$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa File: 8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa (raw, json) Hash identifier: xO68oCYIGW5rUTaM3xOQJDPlSCmgLb2APisv4njpgxY= Subject key identifier: 97:19:17:1F:4C:DA:46:BF:00:45:0F:C0:A5:CE:F8:86:A0:32:71:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BAEC7C447C9086772F34E9DA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 33657 IP address blocks: 50.144.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c4:47:c9:08:67:72:f3:4e:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=cf3eb1ed-cadd-4ee7-9e00-4386b5f84fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:38:a8:4b:23:43:62:3a:c2:08:2c:3e:45: bf:57:cd:44:21:3c:8c:0d:75:01:1d:00:3a:20:d2: b3:30:ca:bf:68:9b:5c:79:66:84:b7:9a:cb:e3:80: a3:17:43:50:90:60:2d:6b:62:5e:76:56:a3:08:e4: e5:80:9c:9b:87:4f:e4:8e:ae:e9:9d:84:fb:c9:af: 41:7a:f6:be:40:a6:c9:13:15:01:8d:f9:fb:4f:2c: 19:c8:4d:70:f6:83:d9:54:bc:93:de:18:08:28:eb: d6:7b:a3:ef:41:0e:bd:ab:22:09:95:c3:07:b3:48: 1a:1a:c5:bf:59:13:b3:72:f9:6e:18:0f:98:4f:7e: a0:38:a3:cc:70:48:8d:35:77:13:af:0e:7c:70:63: b5:ca:ee:f7:e6:22:1f:3e:de:92:b1:f8:e9:a6:5e: db:ea:a3:c5:ca:1e:e3:01:91:12:79:b0:39:cd:2b: 35:20:c5:f8:22:9e:da:f1:70:3f:f7:e4:38:91:7c: a0:46:7e:95:72:6c:29:e9:fe:95:93:fe:43:0b:92: 43:57:a7:a4:0d:a9:70:4d:93:60:24:33:bb:8c:b0: d9:7b:d8:54:46:8b:47:cd:0b:09:34:97:3c:34:80: 46:60:7e:c2:14:ef:32:0b:3c:98:3d:45:92:0e:42: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:19:17:1F:4C:DA:46:BF:00:45:0F:C0:A5:CE:F8:86:A0:32:71:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.144.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ca:90:3b:7e:62:86:2d:6a:2b:31:48:d6:eb:f5:8f:07:09: 43:f3:68:49:bc:fc:40:4f:0b:c9:45:40:da:16:45:86:b3:0b: ef:b0:9e:51:fa:7f:30:48:8d:12:e8:0a:74:df:36:22:5f:9e: 20:74:a1:34:4b:5c:97:8b:af:66:3b:d7:e8:cc:a4:a7:b1:fa: ca:ef:f9:66:0e:75:fb:b1:07:ae:d4:9d:fb:c8:37:0f:65:98: 9f:57:76:18:13:c4:76:a2:49:7d:47:45:94:67:61:17:21:24: 06:0c:bb:6d:d3:40:4f:ea:ff:42:43:f2:ee:b1:29:d0:be:1b: fe:83:f5:42:1e:0a:26:4e:96:62:c6:d0:4e:7a:cf:ac:3d:33: 31:66:24:aa:24:ab:d7:39:cc:55:8c:ec:80:c8:96:19:e3:e5: ff:95:11:53:6b:d7:82:5f:9c:ff:9e:88:59:4b:dc:42:27:8f: a2:79:4b:43:8f:b2:6e:fd:f2:d3:1c:7d:84:16:a6:3b:45:55: ea:3d:43:51:89:d4:4f:fe:53:f1:bb:c9:8c:9c:0a:9b:bd:2d: c6:f6:48:4e:eb:cb:70:13:c9:46:04:38:4c:ec:69:28:57:54: 8c:96:0b:95:aa:86:c9:2c:f8:e6:e4:7d:04:3c:a6:3f:02:be: e4:aa:ed:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8RHyQhncvNOnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2YzZWIxZWQtY2FkZC00ZWU3LTllMDAtNDM4NmI1Zjg0ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSU4qEsjQ2I6wggsPkW/V81EITyMDXUBHQA6 INKzMMq/aJtceWaEt5rL44CjF0NQkGAta2JedlajCOTlgJybh0/kjq7pnYT7ya9B eva+QKbJExUBjfn7TywZyE1w9oPZVLyT3hgIKOvWe6PvQQ69qyIJlcMHs0gaGsW/ WROzcvluGA+YT36gOKPMcEiNNXcTrw58cGO1yu735iIfPt6Ssfjppl7b6qPFyh7j AZESebA5zSs1IMX4Ip7a8XA/9+Q4kXygRn6Vcmwp6f6Vk/5DC5JDV6ekDalwTZNg JDO7jLDZe9hURotHzQsJNJc8NIBGYH7CFO8yCzyYPUWSDkJnTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcZFx9M2ka/AEUPwKXO+IagMnF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE3YTNjM2UtNjNjZi0z MjU5LWEyZjMtNTA4NmE4NDViOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMpCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrKkDt+YoYtaisxSNbr9Y8HCUPzaEm8/EBPC8lFQNoWRYazC++wnlH6 fzBIjRLoCnTfNiJfniB0oTRLXJeLr2Y71+jMpKex+srv+WYOdfuxB67UnfvINw9l mJ9XdhgTxHaiSX1HRZRnYRchJAYMu23TQE/q/0JD8u6xKdC+G/6D9UIeCiZOlmLG 0E56z6w9MzFmJKokq9c5zFWM7IDIlhnj5f+VEVNr14JfnP+eiFlL3EInj6J5S0OP sm798tMcfYQWpjtFVeo9Q1GJ1E/+U/G7yYycCpu9Lcb2SE7ry3ATyUYEOEzsaShX VIyWC5Wqhsks+ObkfQQ8pj8CvuSq7YQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:06 2025 by rpki-client