$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb6f606-54b3-34e5-93b2-742be659dafa.roa File: 4fb6f606-54b3-34e5-93b2-742be659dafa.roa (raw, json) Hash identifier: ZQ6XDQS/srp+IZoIdzrUcnu5e2mnaDLTpTdaPa8iWMM= Subject key identifier: 60:52:8B:8A:80:03:E3:7A:2B:26:7E:AD:5E:8D:52:BD:92:8C:96:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB74D967A4135B4E838B20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb6f606-54b3-34e5-93b2-742be659dafa.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 17035 IP address blocks: 50.220.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:74:d9:67:a4:13:5b:4e:83:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=6902ef31-1018-431e-97be-26d3345a7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:95:a3:16:a2:3a:47:d8:e3:05:d7:0c:33: f9:ee:80:ba:d7:94:25:f0:6b:db:81:b1:37:bf:c3: 96:d1:fa:36:36:16:e9:ca:eb:b2:51:85:f0:98:91: 57:92:b3:c0:05:9d:9d:a2:85:7e:91:dd:e5:ad:33: be:d2:54:44:b2:3f:d5:42:2a:30:4c:c6:27:23:72: 7b:aa:9b:84:96:9b:f6:c5:b5:a3:2d:06:fc:2a:dc: 05:73:2a:d5:ee:34:d9:63:50:a9:c5:0a:58:49:fb: fb:bd:72:77:33:ac:43:4f:69:1b:15:81:ae:bf:d8: 23:82:4d:37:22:2d:71:60:21:b7:f2:83:a1:b3:cd: 38:50:86:c5:d5:f7:f3:e5:d8:af:cd:4b:8b:76:77: 16:f9:92:a5:b2:30:40:a0:0b:61:0b:7e:5f:6e:21: ab:b2:5d:3f:cd:b5:1b:04:e3:47:be:ae:05:d0:b9: 94:9d:05:9b:50:2f:08:78:f6:99:e9:15:43:ee:33: ce:24:a9:c5:da:28:0c:12:48:cf:23:8a:fa:18:5a: 25:f4:fc:a7:97:72:6d:d1:90:9d:ab:9e:77:c5:18: 76:da:a5:8d:91:1c:b5:bd:85:f8:35:34:69:cc:e4: 04:a1:93:6c:16:1d:d9:b4:8b:bc:21:a9:9d:1a:da: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:8B:8A:80:03:E3:7A:2B:26:7E:AD:5E:8D:52:BD:92:8C:96:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb6f606-54b3-34e5-93b2-742be659dafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.220.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9a:6c:61:43:a7:04:28:5f:65:a8:b1:8a:46:af:d8:1f:e4: 48:9a:b0:ee:0b:00:b1:e8:df:90:6a:66:a1:1d:20:f5:cb:d5: 89:fa:92:92:a5:10:0e:ea:f8:5f:47:5f:f6:34:1c:46:a4:10: 5c:44:e7:d2:4e:c4:3d:b2:29:26:e3:d0:c5:f1:ab:eb:77:e8: 41:c0:e7:12:fe:04:9a:0f:c0:f2:51:2b:c0:de:0b:37:8a:3b: 22:8a:50:4f:03:f7:a9:12:45:7c:3b:36:1e:52:6a:0c:a8:00: aa:98:e5:d8:d4:77:76:de:c6:d4:a5:39:16:18:ca:71:4c:fc: 9e:74:04:fc:fe:db:35:1e:a2:88:f5:3e:11:90:7a:79:45:37: 7d:9f:70:0f:ce:fa:b7:49:ce:37:1b:94:e6:c0:02:da:c6:4d: 60:db:8a:1f:91:35:37:d0:5d:91:bb:54:3c:ab:18:8c:cb:17: 77:e5:ad:49:65:3b:8b:86:b2:4a:67:b2:16:13:0e:b7:b8:8f: bb:36:fd:5e:6d:d8:36:eb:15:4a:46:8a:3a:41:46:2f:07:a0: 89:02:66:a2:de:ea:a0:a0:db:92:0a:81:d7:e2:f7:da:ae:0a: 8f:08:95:bd:a3:cc:11:51:eb:87:ac:0b:50:14:be:2e:36:7a: b4:78:df:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+3TZZ6QTW06DiyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjkwMmVmMzEtMTAxOC00MzFlLTk3YmUtMjZkMzM0NWE3ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8eVoxaiOkfY4wXXDDP57oC615Ql8GvbgbE3 v8OW0fo2NhbpyuuyUYXwmJFXkrPABZ2dooV+kd3lrTO+0lREsj/VQiowTMYnI3J7 qpuElpv2xbWjLQb8KtwFcyrV7jTZY1CpxQpYSfv7vXJ3M6xDT2kbFYGuv9gjgk03 Ii1xYCG38oOhs804UIbF1ffz5divzUuLdncW+ZKlsjBAoAthC35fbiGrsl0/zbUb BONHvq4F0LmUnQWbUC8IePaZ6RVD7jPOJKnF2igMEkjPI4r6GFol9Pynl3Jt0ZCd q553xRh22qWNkRy1vYX4NTRpzOQEoZNsFh3ZtIu8IamdGtoQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBSi4qAA+N6KyZ+rV6NUr2SjJZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZiNmY2MDYtNTRiMy0z NGU1LTkzYjItNzQyYmU2NTlkYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSabGFDpwQoX2WosYpGr9gf5EiasO4LALHo35BqZqEdIPXL1Yn6kpKl EA7q+F9HX/Y0HEakEFxE59JOxD2yKSbj0MXxq+t36EHA5xL+BJoPwPJRK8DeCzeK OyKKUE8D96kSRXw7Nh5SagyoAKqY5djUd3bextSlORYYynFM/J50BPz+2zUeooj1 PhGQenlFN32fcA/O+rdJzjcblObAAtrGTWDbih+RNTfQXZG7VDyrGIzLF3flrUll O4uGskpnshYTDre4j7s2/V5t2DbrFUpGijpBRi8HoIkCZqLe6qCg25IKgdfi99qu Co8Ilb2jzBFR64esC1AUvi42erR43+g= -----END CERTIFICATE-----Generated at Sun Jul 20 17:38:39 2025 by rpki-client