$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf23e07a-e507-364b-bb43-cae4adacbaca.roa File: cf23e07a-e507-364b-bb43-cae4adacbaca.roa (raw, json) Hash identifier: 4XQktWavh3Juf9Zwes1qU5q1v+2UjIBPfjegjHtuuec= Subject key identifier: 39:5C:17:F1:24:3F:24:DD:A4:C6:FF:3C:6D:A7:28:26:4C:DD:A9:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4C37501BA109539582456080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf23e07a-e507-364b-bb43-cae4adacbaca.roa Signing time: Wed 24 Sep 2025 05:40:35 +0000 ROA not before: Wed 24 Sep 2025 05:40:35 +0000 ROA not after: Tue 23 Dec 2025 06:40:35 +0000 asID: 30036 IP address blocks: 50.81.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:37:50:1b:a1:09:53:95:82:45:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 05:40:35 2025 GMT Not After : Dec 23 06:40:35 2025 GMT Subject: CN=cdd563b2-8b40-4f51-ab02-f39f69232422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:a6:4d:ee:0c:3b:e7:e9:c8:ea:9c:99:10: 68:1d:b4:1f:9b:8c:b4:55:5b:85:14:6d:70:5a:e4: a1:68:2a:2c:42:0e:fc:14:67:8b:56:37:0a:80:af: a8:20:f0:47:7e:34:9e:e4:f0:c2:7a:b0:ad:11:7f: 1f:7c:6c:12:f7:0f:90:83:0a:d0:37:b1:b3:7a:19: 54:36:83:e5:21:12:f0:77:4d:83:3f:1d:b9:ec:69: e7:11:c1:5e:ca:2d:91:47:98:3a:bd:32:cc:fa:bd: 00:35:17:46:d2:3e:49:20:7b:5e:5f:03:b0:73:32: 14:e3:c2:85:d6:2f:65:5a:7e:f2:3d:b2:40:2a:d8: ad:fe:6e:bc:18:bd:24:4f:eb:fc:a2:a7:53:a2:52: 19:9b:f9:26:a7:f0:b7:81:cc:1c:0c:52:72:a4:7c: d2:1f:8f:6a:24:48:4b:d0:82:6e:17:61:45:4e:29: 74:b9:ee:0f:f1:21:f8:ea:bf:47:fe:4b:7c:ea:51: e4:db:18:64:84:c7:71:7b:08:42:43:0f:ca:b1:5f: eb:84:f3:12:eb:3a:9b:e0:43:98:e1:eb:34:67:21: 99:6a:0a:d2:45:cf:9a:30:a7:9c:e2:6a:ad:a8:70: b7:e8:24:17:7e:26:22:ac:8b:01:5c:74:70:fe:aa: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:17:F1:24:3F:24:DD:A4:C6:FF:3C:6D:A7:28:26:4C:DD:A9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf23e07a-e507-364b-bb43-cae4adacbaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7e:4e:6c:72:6e:af:4d:83:db:19:08:58:c7:20:79:22:3f: 28:18:8a:31:02:79:7e:90:60:8b:e0:6d:db:62:00:f6:ac:d5: 7e:55:cd:98:c6:13:9a:f7:2c:c6:e1:22:7e:86:e0:99:ee:b9: a7:18:6f:c0:49:ee:36:c1:98:a7:6d:3e:72:01:05:07:15:47: 97:3f:b3:45:83:81:7d:95:c3:8f:85:67:b2:c0:9a:e0:40:00: 89:29:d5:ac:de:c1:ef:aa:e5:c8:b8:9f:03:b7:02:a2:22:53: 2a:8e:30:0e:36:0e:52:54:24:28:a1:7d:3d:56:58:57:e4:29: c4:d2:4d:fe:79:87:e1:14:b0:4e:69:a3:cb:e5:69:08:83:38: b0:35:15:08:be:52:57:55:6a:39:d2:a7:79:99:9d:de:19:b0: 2c:fb:5b:60:a2:84:79:a0:f2:da:4a:80:76:eb:c3:55:5d:d3: 36:0b:30:f9:e9:b8:25:0f:3e:4b:86:d3:73:8b:f0:8a:2c:93: a1:ce:11:f8:14:86:2e:0c:ee:db:f8:6d:ac:e3:58:46:3d:bd: 5e:2c:98:a9:15:64:60:1b:60:29:0e:0a:1e:d9:47:d0:13:f1: 1d:d3:b6:a5:fd:e0:8d:9c:43:05:ea:e9:1d:3d:58:be:89:11: ca:bb:9b:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMN1AboQlTlYJFYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNDA1NDAzNVoXDTI1MTIyMzA2NDAzNVowLzEtMCsGA1UEAxMk Y2RkNTYzYjItOGI0MC00ZjUxLWFiMDItZjM5ZjY5MjMyNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLymTe4MO+fpyOqcmRBoHbQfm4y0VVuFFG1w WuShaCosQg78FGeLVjcKgK+oIPBHfjSe5PDCerCtEX8ffGwS9w+QgwrQN7GzehlU NoPlIRLwd02DPx257GnnEcFeyi2RR5g6vTLM+r0ANRdG0j5JIHteXwOwczIU48KF 1i9lWn7yPbJAKtit/m68GL0kT+v8oqdTolIZm/kmp/C3gcwcDFJypHzSH49qJEhL 0IJuF2FFTil0ue4P8SH46r9H/kt86lHk2xhkhMdxewhCQw/KsV/rhPMS6zqb4EOY 4es0ZyGZagrSRc+aMKec4mqtqHC36CQXfiYirIsBXHRw/qrNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlcF/EkPyTdpMb/PG2nKCZM3akFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2YyM2UwN2EtZTUwNy0z NjRiLWJiNDMtY2FlNGFkYWNiYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp+Tmxybq9Ng9sZCFjHIHkiPygYijECeX6QYIvgbdtiAPas1X5VzZjG E5r3LMbhIn6G4JnuuacYb8BJ7jbBmKdtPnIBBQcVR5c/s0WDgX2Vw4+FZ7LAmuBA AIkp1azewe+q5ci4nwO3AqIiUyqOMA42DlJUJCihfT1WWFfkKcTSTf55h+EUsE5p o8vlaQiDOLA1FQi+UldVajnSp3mZnd4ZsCz7W2CihHmg8tpKgHbrw1Vd0zYLMPnp uCUPPkuG03OL8Iosk6HOEfgUhi4M7tv4bazjWEY9vV4smKkVZGAbYCkOCh7ZR9AT 8R3TtqX94I2cQwXq6R09WL6JEcq7m8M= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:11 2025 by rpki-client