$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa File: 85900abc-9735-382e-9e6d-9ebcd15ddfec.roa (raw, json) Hash identifier: AILV5dfD88k16tO0OwhxFZT2gqns8NBuHnxdeQrcorI= Subject key identifier: E3:54:5F:BF:09:38:08:B8:BC:B2:31:81:7A:80:C3:99:C7:52:13:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AD7D1419A61CCA85E78F63380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 33652 IP address blocks: 50.147.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:41:9a:61:cc:a8:5e:78:f6:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=39d0947b-c166-49c7-ba20-5bb3563e6b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:0f:e0:4d:67:41:aa:f6:78:47:0e:c5:5d: 1e:76:4d:40:c8:98:7e:77:e7:42:d8:c1:46:66:33: f9:3f:cf:8e:57:c8:cb:4f:ec:64:31:c8:3b:52:c6: a3:8f:8d:ac:15:eb:d9:c3:58:d2:22:55:b7:33:4f: 06:c9:90:7c:47:3b:0d:7d:a9:4e:00:d6:6a:90:b4: b2:a9:9c:13:7c:58:74:c9:ec:99:36:cc:0b:7c:55: fb:52:ad:dc:fd:5f:6f:77:d9:64:70:24:f8:22:ef: 34:33:38:21:15:d1:91:81:76:97:c3:59:bf:16:98: e9:7b:fd:22:74:79:89:10:47:eb:f0:5d:0a:3f:b5: 28:84:47:9b:b7:16:15:c0:12:ef:a9:f8:ae:cd:31: ca:e0:19:6d:9d:8c:e5:5d:bd:59:66:3b:0b:7e:d5: 63:a8:5b:bc:e1:82:20:e4:ef:3d:9e:17:23:1a:ae: c4:4a:58:27:38:db:c4:02:74:1e:f3:23:6c:b1:59: df:c4:f9:1c:a1:19:4e:36:d0:6b:8d:ce:34:dc:39: 12:3b:77:23:1f:ff:a4:2c:36:2c:c7:d6:72:4f:e4: 33:e2:95:ca:f3:55:b4:4a:ba:d2:87:6d:ee:8d:98: 22:5d:40:65:33:0d:75:34:44:d5:d1:60:23:84:66: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:54:5F:BF:09:38:08:B8:BC:B2:31:81:7A:80:C3:99:C7:52:13:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.147.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b4:f3:8c:56:4f:05:dc:5c:be:5c:ce:97:c9:c6:48:63:2b: 92:14:24:4c:8e:85:fb:b6:4b:63:c7:f5:40:b2:ae:54:6c:1a: 80:7c:eb:29:df:eb:e7:b1:31:9c:3d:1f:9b:64:63:d8:33:40: cd:36:63:34:f9:ac:c1:d3:69:31:83:5f:c7:8c:ae:2a:31:51: 1c:66:11:20:35:16:03:32:cb:2b:27:64:03:18:72:02:bb:e8: 15:2e:b5:79:33:33:a6:f5:c7:99:a0:12:e0:8a:55:9b:ca:51: 21:0a:78:8f:dc:87:59:e0:9b:81:3b:ba:f5:34:7a:45:04:ff: fe:5c:65:4d:51:ac:ed:bc:14:f0:53:cc:ac:40:da:8c:7d:63: bc:34:06:3f:57:bb:31:98:b7:b3:bb:54:65:36:10:eb:49:89: 65:93:8f:cd:aa:3c:d5:57:6b:16:9b:5c:50:70:65:e8:7a:94: ea:73:5b:93:bc:25:d6:89:f4:29:0d:41:34:c4:0a:4d:9a:dc: fc:e8:ca:00:0a:60:41:f8:f7:99:37:58:ef:ae:17:55:ed:da: 52:a5:d4:76:0e:8f:be:4c:b5:f5:99:f6:87:2b:88:e4:65:4e: a2:4a:ae:ac:af:e5:91:35:03:d2:dd:62:22:d0:8e:c7:17:68: 5c:8d:63:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0UGaYcyoXnj2M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MzlkMDk0N2ItYzE2Ni00OWM3LWJhMjAtNWJiMzU2M2U2YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO0P4E1nQar2eEcOxV0edk1AyJh+d+dC2MFG ZjP5P8+OV8jLT+xkMcg7Usajj42sFevZw1jSIlW3M08GyZB8RzsNfalOANZqkLSy qZwTfFh0yeyZNswLfFX7Uq3c/V9vd9lkcCT4Iu80MzghFdGRgXaXw1m/Fpjpe/0i dHmJEEfr8F0KP7UohEebtxYVwBLvqfiuzTHK4BltnYzlXb1ZZjsLftVjqFu84YIg 5O89nhcjGq7ESlgnONvEAnQe8yNssVnfxPkcoRlONtBrjc403DkSO3cjH/+kLDYs x9ZyT+Qz4pXK81W0SrrSh23ujZgiXUBlMw11NETV0WAjhGYn4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONUX78JOAi4vLIxgXqAw5nHUhMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU5MDBhYmMtOTczNS0z ODJlLTllNmQtOWViY2QxNWRkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMpOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq084xWTwXcXL5czpfJxkhjK5IUJEyOhfu2S2PH9UCyrlRsGoB86ynf 6+exMZw9H5tkY9gzQM02YzT5rMHTaTGDX8eMrioxURxmESA1FgMyyysnZAMYcgK7 6BUutXkzM6b1x5mgEuCKVZvKUSEKeI/ch1ngm4E7uvU0ekUE//5cZU1RrO28FPBT zKxA2ox9Y7w0Bj9XuzGYt7O7VGU2EOtJiWWTj82qPNVXaxabXFBwZeh6lOpzW5O8 JdaJ9CkNQTTECk2a3PzoygAKYEH495k3WO+uF1Xt2lKl1HYOj75MtfWZ9ocriORl TqJKrqyv5ZE1A9LdYiLQjscXaFyNYyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:27 2025 by rpki-client