$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa5a0f13-bcb9-3557-9949-b39146fcc2c5.roa File: aa5a0f13-bcb9-3557-9949-b39146fcc2c5.roa (raw, json) Hash identifier: QJbxyfLtNjfjFOtOfMOjRgmqN9zjH0Epn/CroMjvM40= Subject key identifier: FE:25:04:17:7F:82:8C:C0:92:49:0C:F3:BB:BD:F4:D4:5D:D7:CE:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A00DAD09AFD580D94C72B7580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa5a0f13-bcb9-3557-9949-b39146fcc2c5.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 33655 IP address blocks: 50.240.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:d0:9a:fd:58:0d:94:c7:2b:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=b44bf840-bd20-4f16-a902-c46a7fe3150d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:06:96:46:cc:28:72:82:ff:41:a1:eb:60: 27:67:e7:e1:2d:b8:0f:49:fd:e0:d5:fb:17:be:ad: 70:f5:06:ed:e5:46:73:0c:b4:f4:22:70:b0:32:12: b3:e3:3c:4a:9f:10:f6:4b:14:4f:94:dd:a4:3e:28: 58:97:d2:0a:4a:2d:d4:24:e7:c0:f7:9f:ef:ed:7a: 84:eb:3c:62:8d:ca:b5:89:f0:64:16:c2:8b:3e:1f: ff:71:fe:da:5f:bd:5b:e9:00:45:7e:4c:f0:e3:aa: 93:60:22:af:fd:0d:dd:0e:ba:e1:0a:ed:2b:c6:c8: 01:4c:54:23:44:02:72:bc:31:cc:58:0a:3a:15:94: 3e:f2:eb:46:9b:d8:67:2b:ff:94:a1:ce:10:5b:7b: 12:93:21:3a:41:e6:f2:b3:37:01:e3:47:74:74:f6: 35:06:96:b2:09:8c:ef:21:c3:fe:97:3e:ca:6a:72: 53:56:30:4d:15:79:86:66:ad:59:79:d0:0c:44:ba: b6:1a:63:0c:9b:95:dc:13:1a:27:29:e9:5d:6f:07: cf:0f:47:a3:c7:a7:8e:25:f7:13:e5:67:80:d7:93: 03:48:a6:08:2c:b7:6c:42:0e:cf:06:71:fe:4c:56: 8d:11:b4:b3:02:a7:d7:c4:1d:cd:70:31:a3:18:5e: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:04:17:7F:82:8C:C0:92:49:0C:F3:BB:BD:F4:D4:5D:D7:CE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa5a0f13-bcb9-3557-9949-b39146fcc2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.240.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:0c:62:4e:e6:99:08:49:7e:8e:58:46:b2:c5:c7:de:67: d7:a7:e4:46:0b:71:d8:07:2a:15:f1:ec:d3:b4:91:c8:d4:03: 39:68:1f:48:3b:a7:16:3b:66:4c:ce:0a:27:d5:87:5f:79:b5: ab:80:40:c0:a4:8e:28:56:5c:44:c9:83:94:41:7e:1c:26:37: af:24:0f:22:36:86:91:fa:d9:03:ac:95:5f:98:b8:92:55:6d: 08:ef:26:28:73:eb:41:92:11:a4:ca:3f:b4:0c:a8:45:6d:17: 6d:63:c6:b9:4b:f8:9f:db:2b:bc:18:2a:4d:4a:6a:dd:23:2b: fe:d5:17:8a:46:bf:71:d4:7b:7f:ba:c5:58:91:9c:66:40:d7: 39:d3:13:b7:40:15:56:b2:3c:7e:83:67:a4:ec:45:5e:84:6e: 3f:1c:cf:3b:cd:02:0d:3c:bf:05:da:12:fe:78:00:5c:9c:80: 46:b2:e8:88:d5:e4:a9:20:06:41:54:5b:9e:4b:28:8f:a2:3d: 2a:f4:90:db:70:9b:ce:ec:37:84:29:34:52:eb:57:46:f3:e7: cd:4c:be:73:7d:37:f2:20:cb:96:5d:0b:eb:be:15:8d:50:2e: f9:1d:84:6a:6b:32:c4:9a:dd:ff:40:51:6c:c6:d6:98:2f:a4: 23:48:76:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2tCa/VgNlMcrdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YjQ0YmY4NDAtYmQyMC00ZjE2LWE5MDItYzQ2YTdmZTMxNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwGlkbMKHKC/0Gh62AnZ+fhLbgPSf3g1fsX vq1w9Qbt5UZzDLT0InCwMhKz4zxKnxD2SxRPlN2kPihYl9IKSi3UJOfA95/v7XqE 6zxijcq1ifBkFsKLPh//cf7aX71b6QBFfkzw46qTYCKv/Q3dDrrhCu0rxsgBTFQj RAJyvDHMWAo6FZQ+8utGm9hnK/+Uoc4QW3sSkyE6QebyszcB40d0dPY1BpayCYzv IcP+lz7KanJTVjBNFXmGZq1ZedAMRLq2GmMMm5XcExonKeldbwfPD0ejx6eOJfcT 5WeA15MDSKYILLdsQg7PBnH+TFaNEbSzAqfXxB3NcDGjGF6jTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4lBBd/gozAkkkM87u99NRd185aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE1YTBmMTMtYmNiOS0z NTU3LTk5NDktYjM5MTQ2ZmNjMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMvBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjRDGJO5pkISX6OWEayxcfeZ9en5EYLcdgHKhXx7NO0kcjUAzloH0g7 pxY7ZkzOCifVh195tauAQMCkjihWXETJg5RBfhwmN68kDyI2hpH62QOslV+YuJJV bQjvJihz60GSEaTKP7QMqEVtF21jxrlL+J/bK7wYKk1Kat0jK/7VF4pGv3HUe3+6 xViRnGZA1znTE7dAFVayPH6DZ6TsRV6Ebj8czzvNAg08vwXaEv54AFycgEay6IjV 5KkgBkFUW55LKI+iPSr0kNtwm87sN4QpNFLrV0bz581MvnN9N/Igy5ZdC+u+FY1Q LvkdhGprMsSa3f9AUWzG1pgvpCNIdm4= -----END CERTIFICATE-----Generated at Tue Jun 3 05:44:30 2025 by rpki-client