$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa File: df4531c5-95bf-3891-ab25-9ab7246fce22.roa (raw, json) Hash identifier: wb4YCzNMlywflWUsJHAMA9yPSVyYSIApTPZGdGx5y+4= Subject key identifier: 58:9B:F5:8F:62:6D:15:78:6C:5A:74:A9:37:62:06:01:5F:5D:6F:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDB15A45622EA65D3F8180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 50.219.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:b1:5a:45:62:2e:a6:5d:3f:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=579d9f6f-65f1-4f4e-8490-1154dea71b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:93:7b:57:85:eb:c5:dc:0f:6f:98:2a:54: 67:25:f9:77:2c:0d:cb:bc:13:bb:17:71:d5:af:96: 97:c4:2a:1a:7a:2a:aa:ed:dc:7d:c3:da:3b:88:94: 84:a6:46:1d:ee:e7:c4:04:b6:51:69:a1:55:e0:12: 23:17:91:4f:19:f9:46:d8:4f:68:26:6b:e1:18:f4: 89:77:8f:13:af:53:2d:a3:66:94:e5:27:a9:56:26: 5f:3c:a3:e9:a9:f5:c4:7d:47:3a:d8:a4:53:2f:0b: d4:1a:ba:06:7b:2b:16:07:ac:a0:0d:de:99:69:48: 8e:c8:ba:e2:ac:2e:b9:58:6a:94:32:55:29:62:0f: c8:a6:cd:4b:8c:8d:a3:03:84:71:af:7e:f9:b1:71: ec:78:9d:25:fd:71:7e:f4:89:0a:51:b1:88:87:4d: 73:3d:58:2c:1c:3f:b4:96:f9:5a:dd:82:c1:93:84: 09:2c:84:87:27:dc:3e:f2:0b:d0:29:4a:9a:2a:ee: df:80:12:7f:5e:71:96:f9:d9:7b:82:cd:1e:77:d1: eb:ec:0c:71:e2:20:fe:05:b1:48:ed:49:c7:65:66: 86:85:31:7e:9e:7f:64:e3:1d:07:ef:10:0d:36:53: 1d:03:48:7f:50:0d:48:4d:b3:44:3d:cb:60:59:d8: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:F5:8F:62:6D:15:78:6C:5A:74:A9:37:62:06:01:5F:5D:6F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.219.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a4:6a:7a:b2:36:b6:e3:56:a4:1e:c2:2d:d6:5a:1e:0f:f2: 18:a5:6c:33:3a:59:58:63:4c:87:e4:6c:90:b2:c1:19:f6:75: 1d:ef:f4:e0:f9:78:92:6e:36:a1:12:2e:7a:6d:33:b8:95:95: 87:5c:56:69:df:92:c1:50:18:19:03:fa:2c:9c:cf:97:da:15: 73:3d:80:f6:63:f9:9c:a2:68:37:40:2a:62:33:4c:9a:f3:aa: 78:73:33:e0:85:c6:47:c4:6d:a3:12:e8:e3:16:af:a7:7d:1a: a4:27:eb:64:1f:d6:48:60:69:60:6d:34:cf:cf:bd:e0:df:fc: f2:45:9a:66:9a:ac:2b:90:a3:95:e9:c9:ec:4d:86:f6:fa:31: d2:69:80:b2:bc:7d:3a:dd:36:56:50:06:78:a0:36:67:e7:46: 59:fd:6b:7a:5d:e5:d9:ee:8b:26:cc:3e:0e:a1:c9:14:b9:9e: dc:a5:3e:8b:bf:69:01:5b:53:ac:3c:84:c2:a2:f3:9f:c2:73: ea:c7:bd:16:55:c5:66:39:d7:d7:04:18:d4:87:ea:16:48:b6: ed:36:14:7f:66:0c:8b:81:7b:44:60:a6:e6:26:44:e1:11:2b: 00:c8:39:49:a2:db:c0:ba:8f:bf:75:7b:38:29:bc:10:e4:a6: 14:65:b0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/bFaRWIupl0/gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTc5ZDlmNmYtNjVmMS00ZjRlLTg0OTAtMTE1NGRlYTcxYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc2Te1eF68XcD2+YKlRnJfl3LA3LvBO7F3HV r5aXxCoaeiqq7dx9w9o7iJSEpkYd7ufEBLZRaaFV4BIjF5FPGflG2E9oJmvhGPSJ d48Tr1Mto2aU5SepViZfPKPpqfXEfUc62KRTLwvUGroGeysWB6ygDd6ZaUiOyLri rC65WGqUMlUpYg/Ips1LjI2jA4Rxr375sXHseJ0l/XF+9IkKUbGIh01zPVgsHD+0 lvla3YLBk4QJLISHJ9w+8gvQKUqaKu7fgBJ/XnGW+dl7gs0ed9Hr7Axx4iD+BbFI 7UnHZWaGhTF+nn9k4x0H7xANNlMdA0h/UA1ITbNEPctgWdjnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFib9Y9ibRV4bFp0qTdiBgFfXW/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY0NTMxYzUtOTViZi0z ODkxLWFiMjUtOWFiNzI0NmZjZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMttXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKikanqyNrbjVqQewi3WWh4P8hilbDM6WVhjTIfkbJCywRn2dR3v9OD5 eJJuNqESLnptM7iVlYdcVmnfksFQGBkD+iycz5faFXM9gPZj+ZyiaDdAKmIzTJrz qnhzM+CFxkfEbaMS6OMWr6d9GqQn62Qf1khgaWBtNM/PveDf/PJFmmaarCuQo5Xp yexNhvb6MdJpgLK8fTrdNlZQBnigNmfnRln9a3pd5dnuiybMPg6hyRS5ntylPou/ aQFbU6w8hMKi85/Cc+rHvRZVxWY519cEGNSH6hZItu02FH9mDIuBe0RgpuYmROER KwDIOUmi28C6j791ezgpvBDkphRlsII= -----END CERTIFICATE-----Generated at Wed Jul 2 15:24:45 2025 by rpki-client