$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c1b169-ecf1-3c6c-b659-2e8a63ede78c.roa File: d3c1b169-ecf1-3c6c-b659-2e8a63ede78c.roa (raw, json) Hash identifier: Udib68pkybGsE5FkcZamriVbIsE782jKTBvKo2/SBtI= Subject key identifier: C3:B1:6A:4A:5A:7E:20:23:1D:CC:B9:26:31:6F:8D:42:69:AD:93:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBC584C75E5FE213F37500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c1b169-ecf1-3c6c-b659-2e8a63ede78c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33660 IP address blocks: 50.213.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:c5:84:c7:5e:5f:e2:13:f3:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=31ae335c-b4a2-4e1c-aeb7-4f2bffcd30a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:41:f4:78:c8:fa:7c:69:eb:68:01:5b:3c: d3:db:a3:f6:9f:84:5a:25:e2:3b:dc:a0:e9:b2:83: cb:d9:59:25:ca:b2:91:af:e0:f6:40:1d:35:1d:a9: eb:98:cb:73:97:2c:04:a3:67:a3:61:87:12:18:5b: 25:25:80:da:05:15:b9:6a:4e:38:db:21:76:0d:d7: 96:ef:03:47:f9:93:98:bd:a8:fd:df:14:75:7f:85: dc:d4:06:7a:ba:3a:47:bb:1d:27:c8:d1:fa:40:ab: f8:52:7a:7d:6e:31:1a:e0:60:4d:7a:e8:96:62:64: e6:08:8e:b8:df:82:c9:1e:7b:9a:a3:09:36:ba:2d: 82:10:b3:12:aa:ca:fa:fa:6d:d7:20:43:3f:63:a9: 2e:0d:86:d5:9d:97:c2:86:54:69:15:e1:6f:72:72: bd:c2:99:d1:a3:4b:55:72:d9:9a:da:a9:c7:9c:f1: 36:26:60:a1:4f:be:64:c3:82:7b:c6:c6:da:90:1d: e7:20:71:78:62:e7:b5:be:13:25:9e:23:6a:de:b8: 09:92:5b:15:80:5e:e8:c5:7b:f6:3d:c7:ec:52:2f: 4d:b4:d0:e7:66:8c:2f:58:c8:3e:ed:67:e2:1f:26: e1:df:32:91:98:0c:00:54:c8:66:25:65:82:1a:b6: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:6A:4A:5A:7E:20:23:1D:CC:B9:26:31:6F:8D:42:69:AD:93:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c1b169-ecf1-3c6c-b659-2e8a63ede78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.213.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:33:fd:ac:77:1b:65:69:4e:0a:8d:f4:6a:14:4a:31:c9:ee: 4f:37:b1:ff:53:03:93:05:67:8c:18:fd:4b:16:f9:3e:9e:ee: dc:ae:17:ab:85:5a:a6:7a:7b:a9:a6:10:bb:6a:f9:00:2b:95: 8c:cd:8c:53:46:d5:de:89:a5:78:49:7a:2e:7c:24:f7:35:5d: d6:50:de:49:1e:60:2b:45:f4:86:c3:b6:f9:5c:f5:31:83:74: 20:31:04:fe:d7:84:9e:d1:6d:96:37:e2:6a:d9:0c:b0:2a:5e: 01:36:c2:3c:85:b2:fe:7f:b2:1d:d2:90:2b:0b:e8:c9:74:b0: 6e:28:0f:7e:d6:93:8a:40:c5:5c:0b:1e:9c:cb:52:68:e6:a3: 57:60:00:6b:74:69:e7:62:fd:7f:5a:41:32:04:c8:e0:3e:d4: e4:d8:07:1c:94:f2:17:44:72:1e:ef:3f:db:7e:a6:05:60:6e: 59:d4:3e:42:0f:c1:82:a7:89:ee:9c:48:dd:43:4a:ef:b9:9e: e5:6f:9f:cd:cf:33:83:41:71:46:13:cf:61:7d:2f:62:53:26: 8a:c0:75:46:b3:63:44:94:57:f6:7a:81:ba:26:e6:4e:f8:41: 71:b0:92:12:89:58:66:d0:79:2e:4c:af:64:58:25:cf:04:3b: 3b:24:97:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+8WEx15f4hPzdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzFhZTMzNWMtYjRhMi00ZTFjLWFlYjctNGYyYmZmY2QzMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NpB9HjI+nxp62gBWzzT26P2n4RaJeI73KDp soPL2VklyrKRr+D2QB01HanrmMtzlywEo2ejYYcSGFslJYDaBRW5ak442yF2DdeW 7wNH+ZOYvaj93xR1f4Xc1AZ6ujpHux0nyNH6QKv4Unp9bjEa4GBNeuiWYmTmCI64 34LJHnuaowk2ui2CELMSqsr6+m3XIEM/Y6kuDYbVnZfChlRpFeFvcnK9wpnRo0tV ctma2qnHnPE2JmChT75kw4J7xsbakB3nIHF4Yue1vhMlniNq3rgJklsVgF7oxXv2 PcfsUi9NtNDnZowvWMg+7WfiHybh3zKRmAwAVMhmJWWCGraxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOxakpafiAjHcy5JjFvjUJprZMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNjMWIxNjktZWNmMS0z YzZjLWI2NTktMmU4YTYzZWRlNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMtWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoz/ax3G2VpTgqN9GoUSjHJ7k83sf9TA5MFZ4wY/UsW+T6e7tyuF6uF WqZ6e6mmELtq+QArlYzNjFNG1d6JpXhJei58JPc1XdZQ3kkeYCtF9IbDtvlc9TGD dCAxBP7XhJ7RbZY34mrZDLAqXgE2wjyFsv5/sh3SkCsL6Ml0sG4oD37Wk4pAxVwL HpzLUmjmo1dgAGt0aedi/X9aQTIEyOA+1OTYBxyU8hdEch7vP9t+pgVgblnUPkIP wYKnie6cSN1DSu+5nuVvn83PM4NBcUYTz2F9L2JTJorAdUazY0SUV/Z6gbom5k74 QXGwkhKJWGbQeS5Mr2RYJc8EOzskl54= -----END CERTIFICATE-----Generated at Sun Jul 20 17:09:45 2025 by rpki-client