$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e689c6-6dec-32f7-84a5-47b208c084c0.roa File: a7e689c6-6dec-32f7-84a5-47b208c084c0.roa (raw, json) Hash identifier: qQwLyapLYOlEIdo+JPygpzvH5A+FiPj4ImXraN3Hp0A= Subject key identifier: AA:48:E2:8B:34:41:8F:31:C7:57:BA:B6:80:A8:B3:E4:B7:0A:C4:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA789ACBEB809727240A53480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e689c6-6dec-32f7-84a5-47b208c084c0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33660 IP address blocks: 50.215.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:89:ac:be:b8:09:72:72:40:a5:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8dedf9fc-5b2c-42d8-9f62-32995b6db37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:45:3a:8a:d8:ad:ba:67:f1:de:33:47:9f: 32:0d:e2:17:a8:ad:d2:9b:f0:85:56:48:d2:82:76: a2:6b:38:b6:b3:33:a4:7f:6f:fa:87:18:0e:8e:6c: d5:b8:2c:59:a8:40:26:04:21:3c:82:d3:e3:98:78: 8e:20:e2:21:7b:27:5d:fa:60:2c:47:57:a7:d2:3e: 7f:db:f1:ee:18:6b:33:e8:ed:ec:05:7a:78:c6:cd: 38:70:47:ef:8b:1c:a9:ee:d4:56:db:48:37:f5:c5: 51:10:ba:6d:1b:a7:83:0a:0b:82:e4:06:b6:e6:5d: e5:27:37:ac:eb:b9:6b:9e:9e:d7:3f:ab:41:8e:7c: 15:fc:0a:59:3c:c4:f7:fd:df:bf:f4:58:4a:28:ed: b1:c9:b4:d8:ac:42:b2:a2:73:46:95:25:f4:45:23: 78:1b:cd:88:94:6e:bd:31:83:b7:a7:07:c4:78:c1: 3e:a6:58:23:17:b0:ba:94:39:5b:e3:39:75:46:08: f4:59:84:ef:50:b7:b7:3c:1a:a4:7c:53:98:c0:10: 44:fb:f8:8b:22:78:01:d2:33:4b:21:c7:cd:c5:25: 44:0f:c2:a0:20:21:c9:d2:53:69:d4:1f:7b:5c:95: fa:09:66:0d:f8:5c:81:92:24:7a:aa:f9:34:9b:15: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:48:E2:8B:34:41:8F:31:C7:57:BA:B6:80:A8:B3:E4:B7:0A:C4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e689c6-6dec-32f7-84a5-47b208c084c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.215.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8c:06:a1:d1:b3:dc:89:f3:0d:06:f5:54:c7:cf:9c:64:f7: cc:de:a3:37:28:f4:09:d5:51:d6:21:bb:d1:56:c5:13:7b:f6: 44:c8:30:53:50:d5:e5:67:eb:12:51:a9:f6:67:89:dd:ee:ae: 84:5d:a9:4f:29:6c:8e:35:98:88:a1:8c:6f:82:78:b8:cc:05: 9d:93:57:cc:cc:44:c1:72:0e:9b:26:53:4e:a9:aa:46:72:cf: 2e:0f:54:03:ec:8f:a9:7d:ca:ba:d5:4b:b4:e7:07:0f:c0:45: 39:b3:8a:5a:46:f3:2c:cb:07:ea:7d:db:0a:a3:0f:d7:0d:a2: 94:e6:4e:15:9c:41:4e:c6:f3:1a:2f:87:be:8a:1b:ad:0c:c2: 2f:83:f6:42:24:22:98:93:9d:6b:93:fb:28:00:83:a8:5f:ff: ee:d7:65:dd:3b:f3:b7:16:d3:09:d9:d9:10:0e:aa:ed:bb:1b: 51:9d:d5:11:73:54:49:4f:43:70:a0:d3:16:80:2d:b8:ca:3d: e4:0c:0e:2e:6f:29:ab:72:75:81:87:b4:a4:cd:f4:f1:1a:00: 17:aa:a4:c1:a0:da:05:f2:4e:d4:57:c4:f3:e4:5a:b1:19:87: 8c:ff:b3:e1:ff:ca:3b:e7:2e:3d:5a:cc:c6:22:da:84:db:de: 8e:8f:49:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niay+uAlyckClNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGRlZGY5ZmMtNWIyYy00MmQ4LTlmNjItMzI5OTViNmRiMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CJFOorYrbpn8d4zR58yDeIXqK3Sm/CFVkjS gnaiazi2szOkf2/6hxgOjmzVuCxZqEAmBCE8gtPjmHiOIOIheydd+mAsR1en0j5/ 2/HuGGsz6O3sBXp4xs04cEfvixyp7tRW20g39cVRELptG6eDCguC5Aa25l3lJzes 67lrnp7XP6tBjnwV/ApZPMT3/d+/9FhKKO2xybTYrEKyonNGlSX0RSN4G82IlG69 MYO3pwfEeME+plgjF7C6lDlb4zl1Rgj0WYTvULe3PBqkfFOYwBBE+/iLIngB0jNL IcfNxSVED8KgICHJ0lNp1B97XJX6CWYN+FyBkiR6qvk0mxXJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpI4os0QY8xx1e6toCos+S3CsTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdlNjg5YzYtNmRlYy0z MmY3LTg0YTUtNDdiMjA4YzA4NGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMtfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6MBqHRs9yJ8w0G9VTHz5xk98zeozco9AnVUdYhu9FWxRN79kTIMFNQ 1eVn6xJRqfZnid3uroRdqU8pbI41mIihjG+CeLjMBZ2TV8zMRMFyDpsmU06pqkZy zy4PVAPsj6l9yrrVS7TnBw/ARTmzilpG8yzLB+p92wqjD9cNopTmThWcQU7G8xov h76KG60Mwi+D9kIkIpiTnWuT+ygAg6hf/+7XZd0787cW0wnZ2RAOqu27G1Gd1RFz VElPQ3Cg0xaALbjKPeQMDi5vKatydYGHtKTN9PEaABeqpMGg2gXyTtRXxPPkWrEZ h4z/s+H/yjvnLj1azMYi2oTb3o6PSdg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:10:07 2026 by rpki-client