$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e40b282-342c-3d65-8fdb-31af338a1fbe.roa File: 8e40b282-342c-3d65-8fdb-31af338a1fbe.roa (raw, json) Hash identifier: OrYujsyvTRLnmcsFOoq23Xo4Us/DpWVGpikAEtiQSe0= Subject key identifier: A9:2E:2A:70:BD:D2:5D:5A:57:4E:D3:A7:5D:A5:4D:33:8B:13:6E:E6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B98724CAA2F8B4BE29A7C7C80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e40b282-342c-3d65-8fdb-31af338a1fbe.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 50.114.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4c:aa:2f:8b:4b:e2:9a:7c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=5a7c0092-61a6-4450-b893-ea6b5f7b6f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:84:7b:2a:7a:80:c8:49:05:e6:a1:d1:39:f7: ed:bc:48:b8:6b:d9:a0:43:ae:aa:64:da:70:8c:ce: 38:99:26:e7:0c:0a:52:60:45:db:b0:f3:93:06:11: 06:df:7d:18:48:4a:7f:9d:0c:6c:e6:67:73:8b:26: 50:c9:fd:76:63:2f:fc:34:0d:93:3d:da:2d:7e:ec: 9c:5a:5a:0d:64:9e:d8:97:9f:e5:2a:c0:ad:ca:0b: e4:b4:06:b7:38:62:61:4d:74:b3:8b:63:af:32:d5: 26:3c:b7:3f:bf:bb:03:bc:75:a4:86:fc:d8:59:3f: e4:9c:9c:39:b0:95:f4:5f:00:b4:30:a1:07:ce:3b: 01:ca:a4:50:e1:34:1b:92:64:d5:b5:ed:ad:74:0f: 8d:a6:e5:35:75:f0:84:4d:21:46:97:9e:fb:0a:4c: e2:21:5c:c8:27:41:89:ef:ca:da:1d:75:72:a1:db: 75:05:3d:e0:d7:cd:1b:02:c8:06:fa:a6:fc:ff:2f: 8d:c2:e2:d3:9c:ed:61:b3:02:75:93:f1:59:f2:31: c9:2c:b2:38:8c:82:35:6f:6c:c3:3f:0f:be:fc:31: 2e:fb:03:01:03:66:4f:41:28:5c:84:bb:73:39:ed: 3c:87:b3:82:04:2b:e6:b9:4d:b4:7a:ce:40:f3:74: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:2A:70:BD:D2:5D:5A:57:4E:D3:A7:5D:A5:4D:33:8B:13:6E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e40b282-342c-3d65-8fdb-31af338a1fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9b:4b:9d:57:b1:fb:d4:23:74:0d:e5:4d:82:4d:12:e7:c4: 27:d5:67:a5:f1:1e:24:6e:0a:9e:67:c1:98:b0:ab:d1:26:00: 19:53:f9:59:b3:71:92:72:51:ce:06:82:d2:84:44:87:c2:3d: c5:80:94:17:d8:03:7c:58:91:65:2b:0c:01:84:4c:cb:7e:2b: c9:11:39:72:d0:02:b3:83:78:69:27:16:e4:e2:5b:70:0b:a6: 58:76:f9:a8:c3:83:0d:70:40:b3:41:85:cc:35:fc:ef:6f:72: a8:6e:3f:3f:07:20:30:89:91:7f:59:38:2f:2e:0f:5a:74:af: c1:e3:79:60:21:58:e0:79:22:2a:6a:c3:60:15:55:5a:7e:b4: d7:7c:32:12:be:75:cc:17:e1:47:40:5b:d3:65:85:07:d0:00: 79:77:28:a8:cb:71:c5:32:bc:40:af:58:2b:dc:71:08:04:d8: bf:6b:6c:6e:eb:21:eb:f8:e5:50:10:4c:d3:57:2d:59:98:45: 1a:4a:7f:86:5e:f4:d8:0f:91:8b:a7:94:e3:af:a4:40:41:e5: 6f:30:f0:57:66:06:6f:ae:d8:c8:16:e3:c4:9a:28:09:83:15: bb:53:6d:9d:ea:92:6e:99:94:25:05:4a:cf:42:3c:ed:5e:d8: d7:d8:11:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckyqL4tL4pp8fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NWE3YzAwOTItNjFhNi00NDUwLWI4OTMtZWE2YjVmN2I2Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4R7KnqAyEkF5qHROfftvEi4a9mgQ66qZNpw jM44mSbnDApSYEXbsPOTBhEG330YSEp/nQxs5mdziyZQyf12Yy/8NA2TPdotfuyc WloNZJ7Yl5/lKsCtygvktAa3OGJhTXSzi2OvMtUmPLc/v7sDvHWkhvzYWT/knJw5 sJX0XwC0MKEHzjsByqRQ4TQbkmTVte2tdA+NpuU1dfCETSFGl577CkziIVzIJ0GJ 78raHXVyodt1BT3g180bAsgG+qb8/y+NwuLTnO1hswJ1k/FZ8jHJLLI4jII1b2zD Pw++/DEu+wMBA2ZPQShchLtzOe08h7OCBCvmuU20es5A83Ri8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkuKnC90l1aV07Tp12lTTOLE27mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGU0MGIyODItMzQyYy0z ZDY1LThmZGItMzFhZjMzOGExZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGbS51XsfvUI3QN5U2CTRLnxCfVZ6XxHiRuCp5nwZiwq9EmABlT+Vmz cZJyUc4GgtKERIfCPcWAlBfYA3xYkWUrDAGETMt+K8kROXLQArODeGknFuTiW3AL plh2+ajDgw1wQLNBhcw1/O9vcqhuPz8HIDCJkX9ZOC8uD1p0r8HjeWAhWOB5Iipq w2AVVVp+tNd8MhK+dcwX4UdAW9NlhQfQAHl3KKjLccUyvECvWCvccQgE2L9rbG7r Iev45VAQTNNXLVmYRRpKf4Ze9NgPkYunlOOvpEBB5W8w8FdmBm+u2MgW48SaKAmD FbtTbZ3qkm6ZlCUFSs9CPO1e2NfYETk= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:38 2025 by rpki-client