$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7e86d8b-9cfd-3804-827e-0d76fa4453ae.roa File: c7e86d8b-9cfd-3804-827e-0d76fa4453ae.roa (raw, json) Hash identifier: 4Mjcn8hzoH6Zj7Vy7N2vKMKMNy/DK0DMBcD7xBDfCGs= Subject key identifier: 1C:D4:45:A8:79:0C:D9:26:08:E6:3D:A4:DC:06:62:F4:10:A7:5D:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BB88D58AAB3741AEF5112CB48 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7e86d8b-9cfd-3804-827e-0d76fa4453ae.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 33659 IP address blocks: 50.153.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:58:aa:b3:74:1a:ef:51:12:cb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b4fdff9b-38ce-45d0-acb1-c3aee2681cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:7d:69:1c:2b:8b:a5:b7:f6:da:2c:8a:43: 8d:c4:0b:eb:e4:be:2e:3c:b1:9e:a7:42:99:20:8c: 05:cc:c7:0f:5f:74:30:4e:66:e4:59:be:e3:28:20: fb:8c:81:e1:55:ef:5b:08:67:88:2c:20:f8:77:df: 62:98:46:17:4e:7c:8e:20:a4:cb:1c:2c:d0:90:4c: 54:48:30:a9:80:6b:4a:14:ba:a8:f5:4f:cc:89:6f: e8:c9:be:26:e5:b9:64:37:a8:05:0c:6b:c1:ba:fc: f7:be:0d:8e:34:af:df:c1:dc:43:80:54:36:40:e3: b2:39:d5:8f:cc:46:52:a7:c9:8d:90:da:97:7d:01: 31:68:12:ab:16:dc:5b:08:e9:76:44:95:e3:11:4e: 3a:47:56:06:8c:c4:7c:c3:c2:1c:8e:9d:64:d5:20: 4a:10:58:bc:71:61:4c:da:89:f0:2c:67:b1:c0:7b: 8e:6d:59:a9:b2:78:35:e1:eb:86:12:2b:ce:9f:71: e9:d4:20:41:32:e9:8c:4f:d4:b7:9d:7a:c5:3d:b9: 35:ab:a8:bf:08:42:b6:31:1e:b8:9c:9a:8a:7a:7e: 56:50:07:91:ad:d5:41:2f:44:ee:1b:d7:4e:fe:72: ac:01:ec:81:1b:b2:17:48:13:9c:5c:f5:9b:a6:48: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:45:A8:79:0C:D9:26:08:E6:3D:A4:DC:06:62:F4:10:A7:5D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7e86d8b-9cfd-3804-827e-0d76fa4453ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:53:b2:cc:9d:4c:bf:7c:5c:b7:33:97:90:04:a7:32:8a:8c: 24:14:fb:94:db:f7:b8:64:54:19:a9:9f:ec:b3:0b:d5:d4:bb: 5e:69:4f:da:06:44:64:46:ca:97:65:18:e3:0b:7d:37:d6:18: 38:48:72:4a:f4:37:ca:16:6e:4a:5f:d3:14:19:46:72:4b:36: 45:f0:c9:27:e9:cf:a2:7e:4c:c6:20:d2:b8:f8:4f:28:6d:32: 7e:72:10:81:9b:d6:6a:66:25:13:db:b3:c8:11:e5:be:6b:2e: 04:20:b0:63:57:e0:e7:96:93:f1:55:7a:cd:68:51:be:ef:f9: 0a:4c:d6:63:a8:be:9d:04:60:65:46:40:2f:49:76:f2:15:3b: 33:b2:31:13:21:0a:21:ea:c6:f7:ac:34:93:41:88:28:61:8d: d3:c1:b8:8a:23:bb:9a:be:a1:45:98:f2:0e:fe:da:3e:8a:66: 25:41:65:f4:fd:b0:16:c2:88:17:87:b4:97:be:f2:32:46:cc: 60:06:83:0a:87:4c:d9:7a:ef:09:23:c7:18:b6:a2:5d:9d:e2: 22:c8:21:d8:2b:08:9c:ac:8b:40:61:4a:e2:72:67:14:09:b6: a1:05:a4:6c:ac:86:6f:65:ee:06:22:1a:77:cb:8d:b6:3a:92: cf:08:b8:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jViqs3Qa71ESy0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjRmZGZmOWItMzhjZS00NWQwLWFjYjEtYzNhZWUyNjgxY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitZ9aRwri6W39tosikONxAvr5L4uPLGep0KZ IIwFzMcPX3QwTmbkWb7jKCD7jIHhVe9bCGeILCD4d99imEYXTnyOIKTLHCzQkExU SDCpgGtKFLqo9U/MiW/oyb4m5blkN6gFDGvBuvz3vg2ONK/fwdxDgFQ2QOOyOdWP zEZSp8mNkNqXfQExaBKrFtxbCOl2RJXjEU46R1YGjMR8w8Icjp1k1SBKEFi8cWFM 2onwLGexwHuObVmpsng14euGEivOn3Hp1CBBMumMT9S3nXrFPbk1q6i/CEK2MR64 nJqKen5WUAeRrdVBL0TuG9dO/nKsAeyBG7IXSBOcXPWbpkgPyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzURah5DNkmCOY9pNwGYvQQp104MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzdlODZkOGItOWNmZC0z ODA0LTgyN2UtMGQ3NmZhNDQ1M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJTssydTL98XLczl5AEpzKKjCQU+5Tb97hkVBmpn+yzC9XUu15pT9oG RGRGypdlGOMLfTfWGDhIckr0N8oWbkpf0xQZRnJLNkXwySfpz6J+TMYg0rj4Tyht Mn5yEIGb1mpmJRPbs8gR5b5rLgQgsGNX4OeWk/FVes1oUb7v+QpM1mOovp0EYGVG QC9JdvIVOzOyMRMhCiHqxvesNJNBiChhjdPBuIoju5q+oUWY8g7+2j6KZiVBZfT9 sBbCiBeHtJe+8jJGzGAGgwqHTNl67wkjxxi2ol2d4iLIIdgrCJysi0BhSuJyZxQJ tqEFpGyshm9l7gYiGnfLjbY6ks8IuDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:44 2025 by rpki-client