$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b097aa68-42b8-37db-a594-f21521dcb250.roa File: b097aa68-42b8-37db-a594-f21521dcb250.roa (raw, json) Hash identifier: 6+bW3Kilfp8PN7RaduRO0Rg1tsUvqKzpIePwQLmK4Ak= Subject key identifier: 96:AC:38:3D:82:5D:71:6A:EC:9E:25:43:F7:C7:4F:71:C3:9B:9C:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49788490C26888AEF74FF5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b097aa68-42b8-37db-a594-f21521dcb250.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 50.209.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:84:90:c2:68:88:ae:f7:4f:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=70e68925-953b-4c74-9329-8502882ba699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:72:eb:27:fd:41:28:1a:c0:da:41:01:31: f0:07:33:0e:6a:b1:24:c6:9b:31:07:42:07:a9:c7: 36:09:24:c7:95:d4:1f:4a:40:75:4c:53:bf:80:62: 45:fe:73:74:a3:8e:2a:38:c3:df:d0:10:8b:c9:ac: ad:f5:13:4d:c3:b5:83:d6:51:b2:19:8b:7c:2b:57: 72:f2:d3:5d:09:da:1d:8d:71:74:a4:84:a5:50:84: db:0c:37:69:37:5e:06:59:80:c2:95:cf:94:f7:33: a1:9a:24:f9:f6:c0:6d:53:d9:9e:c8:fa:89:db:62: 17:65:16:60:d7:2e:8a:36:49:64:e3:c2:fb:bd:7e: 95:10:44:9c:78:71:c5:6f:97:1c:fe:bc:28:bb:63: 77:a1:c4:b5:e1:cd:93:fa:b4:cd:c5:3f:59:2b:93: aa:e3:78:cd:03:8f:66:7c:25:1c:40:74:7e:31:f6: 9d:90:c4:73:84:de:8c:f3:d3:02:73:eb:4c:fa:9f: 87:40:0d:58:2d:9b:30:0a:07:93:1f:8b:b3:44:24: ef:48:81:67:10:0f:b1:1c:3e:3d:c4:32:78:bd:0b: 57:24:a1:47:00:b5:31:20:8e:c3:fe:f8:65:46:47: a8:e1:86:52:50:9c:c8:be:1b:2d:d8:42:93:f4:bc: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AC:38:3D:82:5D:71:6A:EC:9E:25:43:F7:C7:4F:71:C3:9B:9C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b097aa68-42b8-37db-a594-f21521dcb250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.209.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:19:21:30:9c:01:e0:f5:be:31:d1:d7:c1:45:d7:fc:48:1b: 1a:58:f1:bf:b8:f0:02:5e:02:a5:a3:97:3f:9b:dc:fd:ac:11: 6f:14:9b:36:80:3f:b5:df:8a:2b:23:94:10:ee:ae:ec:62:39: 9d:c7:2e:f7:17:92:0a:b8:70:da:07:93:80:1e:0e:bc:06:06: 15:90:18:57:27:7a:7f:f5:59:9d:c8:48:06:49:ff:b4:64:93: 70:b4:ba:22:9d:1e:3c:37:e9:a9:1f:dc:6e:4a:3e:ec:d3:5b: 73:57:8f:9b:29:31:15:82:21:03:9a:77:10:50:74:36:7c:e1: 51:a3:36:e2:e0:28:51:3a:7c:8d:a2:bf:de:0b:67:cb:83:cc: 08:aa:69:33:05:d9:af:41:a1:ff:b0:e5:53:f2:60:a0:59:5e: b3:66:2c:47:d5:36:0f:35:9f:f8:91:d0:24:7d:62:5d:0f:e4: f1:3d:4e:1b:bf:0b:ba:55:d8:bd:de:f6:f8:12:77:af:7a:04: 68:d0:ab:c5:fc:e6:81:84:bc:7d:1c:78:76:f8:77:67:6f:12: a4:4d:ce:01:1f:16:5b:91:d2:26:18:b4:25:57:08:d3:7b:1c: d0:ca:eb:9e:e8:aa:90:02:22:fa:4c:63:f9:26:e3:b0:11:4b: 21:aa:96:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeISQwmiIrvdP9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzBlNjg5MjUtOTUzYi00Yzc0LTkzMjktODUwMjg4MmJhNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Vy6yf9QSgawNpBATHwBzMOarEkxpsxB0IH qcc2CSTHldQfSkB1TFO/gGJF/nN0o44qOMPf0BCLyayt9RNNw7WD1lGyGYt8K1dy 8tNdCdodjXF0pISlUITbDDdpN14GWYDClc+U9zOhmiT59sBtU9meyPqJ22IXZRZg 1y6KNklk48L7vX6VEESceHHFb5cc/rwou2N3ocS14c2T+rTNxT9ZK5Oq43jNA49m fCUcQHR+MfadkMRzhN6M89MCc+tM+p+HQA1YLZswCgeTH4uzRCTvSIFnEA+xHD49 xDJ4vQtXJKFHALUxII7D/vhlRkeo4YZSUJzIvhst2EKT9LxCEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJasOD2CXXFq7J4lQ/fHT3HDm5zqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA5N2FhNjgtNDJiOC0z N2RiLWE1OTQtZjIxNTIxZGNiMjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMZITCcAeD1vjHR18FF1/xIGxpY8b+48AJeAqWjlz+b3P2sEW8UmzaA P7XfiisjlBDuruxiOZ3HLvcXkgq4cNoHk4AeDrwGBhWQGFcnen/1WZ3ISAZJ/7Rk k3C0uiKdHjw36akf3G5KPuzTW3NXj5spMRWCIQOadxBQdDZ84VGjNuLgKFE6fI2i v94LZ8uDzAiqaTMF2a9Bof+w5VPyYKBZXrNmLEfVNg81n/iR0CR9Yl0P5PE9Thu/ C7pV2L3e9vgSd696BGjQq8X85oGEvH0ceHb4d2dvEqRNzgEfFluR0iYYtCVXCNN7 HNDK657oqpACIvpMY/km47ARSyGqlno= -----END CERTIFICATE-----Generated at Sun Oct 4 02:20:13 2026 by rpki-client