$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json) Hash identifier: m4LgqtaQfwEIKONTOg3xoUs5ItBNNHkgarzUunYoIZQ= Subject key identifier: 46:34:65:2A:F1:6F:C2:49:14:A3:DD:72:D4:B2:29:FD:49:B0:45:4D Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Certificate serial: 010D0C9F4328584B2A2C37557AE0E253A0318200 Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 64227 IP address blocks: 50.20.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:37:55:7a:e0:e2:53:a0:31:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7b94a7a0-5948-485e-afd0-0136805a441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:b5:32:a4:89:d5:0f:76:b9:aa:56:d0:35: cf:43:a0:d0:9d:f5:69:19:f7:37:1a:5b:e1:39:b7: 26:a8:dc:d1:a7:d8:04:b0:9f:35:e1:a0:2a:d8:4d: e1:7a:c2:24:64:77:78:ae:a3:03:7e:e7:93:8f:c8: f3:d3:4f:d0:ac:dd:bc:ac:2e:b4:c3:9a:34:b5:00: 89:76:c0:50:9b:a6:69:6a:1e:cb:6a:3a:9a:17:36: 67:d3:0f:66:80:e5:98:a4:ca:ee:48:75:24:93:64: 43:8b:cb:09:47:4b:ef:03:f8:39:03:28:11:0b:f0: ce:c8:4c:91:f5:71:af:af:fc:84:92:fd:e4:84:9b: cb:26:bb:02:b1:30:f9:6e:7c:97:32:67:1e:20:88: 3d:1d:5c:5c:db:59:ec:83:b5:8c:0f:d8:b8:5c:51: e2:26:80:72:e1:aa:e5:0b:6d:9e:43:30:71:ae:db: 8f:13:43:13:51:0a:eb:d2:fe:a1:55:5d:c2:71:11: 54:1a:81:d5:60:fd:10:f9:ae:4d:2d:0d:ff:53:13: 69:7c:7a:7b:43:5e:81:a5:9a:ec:ae:cb:87:ec:f6: 74:64:a4:a9:b5:a5:81:4f:4d:a8:4c:05:19:84:2b: e7:d8:b8:2e:5f:cf:36:31:f8:4e:44:86:26:8c:d7: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:65:2A:F1:6F:C2:49:14:A3:DD:72:D4:B2:29:FD:49:B0:45:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl X509v3 Authority Key Identifier: keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer sbgp-ipAddrBlock: critical IPv4: 50.20.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b2:1a:c4:ed:8b:16:24:e1:63:c4:de:5d:ef:b3:23:c4:81: 19:e6:dd:d2:2e:0a:13:39:fa:38:a1:fb:55:2d:25:95:90:ed: bb:6c:bc:af:e9:eb:01:e5:f4:49:16:86:68:7a:8a:50:ed:50: ad:ad:5d:47:0c:e3:8e:b9:f0:6c:22:ce:60:47:97:bb:fd:4a: 3f:1d:3b:77:b3:61:a7:52:18:09:1e:25:ce:84:90:ea:3f:69: c8:8b:25:6e:31:e2:38:8b:a3:8f:ea:5b:07:85:f3:19:8b:92: 11:1a:72:90:93:64:ff:b9:72:c8:46:3d:7b:23:79:50:2b:c3: 96:1e:3b:ef:03:32:ee:74:1e:ab:f2:ac:d1:e4:b2:ba:76:27: 9d:88:5b:f4:8d:11:19:71:e8:9f:94:ea:20:15:2c:0b:b9:52: 9b:3a:95:4c:59:2e:7f:89:8b:5b:71:ac:db:77:23:cd:f0:0e: b9:23:62:f5:eb:f4:01:94:d5:39:c7:7b:a5:74:4b:78:83:61: 7a:f3:7c:77:d0:b0:8b:e9:ff:f8:a6:d3:73:4c:de:fa:e6:f7: 70:1f:f8:f7:d6:41:ec:05:d4:c4:e4:8c:a2:17:15:86:86:8d: 29:cb:ba:10:d9:f5:9d:56:c9:1d:14:62:0a:ce:4e:bb:4a:45: 2f:63:f0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDdVeuDiU6AxggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk ZjNmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2I5NGE3YTAtNTk0OC00ODVlLWFmZDAtMDEzNjgwNWE0NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiG1MqSJ1Q92uapW0DXPQ6DQnfVpGfc3Glvh ObcmqNzRp9gEsJ814aAq2E3hesIkZHd4rqMDfueTj8jz00/QrN28rC60w5o0tQCJ dsBQm6Zpah7LajqaFzZn0w9mgOWYpMruSHUkk2RDi8sJR0vvA/g5AygRC/DOyEyR 9XGvr/yEkv3khJvLJrsCsTD5bnyXMmceIIg9HVxc21nsg7WMD9i4XFHiJoBy4arl C22eQzBxrtuPE0MTUQrr0v6hVV3CcRFUGoHVYP0Q+a5NLQ3/UxNpfHp7Q16BpZrs rsuH7PZ0ZKSptaWBT02oTAUZhCvn2LguX882MfhORIYmjNcEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY0ZSrxb8JJFKPdctSyKf1JsEVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvNWFmNmMzYTQtZGU0Yy0z NTUzLTgxYzYtNjAwNDFiMGEyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2 ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqyGsTtixYk4WPE3l3vsyPEgRnm3dIuChM5+jih+1UtJZWQ7btsvK/p 6wHl9EkWhmh6ilDtUK2tXUcM44658GwizmBHl7v9Sj8dO3ezYadSGAkeJc6EkOo/ aciLJW4x4jiLo4/qWweF8xmLkhEacpCTZP+5cshGPXsjeVArw5YeO+8DMu50Hqvy rNHksrp2J52IW/SNERlx6J+U6iAVLAu5Ups6lUxZLn+Ji1txrNt3I83wDrkjYvXr 9AGU1TnHe6V0S3iDYXrzfHfQsIvp//im03NM3vrm93Af+PfWQewF1MTkjKIXFYaG jSnLuhDZ9Z1WyR0UYgrOTrtKRS9j8Bw= -----END CERTIFICATE-----Generated at Fri Oct 17 15:49:03 2025 by rpki-client