$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9588b4a0-3d89-3930-b620-f53fa31dd310.roa File: 9588b4a0-3d89-3930-b620-f53fa31dd310.roa (raw, json) Hash identifier: HBRnRWtAHUb2h32/wiQLz5XXj0TvJtB03WQ/zIc+Mag= Subject key identifier: A8:2F:A0:CE:54:4F:24:D4:25:4C:B4:F3:98:15:A1:88:D0:E9:47:1A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B3556EC58B1ADBBC854F18F80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9588b4a0-3d89-3930-b620-f53fa31dd310.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 174 IP address blocks: 50.7.192.0/23 maxlen: 23 50.7.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ec:58:b1:ad:bb:c8:54:f1:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=f574571b-fbce-4450-b881-9176092f2310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:81:00:8a:02:06:17:9c:54:7c:85:a3:d5: 94:e0:10:05:8c:d6:fc:0d:0b:a0:be:cf:83:8f:f0: 9d:94:83:aa:6d:5f:2d:31:c4:61:81:27:2c:67:cb: 5a:9c:f2:b8:c1:ae:2b:dc:63:f8:4c:6e:7d:3c:6f: 7a:b8:a6:a0:ec:0a:3a:e8:ce:0b:47:3d:9f:ae:03: 98:85:80:f8:3e:0c:43:67:38:a8:18:d8:72:4a:68: ae:a4:45:02:c8:03:4c:59:5c:68:d3:69:17:e3:af: 66:71:07:3b:2f:e6:b8:94:4d:34:c8:d4:0c:de:ce: 58:9e:2c:4d:98:74:5a:7f:85:50:fa:42:05:37:a3: 33:01:d5:41:ad:ee:f3:9e:98:4e:3e:70:dd:03:cb: de:06:66:b1:c2:34:2d:ac:4a:c2:b2:e4:ef:fa:69: e7:cd:69:79:4f:31:33:d2:74:c1:29:b2:e2:1d:d9: a7:70:b1:6b:a3:d7:c9:f0:be:75:a1:e2:92:43:60: d1:41:35:22:71:05:61:eb:88:dd:10:79:4e:ca:c3: 65:73:04:44:bc:23:a3:91:bd:ad:ba:cb:c7:d7:55: b6:e2:ba:19:3a:2b:5e:87:c7:70:25:3d:cf:02:19: 37:77:95:fd:b4:6f:ef:5c:d1:f1:75:03:7e:2f:af: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:A0:CE:54:4F:24:D4:25:4C:B4:F3:98:15:A1:88:D0:E9:47:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9588b4a0-3d89-3930-b620-f53fa31dd310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.192.0/23 50.7.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:39:e2:b8:a1:35:ea:e1:31:44:58:20:cf:7a:eb:8d:ef:4b: de:20:00:f5:80:4a:1e:2b:0c:ca:e6:0d:5e:2a:79:b2:26:d1: ab:34:93:53:d6:0c:f0:29:43:f9:83:68:4c:5e:f7:48:14:2d: 8a:68:57:b0:77:c2:20:68:25:88:c2:22:ce:7f:15:55:2c:af: e5:c4:22:22:a7:98:ca:e0:3e:30:b8:d0:99:74:69:02:c8:a1: f8:e8:f2:bc:b2:b7:02:02:7b:e3:88:5d:74:15:76:e6:68:83: 31:3c:ac:5b:b1:a9:ae:01:18:4c:24:f1:18:d3:25:e0:ca:62: 5d:2f:1a:42:48:c7:73:52:25:5c:fe:db:4c:7c:0d:09:0c:65: 9a:d5:5d:12:03:b4:c5:af:4d:54:ed:df:a4:d7:16:3f:a5:f3: 98:c9:b8:f3:ae:7b:51:07:fd:bc:42:7f:12:95:c7:b8:36:b0: a6:57:96:58:54:b7:d5:09:75:d8:ae:77:14:a8:ec:c0:85:55: 74:2e:b6:f2:21:0d:50:98:39:eb:7f:7f:72:34:e9:af:1f:47: 55:04:2b:0a:9e:07:68:83:6f:d1:ca:30:2b:0d:32:1f:e1:29: ec:3d:9c:ca:27:2f:f4:1a:9f:d9:60:c0:2c:3e:33:a0:61:aa: 33:77:81:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs1VuxYsa27yFTxj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZjU3NDU3MWItZmJjZS00NDUwLWI4ODEtOTE3NjA5MmYyMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhuBAIoCBhecVHyFo9WU4BAFjNb8DQugvs+D j/CdlIOqbV8tMcRhgScsZ8tanPK4wa4r3GP4TG59PG96uKag7Ao66M4LRz2frgOY hYD4PgxDZzioGNhySmiupEUCyANMWVxo02kX469mcQc7L+a4lE00yNQM3s5YnixN mHRaf4VQ+kIFN6MzAdVBre7znphOPnDdA8veBmaxwjQtrErCsuTv+mnnzWl5TzEz 0nTBKbLiHdmncLFro9fJ8L51oeKSQ2DRQTUicQVh64jdEHlOysNlcwREvCOjkb2t usvH11W24roZOiteh8dwJT3PAhk3d5X9tG/vXNHxdQN+L6/mjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKgvoM5UTyTUJUy085gVoYjQ6UcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTU4OGI0YTAtM2Q4OS0z OTMwLWI2MjAtZjUzZmEzMWRkMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBMgfAAwQB MgfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAQ54rihNerhMURYIM96643vS94gAPWASh4rDMrmDV4qebIm 0as0k1PWDPApQ/mDaExe90gULYpoV7B3wiBoJYjCIs5/FVUsr+XEIiKnmMrgPjC4 0Jl0aQLIofjo8ryytwICe+OIXXQVduZogzE8rFuxqa4BGEwk8RjTJeDKYl0vGkJI x3NSJVz+20x8DQkMZZrVXRIDtMWvTVTt36TXFj+l85jJuPOue1EH/bxCfxKVx7g2 sKZXllhUt9UJddiudxSo7MCFVXQutvIhDVCYOet/f3I06a8fR1UEKwqeB2iDb9HK MCsNMh/hKew9nMonL/Qan9lgwCw+M6BhqjN3gVE= -----END CERTIFICATE-----Generated at Thu Sep 18 08:19:41 2025 by rpki-client