$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa File: df4531c5-95bf-3891-ab25-9ab7246fce22.roa (raw, json) Hash identifier: 14Rr8qcwqp23TdVSr9CdCGfxJwp+bp3YTTLZsBTbcZs= Subject key identifier: B1:7D:4E:00:26:9A:08:72:43:CA:78:10:4B:5F:BA:4C:32:FA:6D:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9E8AFAD6F35E750491700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 50.219.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:e8:af:ad:6f:35:e7:50:49:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=306855f8-e308-42d0-b494-d3c542bcd7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:ed:45:67:c5:19:04:58:32:07:64:29:45: de:e4:ce:56:3c:28:1d:58:a4:7f:ee:ef:12:c3:af: cd:27:6a:b2:b2:23:1d:5b:91:3e:83:b6:10:c7:e6: 5a:68:c6:27:69:42:ae:89:db:a2:fe:66:f4:3f:2d: da:e0:51:fa:54:b2:67:11:0e:f1:f0:37:74:5b:52: fa:bb:f2:d8:a2:25:a7:2a:f0:e1:cd:e4:c7:66:c7: 07:01:c6:de:ca:72:ef:d4:29:f7:71:e8:7e:d2:46: 38:1f:8a:21:41:31:91:d4:a8:67:ae:24:4b:4f:ab: 38:5d:e0:f5:0f:10:9a:b1:08:bb:05:43:4f:a4:d5: ca:b3:95:59:73:ae:f3:24:d4:65:9c:ae:3f:ad:d2: aa:a1:f2:87:e2:41:36:de:7b:d0:ca:27:fc:fc:fa: c9:4b:f4:50:20:63:19:cd:90:05:f8:d8:83:96:cf: b5:ef:22:9c:df:f6:22:8d:02:b9:51:76:e1:aa:6d: a1:79:65:5d:29:b2:76:5c:56:41:6a:7f:b0:75:4f: 59:a5:5f:3f:c4:58:84:24:bb:09:46:f4:b6:b5:c8: 40:28:1e:f3:d7:10:7c:d9:c3:85:37:e3:7a:72:25: d4:1c:b0:ec:31:ea:92:24:7d:b8:ce:a7:c4:19:8f: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:4E:00:26:9A:08:72:43:CA:78:10:4B:5F:BA:4C:32:FA:6D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4531c5-95bf-3891-ab25-9ab7246fce22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.219.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:09:ed:00:4b:6c:9a:4c:51:6e:ac:6c:a0:9a:50:d7:a5:48: 51:96:11:52:b6:69:eb:08:d1:12:a7:14:96:c2:33:46:fe:ae: c2:31:f9:87:c2:c8:5f:c2:e6:f6:15:c7:92:41:9a:a4:88:7f: f4:b5:60:71:d6:07:d0:d9:3c:fe:5d:5a:c6:21:5d:bb:94:b6: 00:cc:52:85:e3:f9:94:71:16:56:eb:3e:1d:5c:43:2e:d2:e8: 2e:7a:b0:09:b0:eb:78:72:1f:68:ae:c8:f8:49:ea:3a:f3:79: b5:70:d9:91:3e:06:61:b8:72:a4:0b:19:68:a6:15:cc:6f:7a: a9:12:86:89:1b:a0:d7:20:1f:65:83:ee:da:94:d9:6e:7d:51: f0:ea:6c:ca:7c:15:49:ca:c2:48:d0:c8:e5:97:9a:44:51:19: 03:f4:4e:c4:72:5c:78:c0:ed:79:98:5c:be:49:1b:c7:24:a2: 17:20:bc:26:76:af:ad:18:66:65:68:73:e6:00:2d:2a:9b:c6: 4f:88:8c:be:d6:48:d8:99:4a:12:8c:52:48:59:ee:7d:dc:ee: 04:b1:8e:c9:4c:66:20:b1:fa:d7:7e:4b:ef:a8:b8:05:c5:f5: f0:9d:7a:73:e6:72:00:4a:83:1f:89:df:6d:9f:64:be:4c:63: e5:9d:0b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ueivrW8151BJFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzA2ODU1ZjgtZTMwOC00MmQwLWI0OTQtZDNjNTQyYmNkN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+HtRWfFGQRYMgdkKUXe5M5WPCgdWKR/7u8S w6/NJ2qysiMdW5E+g7YQx+ZaaMYnaUKuidui/mb0Py3a4FH6VLJnEQ7x8Dd0W1L6 u/LYoiWnKvDhzeTHZscHAcbeynLv1Cn3ceh+0kY4H4ohQTGR1KhnriRLT6s4XeD1 DxCasQi7BUNPpNXKs5VZc67zJNRlnK4/rdKqofKH4kE23nvQyif8/PrJS/RQIGMZ zZAF+NiDls+17yKc3/YijQK5UXbhqm2heWVdKbJ2XFZBan+wdU9ZpV8/xFiEJLsJ RvS2tchAKB7z1xB82cOFN+N6ciXUHLDsMeqSJH24zqfEGY8HOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF9TgAmmghyQ8p4EEtfukwy+m2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY0NTMxYzUtOTViZi0z ODkxLWFiMjUtOWFiNzI0NmZjZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMttXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUJ7QBLbJpMUW6sbKCaUNelSFGWEVK2aesI0RKnFJbCM0b+rsIx+YfC yF/C5vYVx5JBmqSIf/S1YHHWB9DZPP5dWsYhXbuUtgDMUoXj+ZRxFlbrPh1cQy7S 6C56sAmw63hyH2iuyPhJ6jrzebVw2ZE+BmG4cqQLGWimFcxveqkShokboNcgH2WD 7tqU2W59UfDqbMp8FUnKwkjQyOWXmkRRGQP0TsRyXHjA7XmYXL5JG8ckohcgvCZ2 r60YZmVoc+YALSqbxk+IjL7WSNiZShKMUkhZ7n3c7gSxjslMZiCx+td+S++ouAXF 9fCdenPmcgBKgx+J322fZL5MY+WdC4g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:08 2025 by rpki-client