$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3471ddb9-f332-30df-89d4-a880ddbf5e8e.roa File: 3471ddb9-f332-30df-89d4-a880ddbf5e8e.roa (raw, json) Hash identifier: fxzdqhFnGIob+VNqbqy/4+3vVVMKfv4cZ6xNO5P0bhc= Subject key identifier: 12:6A:27:E3:7F:5F:90:B8:10:D5:B8:96:20:D8:EE:0F:A1:13:21:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D3E5F2458FE7ED3E66E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3471ddb9-f332-30df-89d4-a880ddbf5e8e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33662 IP address blocks: 50.209.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:3e:5f:24:58:fe:7e:d3:e6:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8dd42972-38ed-4ede-b50c-f178727d43c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:fa:61:66:1f:7f:7c:4a:c9:28:f7:ba:ab: b0:87:b6:0b:45:6d:3e:ae:14:93:19:1e:30:f7:e9: 9d:f9:ef:f1:95:5e:5d:28:02:55:07:d6:d6:e4:8d: b2:8b:bf:c6:04:56:85:5b:06:88:73:fa:91:6d:d6: f2:0d:4b:ef:46:d3:11:71:d2:12:06:0c:5c:0c:ef: a8:06:74:dc:da:9c:44:47:db:1c:05:3f:69:58:1f: 44:59:c1:79:ef:bf:6e:69:d7:ec:82:28:33:2c:e2: db:a6:b4:ae:ae:75:5c:6d:20:fb:fb:2d:c1:e1:f4: 59:a0:d3:29:81:4e:79:78:c5:3d:2a:55:de:cb:e3: 52:61:59:43:12:98:15:4c:2a:63:f4:cd:09:03:b5: 57:65:22:70:f3:7f:8a:c3:89:19:8c:eb:05:6f:69: 29:d7:de:e8:6e:c8:a4:09:01:7e:b7:fd:72:cc:2f: 44:f0:eb:1d:fd:84:67:ee:42:23:28:c8:cf:ef:92: ea:1f:1e:53:83:e1:be:43:95:8a:1d:fe:ea:87:05: 84:9a:21:ed:1c:25:aa:2f:6e:19:07:53:29:14:72: 98:36:92:cf:cf:ea:1e:f3:00:75:54:8c:3d:0f:fe: 9a:ac:0b:d6:42:2a:ca:1c:f6:e7:8a:3e:e8:47:15: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:27:E3:7F:5F:90:B8:10:D5:B8:96:20:D8:EE:0F:A1:13:21:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3471ddb9-f332-30df-89d4-a880ddbf5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.209.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:35:18:65:84:cd:ee:73:32:16:de:6a:70:81:a6:9b:02:a5: 90:0f:3b:e8:29:3b:92:09:1f:c8:3d:9a:78:0c:03:81:17:57: 87:7a:f9:f2:c9:ed:b0:7a:fe:a4:67:80:00:fe:d5:92:13:f5: fa:33:e7:cb:e0:bd:fc:89:68:e6:89:1b:db:10:ed:d5:f3:0d: 7c:50:73:72:30:72:68:d0:9a:9d:a3:dc:f2:0c:81:58:45:4e: 34:06:17:7f:07:fe:5e:c7:72:12:66:22:84:e0:57:5e:6e:16: 8f:19:d1:f4:8d:01:71:a1:7e:2c:67:1c:2d:60:29:e2:1e:55: 92:93:87:2b:4a:9a:15:9d:fb:e4:b5:bb:cc:48:91:2b:5d:3b: 6f:f6:36:06:ae:42:f1:78:01:5b:e5:f8:72:a8:f1:bc:02:a6: 15:ba:fe:80:f9:6c:c7:06:f4:08:ac:a8:db:ce:88:11:8a:61: 4f:c1:21:7e:69:98:be:d5:30:4b:3c:e1:a6:fd:fc:d7:aa:3b: a1:4d:e0:94:1a:69:39:6b:38:b7:09:a9:27:2f:8f:11:fd:78: 88:ef:fa:5f:d5:7a:fb:de:06:cb:4e:35:65:6e:25:ad:15:56: 6c:fc:c5:30:aa:37:91:34:25:5f:da:a3:7d:3d:68:ef:ee:6a: b3:95:1d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njT5fJFj+ftPmboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGRkNDI5NzItMzhlZC00ZWRlLWI1MGMtZjE3ODcyN2Q0M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSj6YWYff3xKySj3uquwh7YLRW0+rhSTGR4w 9+md+e/xlV5dKAJVB9bW5I2yi7/GBFaFWwaIc/qRbdbyDUvvRtMRcdISBgxcDO+o BnTc2pxER9scBT9pWB9EWcF5779uadfsgigzLOLbprSurnVcbSD7+y3B4fRZoNMp gU55eMU9KlXey+NSYVlDEpgVTCpj9M0JA7VXZSJw83+Kw4kZjOsFb2kp197obsik CQF+t/1yzC9E8Osd/YRn7kIjKMjP75LqHx5Tg+G+Q5WKHf7qhwWEmiHtHCWqL24Z B1MpFHKYNpLPz+oe8wB1VIw9D/6arAvWQirKHPbnij7oRxWRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJqJ+N/X5C4ENW4liDY7g+hEyHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ3MWRkYjktZjMzMi0z MGRmLTg5ZDQtYTg4MGRkYmY1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMtHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM1GGWEze5zMhbeanCBppsCpZAPO+gpO5IJH8g9mngMA4EXV4d6+fLJ 7bB6/qRngAD+1ZIT9foz58vgvfyJaOaJG9sQ7dXzDXxQc3IwcmjQmp2j3PIMgVhF TjQGF38H/l7HchJmIoTgV15uFo8Z0fSNAXGhfixnHC1gKeIeVZKThytKmhWd++S1 u8xIkStdO2/2NgauQvF4AVvl+HKo8bwCphW6/oD5bMcG9AisqNvOiBGKYU/BIX5p mL7VMEs84ab9/NeqO6FN4JQaaTlrOLcJqScvjxH9eIjv+l/VevveBstONWVuJa0V Vmz8xTCqN5E0JV/ao309aO/uarOVHdM= -----END CERTIFICATE-----Generated at Wed Jul 29 03:37:31 2026 by rpki-client