$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa File: 85900abc-9735-382e-9e6d-9ebcd15ddfec.roa (raw, json) Hash identifier: xYDGjLUaPYxCOpb59Ga9DBFPOym7407chunZElmAwBM= Subject key identifier: BB:AB:39:95:D4:7C:0F:36:B3:5A:A1:65:34:18:56:A1:A4:E4:FC:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BB88D456E42239F7F24566F70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 33652 IP address blocks: 50.147.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:45:6e:42:23:9f:7f:24:56:6f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=1a0f5231-8d57-4840-ab5d-f07d9034b531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:75:d8:6f:90:69:b6:ed:33:74:1e:78:17: 88:53:a6:e2:9f:19:f1:04:5c:8a:46:1d:b4:6b:8c: 9a:7c:04:ce:05:dc:17:0e:cd:5c:36:df:69:44:51: ae:a5:5c:a6:40:2d:8c:8c:f1:8a:ed:f0:75:a5:c0: 84:bc:32:04:b9:b5:74:40:af:70:7a:1f:9a:72:24: d3:58:7e:08:81:dd:95:fc:c8:66:87:6f:79:8b:b5: 85:ac:2a:43:4b:9e:e0:d6:95:6a:e0:ee:44:56:3b: 79:ed:8b:05:47:9f:05:ef:d2:b5:4a:e7:a4:bb:f4: 79:db:b1:8e:28:18:f5:40:5d:f9:d4:db:06:f4:af: bb:c4:50:45:fc:2c:c1:9b:98:48:7e:f4:89:32:af: 59:c9:91:28:62:61:83:25:f2:b8:e9:a7:d6:91:27: 96:7e:cc:00:c0:bd:47:d7:5a:e1:a4:ff:a3:71:10: 55:64:1c:45:7d:1d:99:5b:43:23:32:c3:06:e8:3d: 61:95:95:8c:9d:93:9f:5c:04:22:98:91:fe:41:2b: dd:e8:12:1e:01:ed:71:8b:d6:71:43:1e:0a:21:8e: 2d:39:b5:bd:a5:07:e7:74:27:f5:b4:73:0b:89:70: 33:0b:bc:48:5c:02:18:6a:24:ca:d4:db:f6:00:5f: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AB:39:95:D4:7C:0F:36:B3:5A:A1:65:34:18:56:A1:A4:E4:FC:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85900abc-9735-382e-9e6d-9ebcd15ddfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.147.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3a:00:62:9e:cc:04:a7:27:b4:94:7d:3b:b8:ab:96:91:17: 7f:93:48:7d:63:63:80:c7:78:52:11:ad:da:da:25:f4:6d:e7: 8f:31:e3:23:71:72:e7:c8:7a:96:ca:e8:4b:d5:fc:ed:29:00: 7c:9d:5b:4c:12:d7:fb:3f:67:85:ef:26:0b:8a:7f:89:e0:68: 59:af:6c:83:3f:82:9c:94:93:dd:5c:2c:43:88:03:7c:06:35: 50:30:a4:94:80:d2:96:3f:92:cd:37:ff:3b:31:d9:e0:da:5d: 14:db:e0:11:13:ed:a4:86:f5:bc:a5:a2:67:5c:6c:37:7b:fb: 89:1a:0e:54:1f:26:4e:57:76:52:61:54:48:0a:c1:aa:8a:19: 57:bd:86:fc:ef:ba:83:f9:ae:08:9c:fb:49:92:5b:dc:25:56: 48:4a:c0:0d:42:1b:10:8c:57:45:13:6d:20:f6:74:4d:4d:58: 2b:17:02:64:db:02:a1:5f:6b:61:cf:7b:8a:96:09:fe:77:91: 64:8b:3c:f7:27:24:c1:79:a1:1e:74:fc:4e:c0:39:49:f2:fb: 1a:b9:13:ab:17:01:fa:20:98:fb:52:f7:d3:3a:bf:c3:07:c4: b3:24:54:da:ec:b8:5a:1c:28:47:6b:cb:4e:c9:97:e3:d8:25: 03:a9:28:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUVuQiOffyRWb3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWEwZjUyMzEtOGQ1Ny00ODQwLWFiNWQtZjA3ZDkwMzRiNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxF12G+QabbtM3QeeBeIU6binxnxBFyKRh20 a4yafATOBdwXDs1cNt9pRFGupVymQC2MjPGK7fB1pcCEvDIEubV0QK9weh+aciTT WH4Igd2V/Mhmh295i7WFrCpDS57g1pVq4O5EVjt57YsFR58F79K1Sueku/R527GO KBj1QF351NsG9K+7xFBF/CzBm5hIfvSJMq9ZyZEoYmGDJfK46afWkSeWfswAwL1H 11rhpP+jcRBVZBxFfR2ZW0MjMsMG6D1hlZWMnZOfXAQimJH+QSvd6BIeAe1xi9Zx Qx4KIY4tObW9pQfndCf1tHMLiXAzC7xIXAIYaiTK1Nv2AF9IVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLurOZXUfA82s1qhZTQYVqGk5Pz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU5MDBhYmMtOTczNS0z ODJlLTllNmQtOWViY2QxNWRkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMpOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw6AGKezASnJ7SUfTu4q5aRF3+TSH1jY4DHeFIRrdraJfRt548x4yNx cufIepbK6EvV/O0pAHydW0wS1/s/Z4XvJguKf4ngaFmvbIM/gpyUk91cLEOIA3wG NVAwpJSA0pY/ks03/zsx2eDaXRTb4BET7aSG9bylomdcbDd7+4kaDlQfJk5XdlJh VEgKwaqKGVe9hvzvuoP5rgic+0mSW9wlVkhKwA1CGxCMV0UTbSD2dE1NWCsXAmTb AqFfa2HPe4qWCf53kWSLPPcnJMF5oR50/E7AOUny+xq5E6sXAfogmPtS99M6v8MH xLMkVNrsuFocKEdry07Jl+PYJQOpKM4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:38:23 2025 by rpki-client