$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f84f2a-c007-3c1c-9e0f-c5dee02ace1b.roa File: a3f84f2a-c007-3c1c-9e0f-c5dee02ace1b.roa (raw, json) Hash identifier: gNrR6ZUchzBRlW53Ww2kE7+ED1KKrXkEWDlT5IaOj+I= Subject key identifier: A4:83:DF:B6:E7:43:A0:37:C5:E5:CE:7F:07:74:93:0A:7C:6E:C6:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB828E4414F64D431FC9F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f84f2a-c007-3c1c-9e0f-c5dee02ace1b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 50.202.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:28:e4:41:4f:64:d4:31:fc:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6b64ec72-b489-4647-896b-8286814ca340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:49:3a:fb:6d:e4:c3:37:83:fc:9a:02:48: 15:7b:57:ec:20:05:bd:20:7e:5a:10:b4:64:98:3a: 03:69:37:64:52:fe:75:a7:86:c9:d5:39:6b:ec:e5: 03:f8:bc:1f:62:5e:19:96:d0:82:44:ae:77:f3:35: e0:b3:93:2a:02:4f:a8:87:22:8b:75:76:b2:91:fc: e0:40:a0:4b:ba:04:14:76:3e:7a:63:3a:80:14:46: c7:b4:ce:c5:0f:59:e7:87:3e:eb:56:cd:82:2f:c1: a6:2a:40:77:ba:8b:5a:72:2a:f3:69:ac:8c:f4:cf: ef:ed:2c:52:84:71:7c:7d:d5:5a:18:57:65:cc:0f: d5:12:0c:0a:1b:bd:05:64:a5:a5:03:e3:5d:8e:2f: 1f:b2:62:cd:57:d6:a0:51:37:5a:ac:eb:4f:b3:11: 38:c5:af:75:64:74:25:3f:15:60:5f:5b:9f:bf:6b: 5c:22:7f:81:51:88:75:20:fa:07:1b:f7:95:03:cd: b0:eb:a6:f8:d9:df:a4:42:c1:f1:ff:d4:b3:b6:52: 62:87:a0:4f:1d:14:b2:19:30:3e:b5:14:a9:18:8f: f9:11:ea:85:2e:8d:6a:8c:a0:55:d5:87:58:dc:de: a7:e7:d5:3e:6f:87:5a:49:85:30:b6:58:6d:e5:e3: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:83:DF:B6:E7:43:A0:37:C5:E5:CE:7F:07:74:93:0A:7C:6E:C6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f84f2a-c007-3c1c-9e0f-c5dee02ace1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:f1:e4:33:43:83:77:c5:1a:5f:a8:4c:26:3d:e2:a1:0b:91: 45:6b:98:a1:49:d9:bd:ae:79:56:00:a9:f3:e0:27:c9:f1:4d: 14:35:8f:37:9d:c2:d0:1f:2d:9c:f2:63:0a:1f:f3:33:e3:52: b5:59:bb:bd:22:7b:70:47:3c:c6:a1:07:da:de:b2:f3:93:e8: 3e:e3:2b:27:97:43:6a:50:6c:1f:74:88:66:07:50:d5:1d:ed: bf:57:7c:f2:68:db:fc:ff:62:93:b7:e4:ee:05:e4:95:d8:52: b1:33:09:4e:1a:6a:eb:0a:51:9e:63:c2:c1:57:22:dc:70:b0: dd:31:74:a2:48:1e:cb:15:3e:82:3f:69:fc:1e:12:ac:40:07: c7:7a:ec:54:c5:85:d0:1a:66:40:7d:93:ea:ab:79:58:7b:f9: 9b:9c:bf:89:33:cd:1d:09:cc:f1:3e:09:0c:ae:71:ac:6d:8a: 2e:50:04:10:d0:c3:b9:3f:12:07:1b:ed:43:16:fd:6b:1e:67: c0:c6:9b:1b:9b:70:5f:08:6f:0e:fd:b8:3c:98:dc:26:7b:b2: 31:e5:0c:50:53:0b:13:ff:3f:69:3f:b5:2d:42:5c:22:db:1a: e1:13:cf:55:64:a0:2d:12:49:e8:0e:92:d1:b9:0b:30:19:39: a3:0e:fb:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uCjkQU9k1DH8nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmI2NGVjNzItYjQ4OS00NjQ3LTg5NmItODI4NjgxNGNhMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwpJOvtt5MM3g/yaAkgVe1fsIAW9IH5aELRk mDoDaTdkUv51p4bJ1Tlr7OUD+LwfYl4ZltCCRK538zXgs5MqAk+ohyKLdXaykfzg QKBLugQUdj56YzqAFEbHtM7FD1nnhz7rVs2CL8GmKkB3uotacirzaayM9M/v7SxS hHF8fdVaGFdlzA/VEgwKG70FZKWlA+Ndji8fsmLNV9agUTdarOtPsxE4xa91ZHQl PxVgX1ufv2tcIn+BUYh1IPoHG/eVA82w66b42d+kQsHx/9SztlJih6BPHRSyGTA+ tRSpGI/5EeqFLo1qjKBV1YdY3N6n59U+b4daSYUwtlht5ePlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSD37bnQ6A3xeXOfwd0kwp8bsYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNmODRmMmEtYzAwNy0z YzFjLTllMGYtYzVkZWUwMmFjZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7x5DNDg3fFGl+oTCY94qELkUVrmKFJ2b2ueVYAqfPgJ8nxTRQ1jzed wtAfLZzyYwof8zPjUrVZu70ie3BHPMahB9resvOT6D7jKyeXQ2pQbB90iGYHUNUd 7b9XfPJo2/z/YpO35O4F5JXYUrEzCU4aausKUZ5jwsFXItxwsN0xdKJIHssVPoI/ afweEqxAB8d67FTFhdAaZkB9k+qreVh7+Zucv4kzzR0JzPE+CQyucaxtii5QBBDQ w7k/Egcb7UMW/WseZ8DGmxubcF8Ibw79uDyY3CZ7sjHlDFBTCxP/P2k/tS1CXCLb GuETz1VkoC0SSegOktG5CzAZOaMO+/E= -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:52 2025 by rpki-client