$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5435d6af-58d8-395a-acd1-e18ad81e9c95.roa File: 5435d6af-58d8-395a-acd1-e18ad81e9c95.roa (raw, json) Hash identifier: EumiOaaX+XfYYjnnhTgvD0Va2fS4+7cjgvPjGcvl6ts= Subject key identifier: 0C:DB:B0:2D:8A:EB:EE:ED:1C:73:6E:9B:A4:74:63:9C:4A:7F:4B:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DBA19C13B5B02D53D5531C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5435d6af-58d8-395a-acd1-e18ad81e9c95.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 32669 IP address blocks: 50.225.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:19:c1:3b:5b:02:d5:3d:55:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=67933e34-eccf-4125-af28-ad1c2391dab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:e3:82:ba:68:30:26:7c:41:cb:fa:72:91: d8:f3:01:1d:b3:54:0e:45:6e:aa:d5:b4:97:b2:7d: e2:a0:fe:cc:f7:0b:43:48:68:98:ab:11:1a:f4:90: fd:b1:ac:27:2a:56:b0:61:9d:dc:66:4b:b7:4e:94: 07:99:6e:fa:f7:e2:d2:d0:3e:3f:3f:37:23:d6:fd: 9f:4e:10:ed:bd:50:f2:75:2b:d8:b8:a9:d0:da:19: 37:36:61:49:d4:fa:10:79:99:c8:71:b1:7e:14:31: 7f:1b:be:b8:34:55:66:6c:10:fa:15:fa:bd:37:26: 92:96:b5:cd:56:2d:47:58:f4:70:57:e9:1b:87:73: 38:0b:32:3f:39:c4:d3:0d:ed:af:dd:a2:db:72:1d: 2c:86:63:bc:80:8c:27:e6:25:2d:7d:6a:b3:87:6c: 13:45:bc:74:79:7f:26:a3:b7:c1:01:ca:99:a8:f3: 4f:d9:67:c4:74:6f:d8:59:7e:58:5a:9a:b7:50:32: f1:9c:e7:01:3c:c9:ab:26:59:d1:b4:00:64:7f:4a: d6:46:e8:13:49:ee:7a:d0:3a:90:87:a1:cd:df:71: 49:8b:a8:87:84:2a:7b:75:a7:5a:11:3a:15:3e:94: be:2d:3f:01:95:4e:12:f5:4f:e0:28:99:26:53:6b: a0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:B0:2D:8A:EB:EE:ED:1C:73:6E:9B:A4:74:63:9C:4A:7F:4B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5435d6af-58d8-395a-acd1-e18ad81e9c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.225.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b1:01:4a:6f:9c:d4:c5:87:b4:ec:7e:5f:0e:24:a4:dc:1d: c7:19:20:b2:86:e4:2a:b5:d7:38:12:e5:80:c2:43:56:9e:b2: ba:45:2f:b1:50:89:eb:32:5b:a7:1b:f9:b2:12:70:e6:ca:73: a8:50:04:db:8a:bc:1f:25:5c:2e:bd:67:64:6d:a0:f1:0e:98: bd:94:6e:be:1a:ee:fa:95:10:5b:46:f2:40:71:0b:b5:c9:79: dc:7f:35:ab:00:66:7b:73:f3:ca:5d:53:a1:af:79:c1:d2:50: bf:4f:7b:09:e9:22:a8:db:f9:3c:0b:79:a2:97:c3:dc:77:82: e5:5c:04:71:d6:da:d9:b6:e4:04:0d:d8:70:ca:f9:cc:73:21: f5:1e:d8:31:c6:94:bd:b8:2e:3a:28:d2:74:37:41:38:83:2a: 72:55:91:06:3c:50:86:42:8d:3f:f4:9c:27:70:bd:f1:53:fc: 92:d0:cc:89:0d:da:02:85:c8:39:1a:3d:13:c0:6a:25:c5:e4: ab:15:8c:89:5a:b2:d9:27:21:e0:c9:c1:52:c7:ec:cf:34:e2: 0d:2a:e2:f9:3b:08:6f:74:e1:48:71:00:9d:d1:73:5d:80:df: f4:e9:00:80:51:28:6b:b8:62:f7:bf:a8:ac:e9:d3:ad:de:bc: bd:a5:5e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uhnBO1sC1T1VMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Njc5MzNlMzQtZWNjZi00MTI1LWFmMjgtYWQxYzIzOTFkYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox3jgrpoMCZ8Qcv6cpHY8wEds1QORW6q1bSX sn3ioP7M9wtDSGiYqxEa9JD9sawnKlawYZ3cZku3TpQHmW769+LS0D4/Pzcj1v2f ThDtvVDydSvYuKnQ2hk3NmFJ1PoQeZnIcbF+FDF/G764NFVmbBD6Ffq9NyaSlrXN Vi1HWPRwV+kbh3M4CzI/OcTTDe2v3aLbch0shmO8gIwn5iUtfWqzh2wTRbx0eX8m o7fBAcqZqPNP2WfEdG/YWX5YWpq3UDLxnOcBPMmrJlnRtABkf0rWRugTSe560DqQ h6HN33FJi6iHhCp7dadaEToVPpS+LT8BlU4S9U/gKJkmU2ug0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzbsC2K6+7tHHNum6R0Y5xKf0uOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQzNWQ2YWYtNThkOC0z OTVhLWFjZDEtZTE4YWQ4MWU5Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6xAUpvnNTFh7Tsfl8OJKTcHccZILKG5Cq11zgS5YDCQ1aesrpFL7FQ iesyW6cb+bIScObKc6hQBNuKvB8lXC69Z2RtoPEOmL2Ubr4a7vqVEFtG8kBxC7XJ edx/NasAZntz88pdU6GvecHSUL9PewnpIqjb+TwLeaKXw9x3guVcBHHW2tm25AQN 2HDK+cxzIfUe2DHGlL24Ljoo0nQ3QTiDKnJVkQY8UIZCjT/0nCdwvfFT/JLQzIkN 2gKFyDkaPRPAaiXF5KsVjIlastknIeDJwVLH7M804g0q4vk7CG904UhxAJ3Rc12A 3/TpAIBRKGu4Yve/qKzp063evL2lXlA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:47 2025 by rpki-client