$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa File: 04e0c440-3c28-3d4a-b869-4387c175a350.roa (raw, json) Hash identifier: O5v6M9fc6+O7UG6FOd+gPWAbIpK/Nbmvod4YY8o0DDE= Subject key identifier: 9B:6D:FA:F7:F4:2C:3E:9C:38:B1:BD:E6:C7:D6:F8:52:26:0E:51:A5 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584F4972E29424645CDFB7829CE0 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14523 IP address blocks: 50.20.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e2:94:24:64:5c:df:b7:82:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67109f9a-85fd-41c5-943c-0de6fde7e4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:a4:0e:79:ff:69:b2:cc:1c:aa:d1:88:78: 03:a7:85:92:a5:d6:ad:ab:18:5a:b1:04:fe:d8:f9: ba:f7:b7:6e:22:af:a1:28:aa:54:ba:2e:e6:b7:d5: f0:46:52:05:84:4c:81:72:ba:e1:67:8c:8b:d7:37: ef:9d:d7:3a:ce:29:00:b2:3b:3d:97:0c:32:ad:7b: ec:ec:0c:74:df:fe:a9:d2:61:a5:ad:dd:2d:b4:ff: 30:87:c5:38:dd:7d:89:5d:ea:82:67:cf:86:1c:93: 28:b6:2e:68:0e:35:34:70:d8:19:c1:d2:25:e1:2f: 34:53:fd:e2:c2:ad:53:9d:9f:c2:0d:a5:85:8b:ee: d0:3c:b7:d6:37:c2:23:61:14:be:48:6d:c6:64:e6: dd:e5:86:fc:7a:13:df:e3:ef:04:3f:82:5a:0c:e4: 2d:4d:08:65:83:04:f8:c8:96:87:18:09:8e:b6:fa: ee:40:34:66:cc:26:0f:8d:59:61:fd:8c:92:82:e3: 8e:79:0e:ab:79:58:6c:4b:05:8e:ba:0c:4f:d6:a5: cf:a9:2a:d0:bc:e1:14:a8:11:32:9a:32:a0:e6:6b: f5:0e:bf:66:38:1b:57:a9:04:fb:0d:b7:f3:8c:36: 9c:12:a5:5e:cf:96:54:0d:18:29:79:7d:14:14:c0: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6D:FA:F7:F4:2C:3E:9C:38:B1:BD:E6:C7:D6:F8:52:26:0E:51:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 50.20.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e7:d4:6f:5a:c1:01:3e:e4:4b:40:c9:3e:3e:eb:df:a8:dd: d6:fe:33:1b:dd:6b:99:ba:ef:0e:81:c4:bc:cc:c7:a2:ad:e3: db:a5:cd:84:36:57:82:48:54:3c:b3:1f:11:4a:f7:f2:6f:75: 3d:3c:66:2c:53:05:7f:77:bb:4e:b6:4c:ad:80:00:ae:82:a0: 48:4a:11:8e:71:da:87:44:46:f8:e2:ae:e8:36:90:3f:9b:d1: d6:01:87:c2:c9:7f:5a:ca:35:b7:7d:68:6a:18:3c:34:d4:f2: cc:fa:1b:df:42:1c:b4:32:9c:08:fb:6c:05:59:ad:1a:51:8a: 96:1c:66:4e:bc:92:c5:97:1f:de:84:9d:0f:c6:db:f8:a3:de: 8e:30:6c:62:31:3a:3a:04:1c:cd:ce:73:21:1f:d7:00:f9:ee: 37:3c:5c:37:0e:b4:4f:8c:e1:43:2d:f8:de:b1:2a:58:2c:0f: 92:61:d8:24:05:0e:20:11:19:5a:b2:cd:ce:59:f9:37:b9:c9: ee:19:83:f6:0a:cf:0a:d1:3e:68:b1:f7:8d:b1:24:e2:39:31: 2a:a5:10:23:da:46:7c:d9:56:be:f2:d5:1e:d8:42:e8:0b:cc: 99:87:3a:d3:b1:6b:c9:3f:94:1f:0f:3a:89:50:7b:95:9b:91: 12:92:e8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuKUJGRc37eCnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjcxMDlmOWEtODVmZC00MWM1LTk0M2MtMGRlNmZkZTdlNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGmkDnn/abLMHKrRiHgDp4WSpdatqxhasQT+ 2Pm697duIq+hKKpUui7mt9XwRlIFhEyBcrrhZ4yL1zfvndc6zikAsjs9lwwyrXvs 7Ax03/6p0mGlrd0ttP8wh8U43X2JXeqCZ8+GHJMoti5oDjU0cNgZwdIl4S80U/3i wq1TnZ/CDaWFi+7QPLfWN8IjYRS+SG3GZObd5Yb8ehPf4+8EP4JaDOQtTQhlgwT4 yJaHGAmOtvruQDRmzCYPjVlh/YySguOOeQ6reVhsSwWOugxP1qXPqSrQvOEUqBEy mjKg5mv1Dr9mOBtXqQT7DbfzjDacEqVez5ZUDRgpeX0UFMAqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtt+vf0LD6cOLG95sfW+FImDlGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvMDRlMGM0NDAtM2MyOC0z ZDRhLWI4NjktNDM4N2MxNzVhMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrn1G9awQE+5EtAyT4+69+o3db+Mxvda5m67w6BxLzMx6Kt49ulzYQ2 V4JIVDyzHxFK9/JvdT08ZixTBX93u062TK2AAK6CoEhKEY5x2odERvjirug2kD+b 0dYBh8LJf1rKNbd9aGoYPDTU8sz6G99CHLQynAj7bAVZrRpRipYcZk68ksWXH96E nQ/G2/ij3o4wbGIxOjoEHM3OcyEf1wD57jc8XDcOtE+M4UMt+N6xKlgsD5Jh2CQF DiARGVqyzc5Z+Te5ye4Zg/YKzwrRPmix942xJOI5MSqlECPaRnzZVr7y1R7YQugL zJmHOtOxa8k/lB8POolQe5WbkRKS6Ns= -----END CERTIFICATE-----Generated at Fri Sep 25 14:28:14 2026 by rpki-client