$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ae28f71-5620-3c9b-a06a-474b7fd157a0.roa File: 0ae28f71-5620-3c9b-a06a-474b7fd157a0.roa (raw, json) Hash identifier: q9leC00utzZgGYQ11Q9X9SEHEyKERTfxHrE/ShXk7Cg= Subject key identifier: 8D:42:94:17:F7:40:E7:D9:60:72:7F:A9:F4:1C:AC:55:50:F9:1C:42 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B20673ABA31A2BC852E3B1E80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ae28f71-5620-3c9b-a06a-474b7fd157a0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 3257 IP address blocks: 50.2.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:3a:ba:31:a2:bc:85:2e:3b:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=af2a2ed8-cbd7-4305-8681-b09cd81225ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:55:04:3c:33:a5:9b:83:76:2d:74:83:3e: fb:02:20:a5:85:7c:88:da:2c:5f:f1:ea:6a:9b:8b: 83:53:6d:8b:10:00:05:62:ae:04:de:19:ae:6a:19: 19:ce:6c:c1:3f:de:04:6e:a8:9d:1b:62:12:2d:e0: 91:af:5f:1d:3e:44:a5:e2:4e:d3:b2:06:45:c7:ac: 67:74:ca:f6:44:88:6a:81:8e:64:8c:31:be:0e:8f: e4:8c:70:8e:9f:8f:4b:55:7a:13:48:c2:52:b4:d6: 66:d0:77:66:d1:2f:19:08:6f:49:31:6d:eb:d3:fb: 1d:16:2a:2b:2f:98:92:8d:5c:ef:03:c8:bd:f2:58: 1f:85:a3:4c:6c:84:3f:d7:a9:22:30:fd:4d:0b:20: 79:0e:49:07:a1:af:33:5e:33:13:58:fb:94:03:13: 74:89:ed:aa:9c:d0:ee:c0:7f:33:4e:16:cf:20:3f: e9:93:89:78:22:8e:08:c2:d2:43:db:67:64:4b:90: 77:ed:0e:07:45:61:37:5a:ea:b0:1e:2d:25:89:91: aa:ec:71:1d:31:4b:8a:7f:73:53:ce:d3:83:7f:d6: 21:1a:f0:c8:72:39:c7:3b:c8:9b:57:99:04:0f:2a: 5c:72:31:2a:2f:9f:38:9f:ea:82:f5:98:05:e4:6e: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:94:17:F7:40:E7:D9:60:72:7F:A9:F4:1C:AC:55:50:F9:1C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ae28f71-5620-3c9b-a06a-474b7fd157a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:22:53:27:bd:25:09:5e:34:d8:07:43:c6:ca:8a:9a:f1:76: 11:aa:1a:fc:9d:df:86:db:d3:0f:e6:ee:bf:57:1e:86:08:df: 4d:3a:26:e7:7c:27:db:20:fc:39:b4:de:f8:58:3a:ab:1b:3b: 95:5c:67:08:f2:db:1b:d3:e9:74:65:95:f1:74:99:f1:a4:2b: 81:8b:3e:1a:9e:28:95:35:33:e1:15:b8:c5:9c:1e:1c:67:a0: 94:b3:20:3c:21:2f:a5:20:60:a4:7a:72:91:50:89:e0:17:3b: 1b:4e:21:8a:54:2e:d6:ed:75:b8:4b:af:27:8f:0b:82:fd:33: df:89:05:b2:f3:c4:60:25:dc:de:6b:8f:0f:90:d0:5a:eb:18: 3c:63:8b:46:8a:44:10:8c:11:7b:9b:84:fe:9c:e4:f3:3c:43: 28:16:fc:6d:40:d3:cc:05:63:84:ff:5b:39:3c:c8:6b:a3:21: bc:4d:a5:32:2a:7f:38:4f:31:cd:23:93:9c:0a:22:93:9e:22: 2c:c9:a7:c9:f6:fa:6a:21:ee:f7:a7:c2:a3:7c:20:4a:10:df: 91:5e:d1:df:76:95:c2:00:4e:5a:1f:71:21:f9:ea:50:73:e7: 19:f1:5d:3a:0f:0e:a7:f8:40:18:87:fd:b1:12:93:13:ec:fc: 78:7b:12:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzq6MaK8hS47HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YWYyYTJlZDgtY2JkNy00MzA1LTg2ODEtYjA5Y2Q4MTIyNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOZVBDwzpZuDdi10gz77AiClhXyI2ixf8epq m4uDU22LEAAFYq4E3hmuahkZzmzBP94EbqidG2ISLeCRr18dPkSl4k7TsgZFx6xn dMr2RIhqgY5kjDG+Do/kjHCOn49LVXoTSMJStNZm0Hdm0S8ZCG9JMW3r0/sdFior L5iSjVzvA8i98lgfhaNMbIQ/16kiMP1NCyB5DkkHoa8zXjMTWPuUAxN0ie2qnNDu wH8zThbPID/pk4l4Io4IwtJD22dkS5B37Q4HRWE3WuqwHi0liZGq7HEdMUuKf3NT ztODf9YhGvDIcjnHO8ibV5kEDypccjEqL584n+qC9ZgF5G4DEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1ClBf3QOfZYHJ/qfQcrFVQ+RxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFlMjhmNzEtNTYyMC0z YzliLWEwNmEtNDc0YjdmZDE1N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYiUye9JQleNNgHQ8bKiprxdhGqGvyd34bb0w/m7r9XHoYI3006Jud8 J9sg/Dm03vhYOqsbO5VcZwjy2xvT6XRllfF0mfGkK4GLPhqeKJU1M+EVuMWcHhxn oJSzIDwhL6UgYKR6cpFQieAXOxtOIYpULtbtdbhLryePC4L9M9+JBbLzxGAl3N5r jw+Q0FrrGDxji0aKRBCMEXubhP6c5PM8QygW/G1A08wFY4T/Wzk8yGujIbxNpTIq fzhPMc0jk5wKIpOeIizJp8n2+moh7venwqN8IEoQ35Fe0d92lcIATlofcSH56lBz 5xnxXToPDqf4QBiH/bESkxPs/Hh7ErE= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:33 2025 by rpki-client