$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f0f2bf-36f0-3404-9d7d-f6c7f315c891.roa File: b5f0f2bf-36f0-3404-9d7d-f6c7f315c891.roa (raw, json) Hash identifier: 8a5PcMhK+/IcPo+mcTo2NdWmiI9JWe1Mli6z/pxZX50= Subject key identifier: CD:3C:72:97:CB:AF:12:FC:8E:A2:3E:06:60:49:D6:E9:2A:25:49:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9E8E33057E4DBF72EA700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f0f2bf-36f0-3404-9d7d-f6c7f315c891.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 50.224.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:e8:e3:30:57:e4:db:f7:2e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6461189f-2469-4b73-bcbb-05ee18c540e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a2:c4:99:f7:17:30:0c:73:50:2d:d5:df:bf: 26:2e:fd:ce:a6:dc:51:75:60:83:5a:26:48:db:2f: 44:7d:2a:d4:86:aa:2d:2e:fa:eb:1c:c6:2e:35:30: 86:29:50:8d:fb:59:e5:1c:db:24:93:1e:2e:17:2f: 67:dc:60:13:31:d6:f8:8e:d8:40:c9:a0:4a:3a:c8: ba:d2:74:ba:03:cb:56:19:29:a1:89:ea:f8:3a:ab: d3:78:ea:4e:38:95:75:e6:24:6e:ce:c8:72:d9:84: 2b:2c:f6:59:12:55:95:da:49:f1:45:e5:be:46:e1: b0:3d:5b:8d:0a:5f:86:db:92:e6:1d:cc:ed:c8:9b: 6e:c2:f1:e4:8c:ec:a7:80:cf:95:51:36:26:79:2d: 2b:50:ba:5a:43:0a:6f:36:c7:c7:df:05:89:51:12: 8d:3a:01:bb:be:03:fc:73:ba:dd:be:77:75:7f:69: 98:0e:6f:37:3f:da:be:28:70:6b:c7:0e:c9:e4:e0: d1:f9:12:dd:ff:44:e0:1d:6e:78:7a:a1:90:33:9b: 23:12:de:d7:99:37:ec:47:0d:67:85:25:63:d5:25: d4:78:3b:66:60:b3:8e:74:7d:e7:3f:84:be:49:25: 77:70:e9:78:2c:ae:8b:0f:78:b7:33:90:4d:2d:8c: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3C:72:97:CB:AF:12:FC:8E:A2:3E:06:60:49:D6:E9:2A:25:49:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f0f2bf-36f0-3404-9d7d-f6c7f315c891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.224.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a7:52:4d:2b:45:10:89:be:de:bc:89:ae:af:59:45:43:c9: 8c:b1:0c:02:22:7b:91:26:8e:0c:49:a0:c1:af:f8:83:b1:7f: 1a:7a:42:3c:ff:11:d6:9b:aa:ec:fc:13:4e:38:ce:36:b0:4f: f6:8b:98:48:a3:36:e1:ca:cd:88:0d:dd:09:15:46:5c:6e:91: a2:40:9f:ef:4a:43:90:3b:8f:0d:90:a9:5c:45:fa:a8:40:c7: 64:56:99:f6:ef:ac:9f:f2:70:11:49:86:1c:91:99:9d:6b:6e: a5:dd:1d:63:b1:45:3e:2f:66:d9:07:24:70:09:f6:d3:61:a3: b4:84:46:a9:78:1f:60:73:ba:94:28:b3:e2:b9:42:e5:34:6a: 43:d7:36:7b:69:b0:b2:46:6f:ae:57:83:dd:48:ad:0f:15:c6: 4e:31:d4:27:d9:c7:e2:54:29:a1:24:55:68:6c:20:6b:cb:3c: 7a:26:d6:41:89:cc:52:67:17:db:be:70:29:00:9e:d0:30:fe: 30:69:3e:0a:ce:80:18:e3:36:91:84:7f:6d:dc:e6:93:e3:86: e3:ac:8e:b1:38:e1:63:87:a7:9f:fd:a2:91:ae:b6:21:38:19: ba:e9:4b:89:c2:2a:04:78:1e:61:2f:6c:9a:2b:89:7a:73:1c: 56:ed:32:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uejjMFfk2/cupwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjQ2MTE4OWYtMjQ2OS00YjczLWJjYmItMDVlZTE4YzU0MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6LEmfcXMAxzUC3V378mLv3OptxRdWCDWiZI 2y9EfSrUhqotLvrrHMYuNTCGKVCN+1nlHNskkx4uFy9n3GATMdb4jthAyaBKOsi6 0nS6A8tWGSmhier4OqvTeOpOOJV15iRuzshy2YQrLPZZElWV2knxReW+RuGwPVuN Cl+G25LmHcztyJtuwvHkjOyngM+VUTYmeS0rULpaQwpvNsfH3wWJURKNOgG7vgP8 c7rdvnd1f2mYDm83P9q+KHBrxw7J5ODR+RLd/0TgHW54eqGQM5sjEt7XmTfsRw1n hSVj1SXUeDtmYLOOdH3nP4S+SSV3cOl4LK6LD3i3M5BNLYzoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM08cpfLrxL8jqI+BmBJ1ukqJUmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVmMGYyYmYtMzZmMC0z NDA0LTlkN2QtZjZjN2YzMTVjODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKnUk0rRRCJvt68ia6vWUVDyYyxDAIie5EmjgxJoMGv+IOxfxp6Qjz/ Edabquz8E044zjawT/aLmEijNuHKzYgN3QkVRlxukaJAn+9KQ5A7jw2QqVxF+qhA x2RWmfbvrJ/ycBFJhhyRmZ1rbqXdHWOxRT4vZtkHJHAJ9tNho7SERql4H2BzupQo s+K5QuU0akPXNntpsLJGb65Xg91IrQ8Vxk4x1CfZx+JUKaEkVWhsIGvLPHom1kGJ zFJnF9u+cCkAntAw/jBpPgrOgBjjNpGEf23c5pPjhuOsjrE44WOHp5/9opGutiE4 GbrpS4nCKgR4HmEvbJoriXpzHFbtMvE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:37 2025 by rpki-client