$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa File: 04e0c440-3c28-3d4a-b869-4387c175a350.roa (raw, json) Hash identifier: 32A8c35ppRnUOupk1veI1lNR5+9JbuNTda7TSosJW5g= Subject key identifier: 1A:C0:EA:94:D1:2F:73:3B:CE:63:66:91:DF:DB:63:4E:54:8D:54:A3 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584EA793990633EA200690EDB8E0 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14523 IP address blocks: 50.20.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:99:06:33:ea:20:06:90:ed:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d1d2d1c6-9c33-4498-826b-d91b0f156b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:a3:97:ac:f0:39:28:4a:b4:7a:cc:bb:63: 50:27:e3:27:57:d5:d4:2d:d0:23:40:5a:de:73:84: 1d:48:35:2b:04:85:29:90:05:38:12:b4:5e:7f:86: 6b:97:31:72:e9:d5:b8:44:a7:c1:c2:e3:df:3f:ac: 98:7f:79:45:05:c0:2b:89:43:30:ac:04:dc:fd:6f: cf:dc:4e:3e:9b:b9:57:10:dc:3c:50:0a:bb:12:b1: 23:8f:8b:08:36:99:7e:3c:de:87:bd:14:9f:f3:25: 99:c2:2c:61:de:fb:60:ca:50:0c:04:0a:55:e2:c1: 5b:2b:e1:26:fd:4a:25:b8:8b:ae:6c:08:6e:78:e0: 2a:d9:3d:b4:46:cc:dd:dd:7c:4e:35:2f:3d:85:22: 0a:a8:fb:9f:e6:e5:7e:41:d3:57:18:ff:ef:3c:71: e4:b2:22:9d:1b:2f:20:d8:25:12:6f:9d:f4:9d:4c: aa:69:09:b5:ad:92:6c:60:bb:45:11:8e:d7:b4:f0: 37:11:0c:72:19:dc:f0:08:bb:2e:5b:76:fd:35:9c: af:6c:16:7a:ab:ac:aa:5d:89:06:81:5b:60:01:6a: 44:3f:07:91:46:d0:9f:c6:a6:eb:b8:bf:1f:4f:1f: 53:90:1c:b9:a5:95:0d:06:c9:29:fb:7e:3e:ea:5d: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:EA:94:D1:2F:73:3B:CE:63:66:91:DF:DB:63:4E:54:8D:54:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/04e0c440-3c28-3d4a-b869-4387c175a350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 50.20.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:eb:1d:1a:64:62:3f:82:96:22:35:25:51:ee:b4:04:84:09: 75:ab:30:39:52:a7:37:03:d6:e5:61:d8:cd:48:b9:24:27:3c: 2b:0a:0e:cb:f9:9b:9f:b0:9b:ba:6f:03:0e:dc:45:e3:ac:79: 31:dc:62:51:79:e5:b8:62:9f:e1:78:02:1e:45:3e:ae:5a:82: 04:78:ee:84:84:05:65:50:86:57:db:0e:3c:f9:79:71:8c:87: 1c:5f:62:48:60:b2:f4:3b:93:81:7f:56:94:66:2f:89:e2:df: d2:89:fb:90:f5:49:0e:32:76:d1:01:d3:21:25:19:d9:f3:92: fa:76:68:c5:3e:32:5c:be:33:53:02:45:82:a6:0b:1e:ba:6e: 59:18:16:af:aa:ec:d1:31:95:85:6a:d3:02:d4:5d:1e:5a:0a: f3:7b:ee:e6:be:33:f2:d8:7e:eb:70:9d:cf:a0:c5:53:74:af: e9:95:07:b0:09:af:84:a1:03:a7:c5:06:2a:14:0c:3f:2f:e5: ce:16:5d:b8:25:4d:8e:e4:ec:a2:c8:11:66:cc:db:01:06:92: 81:e4:79:52:dd:f3:13:18:56:d7:2f:c4:5a:9d:04:0a:da:a4: 63:4b:8b:a4:41:7e:6f:eb:0f:85:cb:56:d3:21:a0:a1:b2:1e: ac:c5:f0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk5kGM+ogBpDtuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDFkMmQxYzYtOWMzMy00NDk4LTgyNmItZDkxYjBmMTU2Yjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSKjl6zwOShKtHrMu2NQJ+MnV9XULdAjQFre c4QdSDUrBIUpkAU4ErRef4ZrlzFy6dW4RKfBwuPfP6yYf3lFBcAriUMwrATc/W/P 3E4+m7lXENw8UAq7ErEjj4sINpl+PN6HvRSf8yWZwixh3vtgylAMBApV4sFbK+Em /UoluIuubAhueOAq2T20Rszd3XxONS89hSIKqPuf5uV+QdNXGP/vPHHksiKdGy8g 2CUSb530nUyqaQm1rZJsYLtFEY7XtPA3EQxyGdzwCLsuW3b9NZyvbBZ6q6yqXYkG gVtgAWpEPweRRtCfxqbruL8fTx9TkBy5pZUNBskp+34+6l0+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrA6pTRL3M7zmNmkd/bY05UjVSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvMDRlMGM0NDAtM2MyOC0z ZDRhLWI4NjktNDM4N2MxNzVhMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPrHRpkYj+CliI1JVHutASECXWrMDlSpzcD1uVh2M1IuSQnPCsKDsv5 m5+wm7pvAw7cReOseTHcYlF55bhin+F4Ah5FPq5aggR47oSEBWVQhlfbDjz5eXGM hxxfYkhgsvQ7k4F/VpRmL4ni39KJ+5D1SQ4ydtEB0yElGdnzkvp2aMU+Mly+M1MC RYKmCx66blkYFq+q7NExlYVq0wLUXR5aCvN77ua+M/LYfutwnc+gxVN0r+mVB7AJ r4ShA6fFBioUDD8v5c4WXbglTY7k7KLIEWbM2wEGkoHkeVLd8xMYVtcvxFqdBAra pGNLi6RBfm/rD4XLVtMhoKGyHqzF8F0= -----END CERTIFICATE-----Generated at Sat Aug 1 11:41:14 2026 by rpki-client