$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json) Hash identifier: WEagXyXpQBHn+PLtWTAUaoVfG8egxSiMGrLnRYLZHHI= Subject key identifier: 92:50:8D:91:E1:AD:24:F5:45:6C:98:1F:C3:9F:B8:28:C7:73:5B:2D Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Certificate serial: 010D0C9F4328584A49706DCD104F76B5A15EAA00 Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 64227 IP address blocks: 50.20.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6d:cd:10:4f:76:b5:a1:5e:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=91744bae-ff60-4f3b-99f0-0bac9382d9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:7a:48:65:ba:9e:1d:b3:61:3d:d4:21:0b: 52:cb:78:f2:5b:cc:d5:50:81:2d:65:e5:26:ea:0d: 4e:44:57:ab:74:ee:5c:13:b1:60:7a:10:94:d9:ac: 8c:c2:ce:09:83:35:3f:55:cf:19:8f:e5:42:d2:c0: d9:9c:11:f6:70:26:8d:03:db:e0:cd:8a:3c:29:5c: 11:b7:c4:a2:cd:18:e3:8a:bb:c6:8c:ed:16:62:da: b6:7e:ea:5b:37:01:fd:4b:43:71:be:b1:9e:73:76: 1b:a6:dc:99:f0:9b:30:4b:14:aa:73:e7:17:ac:d0: a9:4d:31:1e:98:1a:70:94:ed:e8:dd:7e:b5:53:4a: 63:d9:b8:d6:23:07:76:f9:4d:f1:10:d1:a4:f3:db: eb:bf:97:cb:d1:34:96:3a:65:2e:1a:aa:e7:42:a0: 76:02:c9:10:23:ba:7a:6c:f5:65:f6:3a:17:6f:af: c4:47:17:ab:e1:87:25:2b:f8:2e:2b:45:bd:85:f6: 76:3d:71:79:21:c5:ee:42:0a:bc:01:38:f3:72:b8: 58:51:ba:29:29:76:29:f0:0d:81:e9:b8:8d:8b:db: e0:e5:94:dc:1f:10:61:c6:03:96:44:21:ea:7b:79: cf:58:15:d9:ae:5c:63:fe:14:ca:78:91:95:4b:c8: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:8D:91:E1:AD:24:F5:45:6C:98:1F:C3:9F:B8:28:C7:73:5B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl X509v3 Authority Key Identifier: keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer sbgp-ipAddrBlock: critical IPv4: 50.20.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:63:0e:35:15:27:6f:3c:9f:3c:1e:2c:d6:40:8a:e0:9b:c0: bb:06:3b:99:c5:e4:fc:55:af:55:18:5d:1f:9f:17:52:ad:52: 52:05:23:b9:f4:73:a1:46:2e:4c:4d:1b:7d:3a:83:98:cf:bb: 04:29:1f:8f:b3:ed:25:a2:e9:44:38:75:62:45:a4:6c:b3:de: 86:18:66:e5:b9:4e:2f:84:65:28:3c:7d:97:e6:cf:97:19:c3: 40:cd:fd:98:7f:a3:30:bb:1f:4b:f4:65:cd:5a:fe:4f:b5:b3: 53:f6:89:cc:36:ca:77:62:b5:4f:08:f5:9a:08:01:b1:4a:e2: fa:9b:fe:4c:17:94:3c:ee:9d:07:28:1f:52:74:f9:5d:1d:0f: 7e:6a:c6:2d:68:b3:6c:69:00:c5:00:46:30:54:5e:dd:e5:e8: 89:2c:14:75:45:45:b8:f3:a1:53:c1:9f:af:db:5c:d3:aa:10: 11:ee:0a:18:1e:b6:0f:b2:78:08:f7:1c:dc:22:1d:7d:53:ce: 08:af:39:9c:51:9a:d8:ad:72:0b:48:cf:4f:fc:4d:ac:4f:11: 1a:4c:84:58:8c:43:7b:6d:31:2e:f9:f7:53:4b:9d:48:30:24: d3:94:f3:f7:e9:a7:fd:ba:cf:ed:c0:b9:40:a9:2a:97:13:e4: 38:bf:c5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcG3NEE92taFeqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk ZjNmMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OTE3NDRiYWUtZmY2MC00ZjNiLTk5ZjAtMGJhYzkzODJkOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbR6SGW6nh2zYT3UIQtSy3jyW8zVUIEtZeUm 6g1ORFerdO5cE7FgehCU2ayMws4JgzU/Vc8Zj+VC0sDZnBH2cCaNA9vgzYo8KVwR t8SizRjjirvGjO0WYtq2fupbNwH9S0NxvrGec3YbptyZ8JswSxSqc+cXrNCpTTEe mBpwlO3o3X61U0pj2bjWIwd2+U3xENGk89vrv5fL0TSWOmUuGqrnQqB2AskQI7p6 bPVl9joXb6/ERxer4YclK/guK0W9hfZ2PXF5IcXuQgq8ATjzcrhYUbopKXYp8A2B 6biNi9vg5ZTcHxBhxgOWRCHqe3nPWBXZrlxj/hTKeJGVS8hZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJQjZHhrST1RWyYH8OfuCjHc1stMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvNWFmNmMzYTQtZGU0Yy0z NTUzLTgxYzYtNjAwNDFiMGEyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2 ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtjDjUVJ288nzweLNZAiuCbwLsGO5nF5PxVr1UYXR+fF1KtUlIFI7n0 c6FGLkxNG306g5jPuwQpH4+z7SWi6UQ4dWJFpGyz3oYYZuW5Ti+EZSg8fZfmz5cZ w0DN/Zh/ozC7H0v0Zc1a/k+1s1P2icw2ynditU8I9ZoIAbFK4vqb/kwXlDzunQco H1J0+V0dD35qxi1os2xpAMUARjBUXt3l6IksFHVFRbjzoVPBn6/bXNOqEBHuChge tg+yeAj3HNwiHX1TzgivOZxRmtitcgtIz0/8TaxPERpMhFiMQ3ttMS7591NLnUgw JNOU8/fpp/26z+3AuUCpKpcT5Di/xQQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:51 2025 by rpki-client