$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7ee54a-9515-3fc1-8b45-63b33a348bb7.roa File: ad7ee54a-9515-3fc1-8b45-63b33a348bb7.roa (raw, json) Hash identifier: OzNiCrs1VQ4xM0Qkam5BdlMo9kdsGU/OX6222PvuQ1k= Subject key identifier: C7:1F:A7:24:A0:78:C6:AA:E8:8E:6C:A0:CA:BE:E7:AB:CE:90:0D:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB906B0746F737A481E91C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7ee54a-9515-3fc1-8b45-63b33a348bb7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 20214 IP address blocks: 50.224.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:06:b0:74:6f:73:7a:48:1e:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=68e01663-a89b-41ea-9301-64a84f9a8dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:05:d5:03:b6:47:ff:ad:52:a1:ce:c3:d7: 86:44:a5:7a:e2:88:9e:f6:d3:e2:4c:29:86:71:d8: 42:42:2e:dc:62:f3:3c:a1:d5:30:c8:16:e7:a9:27: ab:c2:4a:d6:f7:1f:fd:9f:93:aa:28:d1:e5:0f:b8: c7:08:b5:32:3e:ed:4c:0f:83:d8:d2:c7:67:e4:ca: 17:e4:28:f8:c9:5a:fe:11:c1:9b:54:67:6c:33:df: 1a:dd:6b:ef:e5:aa:bc:f7:ed:bf:9b:59:53:21:67: 84:6e:d6:bb:f6:16:ad:cf:38:cf:6d:81:25:9d:54: f5:ef:63:0b:d0:a0:96:3f:9f:ad:94:51:e4:b4:c0: 81:bd:2f:ce:d7:66:d9:84:32:68:6b:e4:69:0a:32: 82:7b:59:61:46:f5:ff:f3:af:4f:a3:50:1b:a6:69: 5c:c7:ee:17:79:25:c5:79:da:35:96:fb:f6:1c:40: 18:91:59:80:aa:34:0a:44:d2:9c:62:7b:34:d6:3a: fb:00:ca:71:62:7f:f0:2f:fc:cb:60:b7:80:0c:53: 63:75:ad:2b:de:f4:e8:23:87:b6:49:a0:c7:a4:30: 72:fa:86:76:e4:69:68:64:3e:90:49:8b:eb:e8:62: bb:7b:9f:79:ea:09:17:33:f3:d6:91:c2:8b:07:42: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:A7:24:A0:78:C6:AA:E8:8E:6C:A0:CA:BE:E7:AB:CE:90:0D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7ee54a-9515-3fc1-8b45-63b33a348bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.224.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:86:08:27:6e:ce:41:27:c1:91:a6:df:b9:39:d6:dc:cf:97: 8a:0a:d2:9f:c3:ba:68:63:64:05:ed:da:dd:42:0b:61:a6:ec: f9:0f:5e:1f:7e:8a:61:f8:a8:39:f8:c8:91:49:bf:2b:87:36: d3:a0:ec:a4:1c:66:00:a5:7a:bc:7f:e7:01:35:cc:40:a4:84: b0:02:82:63:c7:54:fb:ab:7c:c6:2b:4b:6e:34:30:b1:06:4c: c2:08:05:35:82:6a:08:a5:e4:91:dd:d4:e7:af:7e:44:16:0e: 2c:44:6a:f2:da:03:9b:1e:53:77:75:ce:ae:8c:92:be:7e:c2: 7d:39:ad:3d:16:35:4b:dc:c0:67:1b:46:d7:3c:cc:c3:7c:88: 2c:ae:b4:3a:1a:ba:d8:98:27:74:e0:ab:7f:ea:2a:c0:ec:97: 0c:1f:fb:7b:85:7c:4d:91:6e:71:b9:39:a7:f4:97:16:2c:c6: 96:61:cf:4c:4a:5b:b4:09:c1:e9:d0:10:22:7c:f4:d2:c0:29: ba:3b:7f:c6:33:37:20:77:d8:66:da:b5:cb:6a:79:83:8a:a5: c6:15:a5:4c:79:45:f5:bd:d4:e8:0f:5e:34:6f:46:e3:4c:3b: f9:6e:97:b5:ad:12:15:3f:89:2f:c2:44:24:da:d0:2e:46:a8: a2:a6:e7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQawdG9zekgekcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjhlMDE2NjMtYTg5Yi00MWVhLTkzMDEtNjRhODRmOWE4ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsAF1QO2R/+tUqHOw9eGRKV64oie9tPiTCmG cdhCQi7cYvM8odUwyBbnqSerwkrW9x/9n5OqKNHlD7jHCLUyPu1MD4PY0sdn5MoX 5Cj4yVr+EcGbVGdsM98a3Wvv5aq89+2/m1lTIWeEbta79hatzzjPbYElnVT172ML 0KCWP5+tlFHktMCBvS/O12bZhDJoa+RpCjKCe1lhRvX/869Po1Abpmlcx+4XeSXF edo1lvv2HEAYkVmAqjQKRNKcYns01jr7AMpxYn/wL/zLYLeADFNjda0r3vToI4e2 SaDHpDBy+oZ25GloZD6QSYvr6GK7e5956gkXM/PWkcKLB0JPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcfpySgeMaq6I5soMq+56vOkA2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ3ZWU1NGEtOTUxNS0z ZmMxLThiNDUtNjNiMzNhMzQ4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACGCCduzkEnwZGm37k51tzPl4oK0p/DumhjZAXt2t1CC2Gm7PkPXh9+ imH4qDn4yJFJvyuHNtOg7KQcZgClerx/5wE1zECkhLACgmPHVPurfMYrS240MLEG TMIIBTWCagil5JHd1OevfkQWDixEavLaA5seU3d1zq6Mkr5+wn05rT0WNUvcwGcb Rtc8zMN8iCyutDoautiYJ3Tgq3/qKsDslwwf+3uFfE2RbnG5Oaf0lxYsxpZhz0xK W7QJwenQECJ89NLAKbo7f8YzNyB32GbatctqeYOKpcYVpUx5RfW91OgPXjRvRuNM O/lul7WtEhU/iS/CRCTa0C5GqKKm53s= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:09 2025 by rpki-client