$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa File: cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa (raw, json) Hash identifier: I50AicrJYDBr4qnEjpDIKPmDeZ/68PDRtZaY/1+SBV8= Subject key identifier: F6:D8:B3:1E:3D:65:AE:B1:BA:C7:B7:73:EF:46:FE:E7:A4:66:D9:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AAB266E2BD226170CBC5CBB60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 50.202.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6e:2b:d2:26:17:0c:bc:5c:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=9ffd8fd7-56d4-4985-893f-313edb245efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:b0:34:3c:d9:6c:22:d0:db:ca:35:a5:cd: 8c:66:eb:1a:33:1f:b1:bf:a3:7b:1f:9a:d1:2f:09: 81:52:f4:99:21:a9:8d:71:52:1d:29:70:60:ba:36: e3:aa:0a:89:95:67:64:0f:45:66:c6:e4:b6:51:c0: a4:4a:d9:c6:55:a7:36:98:de:26:00:28:04:13:49: 87:c5:ef:37:48:5b:9c:5a:59:04:06:05:82:67:e8: f0:e8:54:f9:fe:95:46:1c:6d:af:9d:17:6e:36:6b: a3:4f:60:0a:6c:e4:2e:89:2a:3e:bb:de:16:4c:48: 90:56:92:08:cd:d8:cf:98:6d:76:25:15:32:2a:5e: f2:53:1a:47:e9:99:bd:c2:b0:f4:d1:e2:8e:2b:e1: 45:a3:f2:60:fe:7b:f8:4c:a8:f4:d6:35:4b:03:54: e9:ea:2e:b3:bf:d9:87:60:08:f1:a9:a2:34:65:26: 12:81:1b:13:40:3d:79:f7:0d:70:4c:b1:f7:b4:b4: 13:81:5c:7f:f3:2c:6a:0c:63:c5:41:95:9c:35:06: 40:42:08:cc:86:68:f5:25:d9:27:8a:a9:10:22:76: 27:e4:78:d6:b0:a4:3b:b6:49:31:cf:bf:72:1a:c8: 2f:00:2e:00:e9:f3:e4:a1:3d:91:00:a3:9c:87:a9: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D8:B3:1E:3D:65:AE:B1:BA:C7:B7:73:EF:46:FE:E7:A4:66:D9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:47:a5:ba:68:b8:23:7b:8c:79:88:34:b9:37:75:83:ec:67: ee:cd:bf:b8:bb:45:4c:9f:7d:b2:9e:fb:ec:1d:7c:70:67:4e: b8:0c:3b:05:4e:19:ef:e1:c9:61:20:bf:87:a6:40:58:22:1b: 47:43:b0:37:4a:ea:9b:80:d5:dd:ea:f8:ef:fb:b0:48:63:9c: f7:f7:d5:30:f1:87:a3:6e:80:21:bf:e9:4d:39:80:5b:56:31: 9a:15:d8:18:a0:0e:7f:3e:9b:1e:00:3f:25:be:b4:47:18:18: c5:98:bf:80:e4:12:aa:89:0a:3b:34:14:0a:a7:b0:8f:a7:3d: 21:bf:02:9f:ab:82:e0:f8:47:da:76:c1:8e:c0:58:58:53:5f: 10:ab:33:a3:b7:ac:cd:8f:00:1a:85:ae:43:8c:44:86:d1:d6: 58:46:29:ae:62:44:0f:fc:b9:73:4c:0c:49:8d:95:4b:c6:7a: 32:70:14:60:ce:d1:7c:14:25:a6:0d:53:a5:f3:ce:a1:58:66: bd:82:cc:1c:94:44:dd:b9:07:58:4a:d8:9d:57:31:23:09:7d: 82:c6:a2:7e:ec:ed:fe:c5:ea:b9:17:97:d0:34:f5:7b:5d:9a: ff:8d:85:6c:bb:73:6f:ff:39:67:d5:ef:5a:b2:59:f7:73:90: d6:0c:1d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJm4r0iYXDLxcu2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OWZmZDhmZDctNTZkNC00OTg1LTg5M2YtMzEzZWRiMjQ1ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w2wNDzZbCLQ28o1pc2MZusaMx+xv6N7H5rR LwmBUvSZIamNcVIdKXBgujbjqgqJlWdkD0VmxuS2UcCkStnGVac2mN4mACgEE0mH xe83SFucWlkEBgWCZ+jw6FT5/pVGHG2vnRduNmujT2AKbOQuiSo+u94WTEiQVpII zdjPmG12JRUyKl7yUxpH6Zm9wrD00eKOK+FFo/Jg/nv4TKj01jVLA1Tp6i6zv9mH YAjxqaI0ZSYSgRsTQD159w1wTLH3tLQTgVx/8yxqDGPFQZWcNQZAQgjMhmj1Jdkn iqkQInYn5HjWsKQ7tkkxz79yGsgvAC4A6fPkoT2RAKOch6l3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbYsx49Za6xuse3c+9G/uekZtnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y5NDZlMWUtZThjNy0z ODM5LWJhYzctNjY2ZjZjMWZmMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBHpbpouCN7jHmINLk3dYPsZ+7Nv7i7RUyffbKe++wdfHBnTrgMOwVO Ge/hyWEgv4emQFgiG0dDsDdK6puA1d3q+O/7sEhjnPf31TDxh6NugCG/6U05gFtW MZoV2BigDn8+mx4APyW+tEcYGMWYv4DkEqqJCjs0FAqnsI+nPSG/Ap+rguD4R9p2 wY7AWFhTXxCrM6O3rM2PABqFrkOMRIbR1lhGKa5iRA/8uXNMDEmNlUvGejJwFGDO 0XwUJaYNU6XzzqFYZr2CzByURN25B1hK2J1XMSMJfYLGon7s7f7F6rkXl9A09Xtd mv+NhWy7c2//OWfV71qyWfdzkNYMHQc= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:39 2025 by rpki-client