$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/235c99c9-0bf7-385a-8b20-1a5a09af221e.roa File: 235c99c9-0bf7-385a-8b20-1a5a09af221e.roa (raw, json) Hash identifier: 0PBASroruhzSRnZ7tk93Or9j6W6+KTji2B7k2qxrbqI= Subject key identifier: 0A:FA:52:23:9D:61:0C:FA:49:70:69:E1:22:73:F0:C1:C6:3A:7A:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9FCFCCB7F77AA295B9B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/235c99c9-0bf7-385a-8b20-1a5a09af221e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 50.248.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:fc:fc:cb:7f:77:aa:29:5b:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1a8765a0-b810-4eda-839d-a78bad95de1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:fd:45:d0:f6:4e:76:61:48:6a:79:39:50: 53:6c:e6:1f:60:78:51:d7:1f:6b:6c:b0:1d:3e:18: 78:a2:fd:74:2f:80:76:36:7f:d0:d6:52:b2:c9:9c: 59:f1:8f:d0:4e:d4:43:d0:72:9e:ff:c7:5f:32:bc: 23:18:61:0a:bb:b5:ac:3b:4e:0b:79:50:56:2a:2d: 2f:f8:f5:63:45:be:69:24:2b:72:7d:5f:76:c6:b5: e7:b4:86:8a:e7:fb:34:4d:d2:66:4f:ec:27:6c:50: 7a:b4:cb:d9:c2:0b:75:6d:e8:e5:9f:38:53:5a:48: b7:47:cc:f3:e5:dd:b0:9b:ea:01:e0:39:33:2d:f9: b5:29:56:35:a6:76:a4:24:b1:3f:d9:55:3d:cc:f4: 49:83:91:f0:58:30:46:35:ce:89:58:2f:22:a0:67: 1d:37:dd:91:e1:51:7b:88:d8:c3:96:22:71:3a:ca: ac:69:55:eb:a3:8e:28:fe:a5:0b:82:00:37:f3:29: 99:46:db:7e:95:af:7b:96:ad:a8:4d:4f:10:3b:91: 19:69:6b:6c:20:a4:8d:6e:c9:91:18:ae:26:5e:62: b8:c2:7f:82:5e:33:dd:1f:f4:95:08:b6:5e:6b:0c: 00:14:f4:d9:76:d3:b2:da:65:03:12:c9:99:7d:b1: 08:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FA:52:23:9D:61:0C:FA:49:70:69:E1:22:73:F0:C1:C6:3A:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/235c99c9-0bf7-385a-8b20-1a5a09af221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.248.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:35:9b:d9:44:96:1d:e1:61:16:c3:f0:4a:a4:26:55:7a:e7: b8:67:99:e5:e5:45:20:65:f1:41:7f:2e:f4:e9:93:a6:85:81: 91:d0:02:13:e1:76:80:18:ea:0b:bd:71:89:ad:10:f6:43:69: 55:e1:2f:e1:62:ee:9f:cb:e6:da:cf:1d:77:fd:2b:97:54:1c: 53:bc:ac:ba:8f:b1:d8:9f:79:4a:6f:37:93:17:41:15:c9:0b: 2a:e5:17:ad:45:da:ae:42:1d:84:29:50:54:f5:96:38:ab:7f: 97:2d:8a:0f:28:77:ef:00:78:19:f2:2f:08:19:99:85:78:39: 27:53:e7:38:28:13:f7:ec:f0:bb:2e:d7:2d:00:e0:e5:6a:a8: ac:d1:5a:13:6d:10:66:de:73:04:65:0c:2a:d5:c0:43:27:a1: 49:ad:b8:06:06:12:19:0c:41:42:ec:53:00:21:8b:d0:fe:d6: ff:49:5a:61:3a:f7:9e:65:94:f2:8f:a4:a0:4d:07:2e:9c:d1: 2f:b0:a7:b8:1b:96:17:8c:96:24:56:38:9c:d8:ed:82:d6:82: ab:a5:c5:9c:15:be:93:51:9e:a3:fd:60:18:75:bc:b3:2b:6a: c0:b6:9c:07:53:ca:ec:42:42:b6:00:c9:e3:95:38:83:d8:47: 2c:a3:cd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ufz8y393qilbm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWE4NzY1YTAtYjgxMC00ZWRhLTgzOWQtYTc4YmFkOTVkZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriT9RdD2TnZhSGp5OVBTbOYfYHhR1x9rbLAd Phh4ov10L4B2Nn/Q1lKyyZxZ8Y/QTtRD0HKe/8dfMrwjGGEKu7WsO04LeVBWKi0v +PVjRb5pJCtyfV92xrXntIaK5/s0TdJmT+wnbFB6tMvZwgt1bejlnzhTWki3R8zz 5d2wm+oB4DkzLfm1KVY1pnakJLE/2VU9zPRJg5HwWDBGNc6JWC8ioGcdN92R4VF7 iNjDliJxOsqsaVXro44o/qULggA38ymZRtt+la97lq2oTU8QO5EZaWtsIKSNbsmR GK4mXmK4wn+CXjPdH/SVCLZeawwAFPTZdtOy2mUDEsmZfbEIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr6UiOdYQz6SXBp4SJz8MHGOnrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM1Yzk5YzktMGJmNy0z ODVhLThiMjAtMWE1YTA5YWYyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMviAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo1m9lElh3hYRbD8EqkJlV657hnmeXlRSBl8UF/LvTpk6aFgZHQAhPh doAY6gu9cYmtEPZDaVXhL+Fi7p/L5trPHXf9K5dUHFO8rLqPsdifeUpvN5MXQRXJ CyrlF61F2q5CHYQpUFT1ljirf5ctig8od+8AeBnyLwgZmYV4OSdT5zgoE/fs8Lsu 1y0A4OVqqKzRWhNtEGbecwRlDCrVwEMnoUmtuAYGEhkMQULsUwAhi9D+1v9JWmE6 955llPKPpKBNBy6c0S+wp7gblheMliRWOJzY7YLWgqulxZwVvpNRnqP9YBh1vLMr asC2nAdTyuxCQrYAyeOVOIPYRyyjzeA= -----END CERTIFICATE-----Generated at Wed Oct 22 00:49:33 2025 by rpki-client