$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21041003-f10e-34e2-a386-a89a37a1f3c1.roa File: 21041003-f10e-34e2-a386-a89a37a1f3c1.roa (raw, json) Hash identifier: nMI//a0xjqQxfY9p4h9U+CwoMPROAij24DKqzew62QY= Subject key identifier: BE:EF:3A:F7:50:C2:09:6E:67:B6:D3:45:30:CA:FE:34:6D:34:6B:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B26AC52A4A040ABF0046ECC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21041003-f10e-34e2-a386-a89a37a1f3c1.roa Signing time: Wed 10 Sep 2025 18:55:38 +0000 ROA not before: Wed 10 Sep 2025 18:55:38 +0000 ROA not after: Tue 09 Dec 2025 19:55:38 +0000 asID: 30036 IP address blocks: 50.82.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:ac:52:a4:a0:40:ab:f0:04:6e:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 18:55:38 2025 GMT Not After : Dec 9 19:55:38 2025 GMT Subject: CN=0751ae55-8673-4567-b500-8959e7fc656f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:90:7d:1e:aa:c4:61:e9:67:56:47:ed:c3: 8a:a2:31:66:71:3a:8d:97:91:09:40:c2:89:f7:7e: 29:ff:b9:0a:bb:69:29:77:8f:69:ea:d9:cf:48:6e: d8:6b:57:b4:7d:29:b5:06:df:98:1d:75:84:c0:da: bf:82:50:6f:a7:50:07:b7:1a:7a:13:fd:38:7c:0a: fa:0c:98:e2:16:c1:27:f8:b4:a6:92:1b:41:ea:40: 83:d6:08:a0:fe:e9:af:0a:cf:5d:ec:08:f0:56:c3: 6b:ca:0b:be:56:fd:d0:be:55:17:39:7e:b4:ca:55: 9e:80:ec:39:b4:02:66:22:11:a8:c9:4b:46:0d:bf: 12:6d:96:82:9d:e8:40:d3:7f:84:0d:d3:e2:56:e7: 89:06:28:bb:9e:32:77:f4:0d:01:41:a6:22:d7:25: 55:df:d1:59:7f:a8:d7:bd:47:58:de:c6:6d:22:83: 1b:42:a0:9d:e1:96:d0:39:05:4f:2e:da:3b:06:bd: d1:d2:92:80:43:7f:95:1f:01:eb:70:68:b1:d8:82: 74:86:91:e4:ad:ad:a4:d8:d7:57:0b:67:eb:d6:b9: dd:80:ad:0e:ed:b5:e8:6e:bd:2d:d8:25:ce:f2:6b: 58:e7:41:7c:90:17:38:82:d6:af:0d:36:c4:05:70: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EF:3A:F7:50:C2:09:6E:67:B6:D3:45:30:CA:FE:34:6D:34:6B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21041003-f10e-34e2-a386-a89a37a1f3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a2:b5:ef:90:65:c1:73:a5:85:e8:de:9e:98:d1:30:88:5c: 11:72:db:ee:ea:c8:2f:26:e9:59:83:be:ee:db:39:87:9f:cd: b3:44:25:ab:c5:23:ae:e4:9d:99:9e:00:75:13:90:f7:de:66: 3f:56:b7:23:18:e5:f2:c9:68:17:e9:e0:df:a9:7c:8e:21:31: 8a:5f:40:1f:5d:99:fe:c6:8a:ed:40:2f:e6:a2:4c:e4:28:d7: 00:9b:e2:5a:6e:bd:78:2d:c0:a6:cd:24:48:b8:69:63:52:9d: bf:3e:13:f2:3c:63:c7:39:5b:1e:84:17:fb:63:f7:e7:88:04: 87:4d:33:5a:77:b5:60:70:5e:ec:5c:8a:90:70:90:a3:24:49: 75:cd:66:df:82:64:1f:63:93:33:6a:e0:37:b9:df:d4:fd:d8: ef:78:e1:59:1b:f1:a6:fd:23:a9:19:72:36:58:27:16:59:b9: c3:4c:ed:4a:21:b5:de:1b:f2:89:55:f0:9f:af:60:92:ce:3e: 73:2f:54:d3:be:fa:b0:b6:e5:c0:77:20:12:4e:e5:51:e0:1a: b0:28:8f:d1:47:3a:bd:5d:53:c3:bc:d0:ef:6b:47:81:ab:68: 5f:f4:8e:6d:71:50:c2:4f:34:32:17:e3:0e:a4:c8:3d:35:d1: d4:c6:fb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmrFKkoECr8ARuzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMDE4NTUzOFoXDTI1MTIwOTE5NTUzOFowLzEtMCsGA1UEAxMk MDc1MWFlNTUtODY3My00NTY3LWI1MDAtODk1OWU3ZmM2NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqWQfR6qxGHpZ1ZH7cOKojFmcTqNl5EJQMKJ 934p/7kKu2kpd49p6tnPSG7Ya1e0fSm1Bt+YHXWEwNq/glBvp1AHtxp6E/04fAr6 DJjiFsEn+LSmkhtB6kCD1gig/umvCs9d7AjwVsNrygu+Vv3QvlUXOX60ylWegOw5 tAJmIhGoyUtGDb8SbZaCnehA03+EDdPiVueJBii7njJ39A0BQaYi1yVV39FZf6jX vUdY3sZtIoMbQqCd4ZbQOQVPLto7Br3R0pKAQ3+VHwHrcGix2IJ0hpHkra2k2NdX C2fr1rndgK0O7bXobr0t2CXO8mtY50F8kBc4gtavDTbEBXBMtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7vOvdQwgluZ7bTRTDK/jRtNGv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjEwNDEwMDMtZjEwZS0z NGUyLWEzODYtYTg5YTM3YTFmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlLiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6ite+QZcFzpYXo3p6Y0TCIXBFy2+7qyC8m6VmDvu7bOYefzbNEJavF I67knZmeAHUTkPfeZj9WtyMY5fLJaBfp4N+pfI4hMYpfQB9dmf7Giu1AL+aiTOQo 1wCb4lpuvXgtwKbNJEi4aWNSnb8+E/I8Y8c5Wx6EF/tj9+eIBIdNM1p3tWBwXuxc ipBwkKMkSXXNZt+CZB9jkzNq4De539T92O944Vkb8ab9I6kZcjZYJxZZucNM7Uoh td4b8olV8J+vYJLOPnMvVNO++rC25cB3IBJO5VHgGrAoj9FHOr1dU8O80O9rR4Gr aF/0jm1xUMJPNDIX4w6kyD010dTG+50= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:35 2025 by rpki-client