$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa File: 5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa (raw, json) Hash identifier: OwgDdWySsFx0+YCDW4ZU1vhfay6LV7VNjxwTAiTM1+s= Subject key identifier: 46:04:A0:51:ED:8C:56:9F:11:11:10:BF:CD:BA:64:13:0F:1E:C6:71 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B583C8B8EBBFACC477FE94D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 1239 IP address blocks: 50.7.120.0/22 maxlen: 22 67.159.6.0/23 maxlen: 23 2001:49f0:d01b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8b:8e:bb:fa:cc:47:7f:e9:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4d21a649-8184-4407-8bd0-bace7ec8724a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:8d:8b:b3:0a:e5:6f:2a:27:cc:de:07:bc: 15:db:4a:a4:f4:e4:1f:f2:b6:0f:9c:06:40:93:ae: a1:2e:b3:b4:98:62:07:fb:3d:81:dd:4c:da:59:24: 71:bd:70:6f:ed:49:9d:02:a0:33:15:2c:39:05:ed: 81:76:e6:39:ba:95:bc:b2:ff:7a:de:03:5c:32:23: cc:f7:79:b8:95:93:e3:91:bc:bc:6d:86:a5:55:e8: 71:df:bc:83:df:62:c7:fd:1b:05:7d:d0:9d:87:7d: 0d:c7:52:df:4e:e5:36:35:4b:67:c2:2a:b7:2a:fe: 8f:fd:6d:59:dd:b3:9f:e1:eb:a3:fa:f9:1e:02:ed: 6f:b0:8f:b5:ca:49:a2:ec:b4:c6:57:dd:f6:48:ad: c6:dd:22:6c:da:82:5d:03:32:d9:a5:d0:f9:77:20: c6:31:c2:23:dc:96:13:6f:91:50:b4:68:33:f6:d5: e5:fa:c6:1e:39:c1:07:ad:c4:f5:92:ed:10:53:06: 88:89:bc:0e:dd:90:57:a1:88:31:cb:ec:d5:14:31: 42:32:6c:b4:14:13:29:aa:61:91:04:4c:0e:0c:2b: 30:77:b8:28:a0:8b:32:d2:29:2a:49:e1:1e:6f:b1: d2:10:68:61:ed:a9:96:c7:ea:ec:83:33:bb:08:89: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:04:A0:51:ED:8C:56:9F:11:11:10:BF:CD:BA:64:13:0F:1E:C6:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.120.0/22 67.159.6.0/23 IPv6: 2001:49f0:d01b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:18:02:4e:8d:8b:fb:69:46:38:d9:70:e9:e4:a5:46:c1:6e: 5a:68:67:a3:f2:0a:21:2f:fe:01:38:cb:20:38:7c:6e:08:c0: a6:2d:aa:57:a2:6a:43:f3:fb:ce:21:0c:97:f9:ad:57:82:71: eb:96:da:91:5c:2e:de:ad:07:65:df:b1:84:b2:03:66:61:0c: 31:b2:f4:df:c5:26:a8:97:99:ad:24:18:66:f6:1d:49:8c:b1: 67:37:4d:24:17:58:dd:5f:94:00:dd:eb:88:ae:a5:69:57:74: 85:4a:58:a2:97:e6:03:bf:be:c4:64:cb:23:e9:2a:25:c9:62: 84:96:c3:39:0d:1c:7f:6e:36:83:34:03:de:dd:b3:3e:4b:6f: cb:b0:db:af:78:60:07:7f:b1:2b:b8:47:55:d6:66:8c:d6:6d: 98:f3:94:35:83:7b:c4:57:3e:43:4f:0e:64:8c:8c:63:32:83: 56:e2:0d:94:05:fc:2b:6c:ca:9d:38:eb:fb:27:62:d9:98:3d: 13:9d:df:40:0e:2e:ec:7a:e1:4a:18:2a:d9:c4:02:9e:bb:69: 19:61:cb:3b:18:dd:0c:ad:cb:4d:2d:b1:32:12:03:0c:47:67: 16:0e:e7:00:44:8f:69:73:53:75:d3:0f:39:0d:a4:c0:11:7d: 47:94:7f:90 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEtYPIuOu/rMR3/pTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGQyMWE2NDktODE4NC00NDA3LThiZDAtYmFjZTdlYzg3MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRuNi7MK5W8qJ8zeB7wV20qk9OQf8rYPnAZA k66hLrO0mGIH+z2B3UzaWSRxvXBv7UmdAqAzFSw5Be2BduY5upW8sv963gNcMiPM 93m4lZPjkby8bYalVehx37yD32LH/RsFfdCdh30Nx1LfTuU2NUtnwiq3Kv6P/W1Z 3bOf4euj+vkeAu1vsI+1ykmi7LTGV932SK3G3SJs2oJdAzLZpdD5dyDGMcIj3JYT b5FQtGgz9tXl+sYeOcEHrcT1ku0QUwaIibwO3ZBXoYgxy+zVFDFCMmy0FBMpqmGR BEwODCswd7gooIsy0ikqSeEeb7HSEGhh7amWx+rsgzO7CInNZwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFEYEoFHtjFafEREQv826ZBMPHsZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWQ5MGNlOGEtN2RkOS0z MDllLTg4OTktOWVjZGRhNTI4NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgd4AwQB Q58GMA8EAgACMAkDBwAgAUnw0BswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQhgCTo2L+2lGONlw6eSlRsFu Wmhno/IKIS/+ATjLIDh8bgjApi2qV6JqQ/P7ziEMl/mtV4Jx65bakVwu3q0HZd+x hLIDZmEMMbL038UmqJeZrSQYZvYdSYyxZzdNJBdY3V+UAN3riK6laVd0hUpYopfm A7++xGTLI+kqJclihJbDOQ0cf242gzQD3t2zPktvy7Dbr3hgB3+xK7hHVdZmjNZt mPOUNYN7xFc+Q08OZIyMYzKDVuINlAX8K2zKnTjr+ydi2Zg9E53fQA4u7HrhShgq 2cQCnrtpGWHLOxjdDK3LTS2xMhIDDEdnFg7nAESPaXNTddMPOQ2kwBF9R5R/kA== -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:48 2025 by rpki-client