$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e877da-e74d-32a4-8773-c54b73c88b1e.roa File: b8e877da-e74d-32a4-8773-c54b73c88b1e.roa (raw, json) Hash identifier: pVKkuCTTVGqwreF4R7Bx6AazAAYR61tUJHfZUEVU5rU= Subject key identifier: BB:CC:CA:0F:E7:EB:44:FD:52:63:E2:BB:1D:33:01:54:35:83:4A:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB852ECF4233678CDB571C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e877da-e74d-32a4-8773-c54b73c88b1e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 50.201.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:52:ec:f4:23:36:78:cd:b5:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=867b09d2-9567-4967-b88c-c9f364aa1099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:a0:9c:c9:5b:67:ac:d6:61:06:bf:1b:95: af:3b:86:4e:9d:2d:bc:9f:9d:8a:cc:3e:b4:dd:ff: 42:ca:f1:3a:19:8d:8d:ee:9d:91:cd:b6:2d:6e:08: d6:6f:01:44:fe:6d:52:75:6f:20:95:30:6a:10:b1: 54:89:f5:39:22:65:12:7d:36:e4:81:2f:f2:0b:12: 35:0b:8f:ee:2c:13:89:8c:5d:8f:fd:e8:75:2f:ab: b8:16:50:68:3d:4f:58:54:d5:0b:eb:7f:44:e7:21: e6:16:d3:ed:d1:df:73:6e:50:c1:5c:13:0b:d6:04: 08:bb:80:e9:31:33:bb:79:e7:f6:6b:ad:73:6d:d0: 25:60:db:ce:f4:45:46:8a:9e:96:a9:0e:fc:66:60: 45:52:9c:35:4b:76:b3:43:71:6b:97:51:97:1b:ed: 29:0b:cb:cd:1c:54:f0:01:1d:e8:a4:06:26:86:e8: 3a:34:10:97:5b:87:bc:7e:1a:af:ec:fd:bb:99:13: 29:67:70:07:26:88:77:f9:2f:83:56:05:f5:84:01: 8b:6d:d6:18:89:7f:94:90:15:cb:f3:05:3e:c6:c6: 0f:4b:8a:0c:f5:fa:57:80:15:7b:af:23:09:4e:3d: 0c:8d:ff:f7:97:60:ff:0a:49:3c:da:a9:b7:73:ce: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:CA:0F:E7:EB:44:FD:52:63:E2:BB:1D:33:01:54:35:83:4A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e877da-e74d-32a4-8773-c54b73c88b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.201.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3a:2f:3d:c7:37:d1:37:05:a8:25:83:2b:02:c8:92:33:99: 1a:43:af:81:0e:12:44:0f:29:79:09:03:14:22:37:93:b9:23: ba:52:05:33:23:09:ab:53:8b:f2:7d:b9:c4:65:a0:44:c9:b2: 76:b8:d5:55:0e:51:15:02:47:4c:5a:f3:33:0c:57:44:24:0f: 0e:67:da:ba:17:1f:49:fb:69:14:8e:bd:d3:4e:38:ab:4c:07: d7:66:dd:11:50:9f:d3:d7:93:09:45:dc:f2:18:18:d3:ce:f5: d4:c2:98:21:e2:85:ed:40:31:63:cb:60:06:a0:e2:eb:f7:01: e1:2f:64:be:40:a0:46:5c:bc:fd:7f:9c:28:46:77:aa:25:1b: 8b:36:b6:98:1e:50:89:01:c2:d2:0a:4f:87:2a:95:67:ea:7b: 0a:9e:0e:2e:39:64:7a:1b:24:2e:0c:ad:3d:a0:37:f7:0c:6a: 1e:71:7a:40:a6:54:9d:ac:e1:8f:1c:df:6b:42:c2:83:8b:33: 1c:ca:33:03:d6:2f:5a:fb:37:bd:35:b5:c8:e4:6e:9a:5b:34: 1f:85:f3:63:17:1d:9f:77:46:bd:52:79:a0:c7:e5:a3:25:b6: 3d:9b:b9:92:a4:ea:4c:09:f8:88:91:df:4f:08:25:a2:fc:5d: ea:c9:0f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uFLs9CM2eM21ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODY3YjA5ZDItOTU2Ny00OTY3LWI4OGMtYzlmMzY0YWExMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuCgnMlbZ6zWYQa/G5WvO4ZOnS28n52KzD60 3f9CyvE6GY2N7p2RzbYtbgjWbwFE/m1SdW8glTBqELFUifU5ImUSfTbkgS/yCxI1 C4/uLBOJjF2P/eh1L6u4FlBoPU9YVNUL639E5yHmFtPt0d9zblDBXBML1gQIu4Dp MTO7eef2a61zbdAlYNvO9EVGip6WqQ78ZmBFUpw1S3azQ3Frl1GXG+0pC8vNHFTw AR3opAYmhug6NBCXW4e8fhqv7P27mRMpZ3AHJoh3+S+DVgX1hAGLbdYYiX+UkBXL 8wU+xsYPS4oM9fpXgBV7ryMJTj0Mjf/3l2D/Ckk82qm3c86V8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvMyg/n60T9UmPiux0zAVQ1g0r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhlODc3ZGEtZTc0ZC0z MmE0LTg3NzMtYzU0YjczYzg4YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ6Lz3HN9E3BaglgysCyJIzmRpDr4EOEkQPKXkJAxQiN5O5I7pSBTMj CatTi/J9ucRloETJsna41VUOURUCR0xa8zMMV0QkDw5n2roXH0n7aRSOvdNOOKtM B9dm3RFQn9PXkwlF3PIYGNPO9dTCmCHihe1AMWPLYAag4uv3AeEvZL5AoEZcvP1/ nChGd6olG4s2tpgeUIkBwtIKT4cqlWfqewqeDi45ZHobJC4MrT2gN/cMah5xekCm VJ2s4Y8c32tCwoOLMxzKMwPWL1r7N701tcjkbppbNB+F82MXHZ93Rr1SeaDH5aMl tj2buZKk6kwJ+IiR308IJaL8XerJD2U= -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:33 2025 by rpki-client