3Ojf44hM2tQqQ9S3hoRNkFfnvAJk03he qiluOC2P4oQfJ2GGfw2sAbkb1aMqpQcAUuHSfne7aUwk19ZsdzFKEuJrW0IVZXjV H+Sxo2tVFUFbAzmP9PNREniTdl4F8a8nAXP5rrHTBqFhoezU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOGxlmaUS4NSZ4egAukCizYT604MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM4MmM5ODEtMDQxZS0z YjI0LWFjNTctNDgwOWJlMmY5Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuRhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGhwfHqNTK7xNJVQmHauQVLg3WxXLwm6HdPPP84c4P19vilZi2B7wgD pRMCUNf68JUtXs1mwjbh53fzPcKhy5dql3oF7QbDsCr+CJ8LWPj+XLIGJ6uJvRJr PnhlePyPdMRuQTYYE1HEoCesOOH36X7Os98qmLc9LkYuGahSslO9sznlbjfzcupS mGDaFlAQifLBssPLPDqVvpnoGV0b0IWg1FRmXlkEBAXpM20xI/BUcm9L+/5RXtZa uKuhKtUAUtxI3WXpIe/hM6qA1ehC/BYWMAigOTWzz0dXvVNJcE8sDuLmrW9MlNi2 tjQ1gehLz58SE5WSc9zVJ8f6who+CsE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:55 2025 by rpki-client