$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e296f346-409e-3606-bb8f-7e2f9fc6346e.roa File: e296f346-409e-3606-bb8f-7e2f9fc6346e.roa (raw, json) Hash identifier: nVaPuArgxBDpA4yuxeGlGpT70xggKAd/rM/KX2jmcZY= Subject key identifier: 11:CD:5E:93:86:1C:79:41:CA:02:52:F3:54:E5:5E:C5:34:AB:35:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB891DD4D64655B59B60F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e296f346-409e-3606-bb8f-7e2f9fc6346e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 63487 IP address blocks: 50.202.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:91:dd:4d:64:65:5b:59:b6:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=fbca4718-1bd7-4507-8d00-cbe620ee32c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:83:48:9c:3b:da:ca:54:f4:d2:81:b7:3a: d2:4e:73:07:27:23:44:d7:99:1f:40:9e:c1:d1:3b: c1:17:d3:c2:66:11:e6:25:f8:43:43:03:75:5d:e9: 44:42:b9:72:f9:cb:a5:88:ef:a5:03:ff:f9:75:b5: 87:2f:b4:52:79:38:bf:d8:48:75:1b:d6:52:ee:a5: a7:e6:a7:8a:00:55:9b:8c:ba:65:e4:a1:f5:b3:e8: 68:28:a0:d6:19:f1:0b:97:7d:ea:a7:5e:1f:d2:aa: 22:85:f3:aa:ec:a1:d5:c1:6b:fb:e9:7f:41:a8:f9: 4c:0d:21:42:57:9f:ac:a2:cd:2c:69:4c:13:a6:aa: 4d:e8:5e:71:6c:d8:d7:85:04:08:da:8f:bd:4d:13: 93:63:8a:f0:ff:1a:85:78:67:d6:cc:60:f1:8f:97: 0a:65:b3:1d:14:7a:3b:42:3e:3e:e5:ea:d3:ff:48: ea:0f:8d:53:42:c2:bc:51:61:f4:ad:cf:a4:5b:8f: 37:6b:6e:27:83:a7:1b:85:18:f0:c2:dd:dd:8c:3c: e3:c0:9e:6e:fb:87:1d:5d:e0:ca:72:92:45:39:5e: 01:90:ee:1d:39:d5:b7:95:4b:26:02:00:c8:ab:b3: e0:a3:0c:ac:a4:f9:c1:f3:c6:bf:89:72:87:e0:62: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:5E:93:86:1C:79:41:CA:02:52:F3:54:E5:5E:C5:34:AB:35:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e296f346-409e-3606-bb8f-7e2f9fc6346e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7e:ce:fb:ba:61:2b:48:12:e2:f5:7a:4c:4e:5f:aa:1d:a2: d5:96:84:7b:6e:6f:f8:60:50:15:3b:55:4f:c5:25:b4:bd:d2: 88:c5:d5:13:a6:86:99:f8:d3:ad:1c:7f:44:5a:5f:93:65:55: 78:32:1f:bd:31:a0:9c:22:d3:cb:ab:69:bc:f5:bc:d5:c5:cf: 69:5f:95:3c:69:c8:12:a4:57:94:6f:56:91:57:09:6c:b5:22: ac:b9:eb:c1:34:41:ef:d9:77:41:24:d5:04:fe:e7:5f:02:da: f0:9b:55:61:40:af:0e:52:be:ad:90:32:47:0a:5e:47:1d:04: 86:6a:1e:7c:74:58:f6:b3:25:1f:dd:48:ad:db:31:40:10:54: f6:bd:31:41:8e:9e:10:e3:cb:a4:4c:24:f9:a4:1e:c5:b7:d5: 76:4e:51:68:13:86:0b:1a:af:20:b2:4d:17:1b:66:73:e4:17: 81:b1:8a:25:ee:2e:89:bc:5d:c6:20:dd:f6:e2:7b:ae:f4:4f: 06:9e:ee:dd:0a:4a:53:67:7a:8f:c7:e9:5e:33:aa:5d:fd:2f: bb:56:8c:7a:47:72:b0:7a:5c:c3:f5:df:45:fc:85:33:e0:bb: ad:4a:db:f4:75:94:0b:70:d5:9a:46:52:28:a8:be:88:85:4b: de:0d:e3:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uJHdTWRlW1m2D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZmJjYTQ3MTgtMWJkNy00NTA3LThkMDAtY2JlNjIwZWUzMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGODSJw72spU9NKBtzrSTnMHJyNE15kfQJ7B 0TvBF9PCZhHmJfhDQwN1XelEQrly+culiO+lA//5dbWHL7RSeTi/2Eh1G9ZS7qWn 5qeKAFWbjLpl5KH1s+hoKKDWGfELl33qp14f0qoihfOq7KHVwWv76X9BqPlMDSFC V5+sos0saUwTpqpN6F5xbNjXhQQI2o+9TROTY4rw/xqFeGfWzGDxj5cKZbMdFHo7 Qj4+5erT/0jqD41TQsK8UWH0rc+kW483a24ng6cbhRjwwt3djDzjwJ5u+4cdXeDK cpJFOV4BkO4dOdW3lUsmAgDIq7PgowyspPnB88a/iXKH4GIAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHNXpOGHHlBygJS81TlXsU0qzVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI5NmYzNDYtNDA5ZS0z NjA2LWJiOGYtN2UyZjlmYzYzNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsr5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5+zvu6YStIEuL1ekxOX6odotWWhHtub/hgUBU7VU/FJbS90ojF1ROm hpn4060cf0RaX5NlVXgyH70xoJwi08urabz1vNXFz2lflTxpyBKkV5RvVpFXCWy1 Iqy568E0Qe/Zd0Ek1QT+518C2vCbVWFArw5Svq2QMkcKXkcdBIZqHnx0WPazJR/d SK3bMUAQVPa9MUGOnhDjy6RMJPmkHsW31XZOUWgThgsaryCyTRcbZnPkF4GxiiXu Lom8XcYg3fbie670Twae7t0KSlNneo/H6V4zql39L7tWjHpHcrB6XMP130X8hTPg u61K2/R1lAtw1ZpGUiiovoiFS94N46A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:05 2025 by rpki-client