$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa File: c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa (raw, json) Hash identifier: Ml5DZMNCNQ4yVVQjXH/7JiR9BAwo78K2MpmQ9tFuL9o= Subject key identifier: 2C:5C:7E:9A:EF:02:A2:E7:A9:98:05:DA:CF:BF:A3:44:D4:14:D5:02 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584B4081A11E9E17E5C944FAA200 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 29909 IP address blocks: 50.21.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a1:1e:9e:17:e5:c9:44:fa:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=fd98efba-9b8e-48c3-b5a4-75858a77b538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:5f:cd:c5:6d:6f:96:37:98:2c:c5:ae:34: e0:b6:66:40:f5:b6:aa:7d:bc:55:2c:92:a1:cc:80: aa:47:25:4a:38:96:6a:b6:fd:fc:cd:26:03:74:7f: 2c:04:51:41:df:ba:86:12:3a:5d:d3:f3:3e:e9:e5: c6:02:1c:74:e6:5d:2f:0f:62:df:2e:cf:4c:0f:3f: 3b:a1:78:48:18:f2:6f:bd:78:76:ce:95:18:80:d6: 90:92:37:fc:12:e4:0d:97:8a:da:47:89:59:c7:ec: 68:fe:e4:00:cd:71:bd:a0:42:94:cf:ec:be:c4:4b: 14:19:5a:47:66:43:5f:76:50:90:5e:d2:a2:84:73: b1:b8:37:01:2d:65:b3:a7:d5:45:c7:46:4b:55:b7: 19:1a:72:7b:0f:65:af:2f:50:ad:aa:41:db:0c:dd: f4:f3:b2:b5:83:16:98:d3:51:65:51:b5:e8:12:ea: 20:71:ef:c0:dd:c7:d1:ae:16:ee:5d:ff:b2:53:02: fd:93:66:9a:38:5c:f3:f5:82:9c:24:9b:94:e5:23: 5f:02:7c:e7:88:76:a3:52:aa:3b:e0:9a:1f:63:21: b4:88:6f:83:68:5a:1a:84:c1:e4:d2:dc:f4:7d:e1: 24:53:46:d7:79:68:36:4c:37:0f:dd:e1:95:3a:a3: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:7E:9A:EF:02:A2:E7:A9:98:05:DA:CF:BF:A3:44:D4:14:D5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 50.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:68:f1:66:9d:05:0a:4d:13:02:ae:eb:b6:c1:b7:1e:4a:b2: d1:48:bc:49:53:9f:7f:fc:34:55:b6:4b:ee:96:ee:77:ff:25: 6f:f8:c9:5d:15:52:e9:49:bb:c4:a4:e5:d8:a1:25:bd:10:d2: 14:b4:e1:f9:f5:20:6a:8c:ef:98:6d:96:4a:a5:e5:9a:de:a0: f8:9a:93:b1:43:0c:22:a3:c2:01:75:e2:30:a5:d6:7b:2f:f6: ea:61:76:eb:7f:83:2d:cc:f3:7f:d2:f4:2f:34:9a:38:3c:33: 5b:32:aa:ad:37:2f:92:6a:4a:19:d9:92:85:42:24:b7:25:08: e5:13:7f:9e:92:5d:62:f5:d5:a2:d0:dd:35:a6:95:e7:97:5b: e8:d1:2e:23:dd:77:af:a9:a3:f2:83:8c:b4:99:8f:ad:48:f4: 33:8c:69:40:97:76:e9:cd:2b:65:b8:be:5b:1b:ad:9b:bc:02: ba:b8:1e:d6:96:eb:f6:23:62:2d:cd:51:2b:17:95:e4:f6:bb: 38:01:7d:f0:8e:f6:96:21:8f:b8:4e:87:7f:b6:3c:6d:25:2e: 25:bb:09:ef:9e:1d:71:be:a1:9d:35:f8:b6:da:25:0e:e8:61: b6:1a:ba:d1:7b:59:f7:2b:bd:25:f7:49:04:92:6b:55:e6:5f: d4:d1:cb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaEenhflyUT6ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZmQ5OGVmYmEtOWI4ZS00OGMzLWI1YTQtNzU4NThhNzdiNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU5fzcVtb5Y3mCzFrjTgtmZA9baqfbxVLJKh zICqRyVKOJZqtv38zSYDdH8sBFFB37qGEjpd0/M+6eXGAhx05l0vD2LfLs9MDz87 oXhIGPJvvXh2zpUYgNaQkjf8EuQNl4raR4lZx+xo/uQAzXG9oEKUz+y+xEsUGVpH ZkNfdlCQXtKihHOxuDcBLWWzp9VFx0ZLVbcZGnJ7D2WvL1CtqkHbDN3087K1gxaY 01FlUbXoEuogce/A3cfRrhbuXf+yUwL9k2aaOFzz9YKcJJuU5SNfAnzniHajUqo7 4JofYyG0iG+DaFoahMHk0tz0feEkU0bXeWg2TDcP3eGVOqO+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxcfprvAqLnqZgF2s+/o0TUFNUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvYzU4YTgyNWYtNjczOC0z YWQ0LThhNzctOWNjNzdkZjIyY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMhWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1o8WadBQpNEwKu67bBtx5KstFIvElTn3/8NFW2S+6W7nf/JW/4yV0V UulJu8Sk5dihJb0Q0hS04fn1IGqM75htlkql5ZreoPiak7FDDCKjwgF14jCl1nsv 9uphdut/gy3M83/S9C80mjg8M1syqq03L5JqShnZkoVCJLclCOUTf56SXWL11aLQ 3TWmleeXW+jRLiPdd6+po/KDjLSZj61I9DOMaUCXdunNK2W4vlsbrZu8Arq4HtaW 6/YjYi3NUSsXleT2uzgBffCO9pYhj7hOh3+2PG0lLiW7Ce+eHXG+oZ01+LbaJQ7o YbYautF7WfcrvSX3SQSSa1XmX9TRyzA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:45 2025 by rpki-client