$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3096847e-9c44-389f-941b-0c00a2e7b1f4.roa File: 3096847e-9c44-389f-941b-0c00a2e7b1f4.roa (raw, json) Hash identifier: 1WaJ9ImKhBgilnB/X63av0ajKMUtmiHTtxj7fd3rRiI= Subject key identifier: 14:66:FD:4A:E1:C3:28:9F:96:AB:9E:CE:49:96:0F:A4:23:88:5C:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BB45D36D2C5C2F04EBA09CE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3096847e-9c44-389f-941b-0c00a2e7b1f4.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 33651 IP address blocks: 50.235.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:36:d2:c5:c2:f0:4e:ba:09:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=a4ef1df7-cc05-4824-bb95-6c27127e1c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:3b:d0:f6:5d:e9:e6:b4:97:5c:fa:bf:00: 77:90:20:d6:13:06:8d:a4:c2:4c:54:c6:f6:20:9d: 6e:55:9c:da:c6:24:c7:a6:18:60:ee:70:df:fb:7f: e1:a2:f7:c2:d7:1f:1b:c8:fa:4b:e8:91:ed:61:cf: 03:3b:44:51:d5:96:83:8a:da:d4:ee:e8:0b:02:3a: fc:f6:0f:29:31:3b:30:b5:f4:db:c9:ca:f0:2d:76: 5e:aa:99:27:41:09:a4:fb:1a:f1:06:a9:97:55:c8: 66:b4:d5:70:23:16:98:ec:5e:13:4d:a6:0e:22:b6: 34:39:aa:83:d5:57:53:63:a9:23:21:6b:e3:ed:76: 85:75:5e:a6:ee:4b:6d:0b:b2:20:7c:d8:e0:db:03: ea:70:70:ea:2a:c7:cc:03:ad:3a:c2:f5:ac:db:ab: 42:6b:5b:d3:73:a1:86:14:66:86:95:c9:4e:67:8b: 1b:78:bb:62:94:0f:d2:2a:a8:6a:d2:7d:78:7d:9c: 38:bd:14:e9:63:f5:56:88:76:26:2b:b3:8b:d8:4e: ac:da:02:2a:61:a3:8a:18:1e:e3:2a:4f:fe:f0:9d: 0c:05:e4:82:47:28:ea:b2:1a:8b:73:ec:b3:d5:f4: cb:80:20:8d:dc:73:4b:89:ca:66:fc:a7:c6:ce:f5: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:66:FD:4A:E1:C3:28:9F:96:AB:9E:CE:49:96:0F:A4:23:88:5C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3096847e-9c44-389f-941b-0c00a2e7b1f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.235.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ab:60:6e:ed:ed:0b:d6:3e:09:4b:1f:2c:50:93:d3:46:9d: a9:27:87:04:ce:88:96:63:82:e3:f3:3e:f6:24:46:c9:8b:aa: 52:1f:81:65:39:33:8f:07:0f:9a:34:e2:bb:68:c6:2d:83:6f: 37:08:b8:d5:09:c9:b3:91:48:ef:35:66:00:94:b9:61:c5:94: dd:ad:bc:05:35:bc:6f:21:34:52:1e:ce:7c:55:42:a3:f3:47: ac:db:d7:0c:2d:63:44:74:51:63:b4:5c:05:f6:e1:c7:94:71: 9b:c9:3a:73:a5:b3:44:96:1d:bc:c0:e5:4c:a5:fc:95:73:dd: d0:47:87:16:ab:6b:69:6d:7a:46:03:7b:84:c2:02:c5:5f:47: 40:09:7a:de:e6:a5:95:26:04:53:b2:d9:54:b0:75:08:b2:3a: 20:61:50:4a:9f:b4:ce:2d:c0:b5:5f:fb:db:aa:a7:6f:b5:30: 4a:b6:0c:c1:a3:30:9d:4b:a7:87:dc:30:71:1e:5d:42:25:62: d7:20:a6:0f:ee:e2:d4:fa:88:d5:74:52:a1:44:3f:fc:ed:e8: 50:94:f5:74:75:dc:9f:3b:6b:e4:f4:39:98:83:ef:28:91:68: 59:5c:bf:41:cb:17:b2:13:b6:ce:35:c7:e4:d5:f4:5c:22:00: 7a:19:3d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTbSxcLwTroJzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YTRlZjFkZjctY2MwNS00ODI0LWJiOTUtNmMyNzEyN2UxYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQk70PZd6ea0l1z6vwB3kCDWEwaNpMJMVMb2 IJ1uVZzaxiTHphhg7nDf+3/hovfC1x8byPpL6JHtYc8DO0RR1ZaDitrU7ugLAjr8 9g8pMTswtfTbycrwLXZeqpknQQmk+xrxBqmXVchmtNVwIxaY7F4TTaYOIrY0OaqD 1VdTY6kjIWvj7XaFdV6m7kttC7IgfNjg2wPqcHDqKsfMA606wvWs26tCa1vTc6GG FGaGlclOZ4sbeLtilA/SKqhq0n14fZw4vRTpY/VWiHYmK7OL2E6s2gIqYaOKGB7j Kk/+8J0MBeSCRyjqshqLc+yz1fTLgCCN3HNLicpm/KfGzvXghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRm/UrhwyiflquezkmWD6QjiFyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzA5Njg0N2UtOWM0NC0z ODlmLTk0MWItMGMwMGEyZTdiMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMusUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFirYG7t7QvWPglLHyxQk9NGnaknhwTOiJZjguPzPvYkRsmLqlIfgWU5 M48HD5o04rtoxi2DbzcIuNUJybORSO81ZgCUuWHFlN2tvAU1vG8hNFIeznxVQqPz R6zb1wwtY0R0UWO0XAX24ceUcZvJOnOls0SWHbzA5Uyl/JVz3dBHhxara2ltekYD e4TCAsVfR0AJet7mpZUmBFOy2VSwdQiyOiBhUEqftM4twLVf+9uqp2+1MEq2DMGj MJ1Lp4fcMHEeXUIlYtcgpg/u4tT6iNV0UqFEP/zt6FCU9XR13J87a+T0OZiD7yiR aFlcv0HLF7ITts41x+TV9FwiAHoZPWc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:04:23 2025 by rpki-client