$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa File: 95881e9f-f38d-3be4-ab28-5acabe54e2be.roa (raw, json) Hash identifier: 2EPvoTSm5EueQrRorNPix5SBK55Njb/2dsp5zuUyHHw= Subject key identifier: 54:AC:74:65:BF:2B:51:D8:58:CF:51:BE:8F:2F:ED:92:11:40:9F:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980451E85980B5013E32500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7016 IP address blocks: 50.199.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:45:1e:85:98:0b:50:13:e3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d31d8dc9-5301-48fb-846b-66785e1cb382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:bd:4a:c4:93:c7:7f:70:37:ac:73:51:26: 02:38:07:ca:68:e4:39:9c:e7:90:f4:a7:19:52:d9: 49:e4:97:b2:c7:40:fa:8f:0f:ff:46:15:40:74:b6: 5b:da:6e:95:a5:8c:bd:f6:0d:b7:13:24:4d:68:00: 6a:59:0f:dd:4f:8d:b5:aa:1f:02:43:2f:a3:8a:f6: 01:89:02:6a:b6:54:ec:e9:91:a4:8e:47:a6:8f:e6: 1d:8d:4f:20:ae:f1:07:4c:61:52:bf:6e:dd:8e:d9: 68:0a:a4:f5:6a:59:dc:bb:cc:d7:d9:57:39:41:4b: 39:6b:c5:d8:36:8f:30:1f:e2:0a:ae:c0:2f:93:99: 2e:c8:60:8c:d3:ad:84:6e:16:a0:13:16:d7:3e:f2: f7:ec:7f:ea:55:5f:a1:e8:4a:2a:9e:1b:9c:7f:92: 3d:94:42:7b:94:28:68:2f:b7:64:99:c5:f5:a5:b6: d7:5a:06:78:c0:65:23:16:7a:ff:ac:f4:0d:77:e5: 88:e4:75:a4:2c:35:52:a6:61:74:57:65:e4:b0:ce: f9:be:20:05:b1:83:0b:16:fc:e1:1a:5f:71:9f:4b: 31:c7:ce:07:10:33:6f:df:88:95:4b:39:e0:10:b9: 81:55:5a:72:c4:a0:62:98:17:e6:8e:95:b1:69:0b: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:74:65:BF:2B:51:D8:58:CF:51:BE:8F:2F:ED:92:11:40:9F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.199.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:9b:86:3a:bc:aa:a3:09:aa:7d:6f:3f:6c:8e:d4:1f:27:c6: df:9c:70:4c:2f:c0:7d:59:d6:f1:63:4e:00:58:6d:5a:e4:e2: 03:3a:ae:f4:3e:3e:12:82:56:8e:03:53:b1:91:ae:48:68:69: 42:fa:01:69:38:1c:81:b6:b8:eb:16:b7:80:b5:bd:ea:50:35: cd:62:d7:02:5b:22:9f:17:a3:30:92:02:f6:b1:3d:be:a4:3e: 6a:26:02:0c:d9:ac:b8:96:72:7f:4c:2a:2f:3c:36:1f:03:28: ca:03:55:51:8b:44:2b:5f:36:2b:0d:c5:5a:71:c1:52:48:28: 19:8a:ca:a7:2c:73:c5:73:56:8d:ab:c2:18:3f:71:89:96:ba: 9a:a1:61:cf:65:ad:9d:d4:9e:8d:47:98:4f:e8:72:18:5f:d7: 13:25:e6:1d:73:ea:8e:74:72:6b:d7:7a:8f:31:6f:c3:7a:33: eb:fb:8d:71:fd:8a:8e:48:16:ca:d6:c6:73:36:2c:1b:d3:76: e7:81:bb:e2:92:17:80:ba:12:6b:3e:af:0d:df:1d:4c:19:73: c2:84:f2:90:2b:f0:02:e9:ff:3d:99:0d:7e:a0:d5:52:4e:08: fb:f1:c6:3c:05:55:42:3e:4d:1b:78:00:d2:d7:d6:6e:7a:fc: 2a:98:a9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgEUehZgLUBPjJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDMxZDhkYzktNTMwMS00OGZiLTg0NmItNjY3ODVlMWNiMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKq9SsSTx39wN6xzUSYCOAfKaOQ5nOeQ9KcZ UtlJ5Jeyx0D6jw//RhVAdLZb2m6VpYy99g23EyRNaABqWQ/dT421qh8CQy+jivYB iQJqtlTs6ZGkjkemj+YdjU8grvEHTGFSv27djtloCqT1alncu8zX2Vc5QUs5a8XY No8wH+IKrsAvk5kuyGCM062EbhagExbXPvL37H/qVV+h6Eoqnhucf5I9lEJ7lCho L7dkmcX1pbbXWgZ4wGUjFnr/rPQNd+WI5HWkLDVSpmF0V2XksM75viAFsYMLFvzh Gl9xn0sxx84HEDNv34iVSzngELmBVVpyxKBimBfmjpWxaQsSaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSsdGW/K1HYWM9Rvo8v7ZIRQJ9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU4ODFlOWYtZjM4ZC0z YmU0LWFiMjgtNWFjYWJlNTRlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqbhjq8qqMJqn1vP2yO1B8nxt+ccEwvwH1Z1vFjTgBYbVrk4gM6rvQ+ PhKCVo4DU7GRrkhoaUL6AWk4HIG2uOsWt4C1vepQNc1i1wJbIp8XozCSAvaxPb6k PmomAgzZrLiWcn9MKi88Nh8DKMoDVVGLRCtfNisNxVpxwVJIKBmKyqcsc8VzVo2r whg/cYmWupqhYc9lrZ3Uno1HmE/ochhf1xMl5h1z6o50cmvXeo8xb8N6M+v7jXH9 io5IFsrWxnM2LBvTdueBu+KSF4C6Ems+rw3fHUwZc8KE8pAr8ALp/z2ZDX6g1VJO CPvxxjwFVUI+TRt4ANLX1m56/CqYqeg= -----END CERTIFICATE-----Generated at Mon Sep 28 11:24:52 2026 by rpki-client