$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c6f0b5-ae05-3eff-b280-85405905c375.roa File: b3c6f0b5-ae05-3eff-b280-85405905c375.roa (raw, json) Hash identifier: 6sxon4EbAslQurWNeRf2YdjWmvD/U8/XYLIvzesksTw= Subject key identifier: 33:F9:25:9A:90:05:0B:15:33:A8:AE:8B:36:FF:47:1A:1E:68:54:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BB45D3C496C16AAEAAEC5BA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c6f0b5-ae05-3eff-b280-85405905c375.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 33657 IP address blocks: 50.236.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3c:49:6c:16:aa:ea:ae:c5:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=6b3940a3-2f8e-4147-a748-4399c4ce445d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:d6:e4:ef:aa:ba:8b:5f:5b:8e:c5:4f:a0: de:46:48:d8:1c:e7:71:14:25:01:af:50:2a:58:59: 24:20:67:b9:c0:9d:0b:61:db:b9:c3:8d:06:78:2b: 10:bd:f4:75:ea:47:36:b1:c2:ce:51:68:8b:33:5f: 45:37:4e:f9:98:ce:4d:1a:92:5a:12:9b:7b:8e:19: 86:6b:bc:a6:92:df:60:1a:cb:a9:d3:0b:89:40:12: 8d:b8:d9:4e:2e:45:0e:00:2d:04:72:b7:96:dc:84: 60:ff:60:93:d4:95:17:16:ec:7a:de:3b:5a:a9:13: 61:53:b5:16:a6:f2:7c:6d:b2:35:b5:1b:9e:3a:62: ea:3c:2e:36:e2:31:56:30:04:38:1a:fd:4b:63:3f: 8f:f6:94:1b:45:0d:90:6d:9b:02:ee:fa:71:16:22: 21:28:c4:cc:52:8c:7d:6f:c5:60:93:a7:2f:eb:c8: 1a:68:af:0b:0b:a4:18:c2:4e:6d:9e:be:9d:34:ad: 70:ae:74:53:71:39:43:92:98:f8:0a:01:67:43:2e: d5:69:2c:80:d5:a7:8c:eb:15:8a:0d:f8:c1:3b:c9: 78:33:68:c7:4f:82:6e:da:1a:5b:9f:fe:41:8c:5f: 3c:86:08:f1:dc:71:77:92:c7:97:e1:11:d3:56:90: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:25:9A:90:05:0B:15:33:A8:AE:8B:36:FF:47:1A:1E:68:54:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c6f0b5-ae05-3eff-b280-85405905c375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.236.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:af:9a:af:12:60:04:10:65:7c:39:19:7a:5d:4b:3c:d2:d4: 30:a8:fc:85:39:6a:19:fd:59:58:f8:ad:56:52:4a:f2:a3:36: 50:37:56:06:e3:66:50:1f:ee:ea:ad:c9:23:18:7f:06:7a:77: cf:54:36:3c:ef:dd:64:a0:10:69:16:01:2c:d2:cb:b4:2c:20: 8f:2f:c1:97:8b:ed:33:6f:11:a6:40:6c:4f:97:9f:eb:32:b1: 22:47:70:eb:38:44:ba:b2:04:a5:c4:b2:25:ac:c1:5c:b3:32: 0b:71:61:56:67:e0:18:4f:1e:c2:85:67:38:5a:f5:ff:37:93: d0:ee:53:49:70:a4:e0:01:79:38:2f:b3:a1:f6:62:e6:33:50: f4:43:f5:d5:ee:0e:b6:98:e3:6d:aa:88:86:52:1c:de:43:12: 2c:16:5d:4f:e6:ee:00:3e:fe:50:91:cb:c3:f9:34:21:de:66: 17:37:97:40:5b:9f:36:c3:4b:86:75:58:4f:19:48:8e:c8:78: 8e:b9:5d:84:1b:17:a1:e9:ec:3c:6a:45:96:61:42:dc:47:f3: 21:f8:6d:d0:f0:e1:60:ea:85:5a:79:72:eb:39:53:3d:58:b4: 89:b0:61:85:5e:b2:9b:3d:03:f3:8e:41:47:00:a6:11:2b:bb: d6:99:e1:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTxJbBaq6q7FugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NmIzOTQwYTMtMmY4ZS00MTQ3LWE3NDgtNDM5OWM0Y2U0NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/W5O+quotfW47FT6DeRkjYHOdxFCUBr1Aq WFkkIGe5wJ0LYdu5w40GeCsQvfR16kc2scLOUWiLM19FN075mM5NGpJaEpt7jhmG a7ymkt9gGsup0wuJQBKNuNlOLkUOAC0EcreW3IRg/2CT1JUXFux63jtaqRNhU7UW pvJ8bbI1tRueOmLqPC424jFWMAQ4Gv1LYz+P9pQbRQ2QbZsC7vpxFiIhKMTMUox9 b8Vgk6cv68gaaK8LC6QYwk5tnr6dNK1wrnRTcTlDkpj4CgFnQy7VaSyA1aeM6xWK DfjBO8l4M2jHT4Ju2hpbn/5BjF88hgjx3HF3kseX4RHTVpCSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP5JZqQBQsVM6iuizb/RxoeaFTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNjNmYwYjUtYWUwNS0z ZWZmLWIyODAtODU0MDU5MDVjMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIevmq8SYAQQZXw5GXpdSzzS1DCo/IU5ahn9WVj4rVZSSvKjNlA3Vgbj ZlAf7uqtySMYfwZ6d89UNjzv3WSgEGkWASzSy7QsII8vwZeL7TNvEaZAbE+Xn+sy sSJHcOs4RLqyBKXEsiWswVyzMgtxYVZn4BhPHsKFZzha9f83k9DuU0lwpOABeTgv s6H2YuYzUPRD9dXuDraY422qiIZSHN5DEiwWXU/m7gA+/lCRy8P5NCHeZhc3l0Bb nzbDS4Z1WE8ZSI7IeI65XYQbF6Hp7DxqRZZhQtxH8yH4bdDw4WDqhVp5cus5Uz1Y tImwYYVesps9A/OOQUcAphEru9aZ4QU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:19 2025 by rpki-client