$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dceb1b9c-a7c8-3a5c-a6b3-cb922065e999.roa File: dceb1b9c-a7c8-3a5c-a6b3-cb922065e999.roa (raw, json) Hash identifier: WWFxAYMh437LPDjqZ5YMCmaL1ZhayyRgmk4F0zWcnr4= Subject key identifier: 53:40:E9:61:42:82:26:21:3F:64:95:7E:8B:C4:C3:85:EF:17:A8:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201F7D4A6893664BAF24080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dceb1b9c-a7c8-3a5c-a6b3-cb922065e999.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 50.81.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f7:d4:a6:89:36:64:ba:f2:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5574720d-63bf-4b09-a448-6c60906a8784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:5f:3b:d1:2a:66:e1:44:03:3c:a3:88:69: d3:40:7b:3b:d1:51:38:04:17:17:5c:9f:44:af:e4: f2:73:b0:3c:06:75:08:30:e1:44:12:8c:c0:b7:e1: 74:f1:65:92:27:f3:f8:72:95:d5:74:2d:b7:1b:20: 58:82:c5:b2:6f:05:dd:df:7a:46:3a:cd:25:1a:3e: 2b:9b:04:77:1b:2e:96:f3:40:61:5d:da:ef:c0:0a: b4:ea:a9:5f:13:b9:09:7c:e1:37:70:bc:f7:fc:0a: f7:4a:b2:a5:33:19:f1:62:a7:8a:ee:1f:2a:ca:28: ad:46:76:b7:43:4c:de:d6:d8:27:75:2c:3d:81:18: 4e:e7:c9:5f:97:f1:a3:2e:f2:98:ec:1c:88:46:56: 7e:df:63:75:38:bd:01:d5:8e:98:13:4b:46:4a:cb: 13:ee:35:42:92:7c:57:b3:2b:1f:c7:67:ca:66:09: 6f:b3:cc:79:3b:3c:a6:84:0d:47:17:b7:07:38:56: 98:3f:de:57:46:88:d2:0e:b3:d9:17:d0:44:08:26: e8:f1:60:c8:79:54:e9:de:7e:78:c9:6a:ba:37:c0: be:24:cc:67:37:4a:98:b5:54:68:30:0d:50:68:0b: 53:01:d0:b0:ab:37:89:72:87:c6:c6:4b:1a:fb:1a: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:40:E9:61:42:82:26:21:3F:64:95:7E:8B:C4:C3:85:EF:17:A8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dceb1b9c-a7c8-3a5c-a6b3-cb922065e999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d2:31:ab:02:b2:ad:96:05:1f:a1:64:a1:3f:96:f0:42:dd: 04:81:d7:ce:3d:f1:cc:5a:52:3f:56:9f:53:69:3f:80:a9:e0: cc:c7:1a:af:53:87:6e:fd:a0:b3:e6:5b:e9:26:ae:c3:ab:fe: d7:b0:f9:00:e2:ac:3a:9b:37:a3:5f:c4:be:35:4b:9b:43:68: e3:f3:00:9e:a9:c7:44:57:45:aa:f8:ab:01:bf:1d:cf:28:a7: 85:94:d9:50:d2:13:f7:e4:62:ac:2a:41:c8:66:e1:0b:13:12: 4b:d0:f2:62:61:89:d1:82:aa:47:a5:7e:0b:e2:25:bd:2c:15: 07:5f:d5:c3:ec:16:f8:03:6c:58:12:0c:e3:13:d2:b7:b7:eb: 20:d4:f9:4c:ab:77:4e:09:de:4a:33:7a:f1:2f:7d:79:b9:17: 9a:21:9c:30:9a:12:8b:01:eb:47:7e:1a:0f:4f:96:fb:5d:f7: 07:ed:17:0a:db:73:b0:7c:79:85:7b:65:a1:f5:47:7b:2c:3c: 04:54:df:f2:0c:46:8f:84:15:28:e5:a0:11:9e:91:51:95:36: 50:f0:b5:59:12:bd:9d:fc:8e:99:13:39:b0:24:07:04:8d:db: e9:d3:8e:e3:08:d6:cb:5e:bd:5e:58:03:fb:36:cd:e1:2f:3b: 6e:f5:fa:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAffUpok2ZLryQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTU3NDcyMGQtNjNiZi00YjA5LWE0NDgtNmM2MDkwNmE4Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZfO9EqZuFEAzyjiGnTQHs70VE4BBcXXJ9E r+Tyc7A8BnUIMOFEEozAt+F08WWSJ/P4cpXVdC23GyBYgsWybwXd33pGOs0lGj4r mwR3Gy6W80BhXdrvwAq06qlfE7kJfOE3cLz3/Ar3SrKlMxnxYqeK7h8qyiitRna3 Q0ze1tgndSw9gRhO58lfl/GjLvKY7ByIRlZ+32N1OL0B1Y6YE0tGSssT7jVCknxX sysfx2fKZglvs8x5OzymhA1HF7cHOFaYP95XRojSDrPZF9BECCbo8WDIeVTp3n54 yWq6N8C+JMxnN0qYtVRoMA1QaAtTAdCwqzeJcofGxksa+xojowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNA6WFCgiYhP2SVfovEw4XvF6idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNlYjFiOWMtYTdjOC0z YTVjLWE2YjMtY2I5MjIwNjVlOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjSMasCsq2WBR+hZKE/lvBC3QSB18498cxaUj9Wn1NpP4Cp4MzHGq9T h279oLPmW+kmrsOr/tew+QDirDqbN6NfxL41S5tDaOPzAJ6px0RXRar4qwG/Hc8o p4WU2VDSE/fkYqwqQchm4QsTEkvQ8mJhidGCqkelfgviJb0sFQdf1cPsFvgDbFgS DOMT0re36yDU+Uyrd04J3kozevEvfXm5F5ohnDCaEosB60d+Gg9Plvtd9wftFwrb c7B8eYV7ZaH1R3ssPARU3/IMRo+EFSjloBGekVGVNlDwtVkSvZ38jpkTObAkBwSN 2+nTjuMI1stevV5YA/s2zeEvO271+sE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:59 2025 by rpki-client