$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa File: 849e8e70-ea72-3396-b54f-a0fa910d8710.roa (raw, json) Hash identifier: mXNuHISYuxuhvcHzIppszDhj/qrucFr083ZmtW1qs+I= Subject key identifier: 5F:8B:F5:DA:08:7C:56:56:B6:E7:F0:7E:59:AA:61:6F:AB:13:7A:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BAD62616303CEF7C044B95A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 184.50.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:61:63:03:ce:f7:c0:44:b9:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e38ad987-cb06-4fc2-bbfa-ff9af7c6ed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fd:0b:4f:b6:a0:3d:8b:9b:74:e2:f4:bf:69: 0f:36:4a:a8:dd:38:d8:89:44:6c:72:fc:dd:73:16: 42:4e:fa:54:d5:27:96:24:dd:90:d0:a5:95:51:de: 1b:5d:4e:bf:f9:d8:0c:8b:2e:63:5e:84:d0:87:b3: 59:46:0d:cb:b5:09:df:e9:bb:60:18:93:99:9a:5b: 26:48:60:49:17:06:96:47:61:0b:27:0d:1b:5c:36: 63:73:f4:fc:b0:c1:01:85:90:74:35:0f:60:4e:83: 0a:2b:48:48:1f:c6:26:dd:9a:4b:54:70:f9:8e:23: 67:e7:b9:91:8a:43:e6:45:ef:da:e5:b9:27:72:f5: af:11:62:bf:b3:04:69:34:96:8a:a3:11:29:2f:14: 00:43:a6:cd:8e:94:f9:8e:e7:ab:44:53:ca:d1:09: 36:62:d4:85:45:8c:af:10:f9:97:fa:bf:21:bd:61: 8b:cf:06:74:93:85:cc:74:98:c4:e8:62:37:37:27: 77:fa:18:97:b9:ac:19:0f:d3:05:a9:0e:83:b7:e4: 6a:5d:b0:ef:8c:ba:02:a4:07:fb:88:6f:7b:a3:56: d3:8d:d1:26:10:86:dc:89:35:90:bc:77:cb:03:38: f4:28:a4:99:9e:2e:62:4c:a0:1a:4c:be:2b:52:f1: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:F5:DA:08:7C:56:56:B6:E7:F0:7E:59:AA:61:6F:AB:13:7A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.50.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:24:bd:1c:3c:96:c9:38:88:e0:66:d0:2b:f6:6d:cf:3a:78: 2d:80:1a:36:63:0b:5a:9d:24:86:87:c1:8f:b0:02:79:f5:23: 87:82:e8:38:77:c8:59:fc:b0:66:4b:3f:35:78:9a:09:38:d6: b8:17:c4:0a:ae:09:7d:95:ed:09:7d:2b:b4:8b:00:eb:ec:c4: fd:d7:c6:81:b4:ea:79:ed:a3:6a:08:3f:78:58:27:05:b5:7c: d9:8c:c5:d9:f2:b8:a0:48:77:01:81:7b:a9:ef:c5:93:72:4f: 91:ce:09:79:11:2e:19:2a:a0:55:6c:05:19:c6:4f:a1:42:ee: d6:36:9a:45:27:83:a7:31:9b:14:a5:67:a4:14:69:3d:34:c8: f5:ac:bd:b3:aa:bf:e7:9c:4d:cf:cb:4a:fd:43:14:12:44:3f: 8a:6a:b7:38:b4:cf:e3:34:f1:50:66:59:f3:a2:ba:9b:37:35: 59:f9:59:fa:b7:50:a1:d8:2c:90:ee:ad:63:03:fc:77:b1:c4: a7:a3:97:77:3a:07:74:84:7e:75:db:98:50:34:dd:b1:4c:c0: e2:52:e7:72:19:b5:1b:5d:01:2a:ee:21:9e:09:97:f9:a1:6f: 81:a0:32:dd:05:ec:68:d4:bf:52:72:ae:37:27:cd:24:1a:f0: 02:33:fa:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmFjA873wES5WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTM4YWQ5ODctY2IwNi00ZmMyLWJiZmEtZmY5YWY3YzZlZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP0LT7agPYubdOL0v2kPNkqo3TjYiURscvzd cxZCTvpU1SeWJN2Q0KWVUd4bXU6/+dgMiy5jXoTQh7NZRg3LtQnf6btgGJOZmlsm SGBJFwaWR2ELJw0bXDZjc/T8sMEBhZB0NQ9gToMKK0hIH8Ym3ZpLVHD5jiNn57mR ikPmRe/a5bkncvWvEWK/swRpNJaKoxEpLxQAQ6bNjpT5juerRFPK0Qk2YtSFRYyv EPmX+r8hvWGLzwZ0k4XMdJjE6GI3Nyd3+hiXuawZD9MFqQ6Dt+RqXbDvjLoCpAf7 iG97o1bTjdEmEIbciTWQvHfLAzj0KKSZni5iTKAaTL4rUvFwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+L9doIfFZWtufwflmqYW+rE3rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5ZThlNzAtZWE3Mi0z Mzk2LWI1NGYtYTBmYTkxMGQ4NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuDLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACckvRw8lsk4iOBm0Cv2bc86eC2AGjZjC1qdJIaHwY+wAnn1I4eC6Dh3 yFn8sGZLPzV4mgk41rgXxAquCX2V7Ql9K7SLAOvsxP3XxoG06nnto2oIP3hYJwW1 fNmMxdnyuKBIdwGBe6nvxZNyT5HOCXkRLhkqoFVsBRnGT6FC7tY2mkUng6cxmxSl Z6QUaT00yPWsvbOqv+ecTc/LSv1DFBJEP4pqtzi0z+M08VBmWfOiups3NVn5Wfq3 UKHYLJDurWMD/HexxKejl3c6B3SEfnXbmFA03bFMwOJS53IZtRtdASruIZ4Jl/mh b4GgMt0F7GjUv1JyrjcnzSQa8AIz+qo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:25 2025 by rpki-client