$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa File: 42999c51-9e95-38ef-8054-3c585a745afb.roa (raw, json) Hash identifier: 74z2AEwlY85zFkDMWL1ycPXm99q4BsNd+q1ONTMzE8k= Subject key identifier: 72:A7:53:18:27:99:95:91:55:0B:1D:BF:7C:7A:43:5A:E9:48:E8:9D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B6FF733F3C35E5D708A72B7E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 174 IP address blocks: 50.2.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:33:f3:c3:5e:5d:70:8a:72:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=61e1a949-a960-4e8b-ab30-388aba26f63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:6f:86:af:28:26:51:30:0c:98:6a:12:41: df:be:eb:eb:76:5e:d1:7b:33:2e:43:18:1d:39:ab: 55:f2:65:15:9e:9a:cc:2e:4e:06:3f:1d:c4:69:f0: e7:a6:03:f4:c1:fe:6b:c0:3b:37:87:69:0e:18:79: c7:2f:9f:1d:12:29:d1:f0:e3:4b:18:89:0b:ff:ea: 6c:f5:3a:6d:f5:b5:86:b9:7f:79:f7:44:96:ec:ac: ba:a5:94:8d:45:3a:4a:e3:6d:37:5f:b3:fc:22:b0: 7c:ac:c8:f3:42:01:4d:dc:30:7c:32:51:39:23:58: 79:87:4a:0b:7f:bf:c5:79:89:7f:74:5f:22:ce:b8: 26:7b:50:a7:b5:83:31:a1:44:ee:4b:69:3e:23:bd: 56:18:c0:94:16:c2:59:84:f0:8d:7d:8d:2d:51:df: fe:4b:7c:08:21:06:25:63:6e:4e:3f:64:89:6a:1e: 3a:2e:d6:39:25:9b:76:46:58:15:71:af:28:1a:46: e5:08:14:a0:1c:fd:90:90:f1:97:4f:eb:db:59:44: b3:46:fc:2e:58:59:fd:b4:1f:b0:91:5e:85:f9:4b: 02:16:57:a8:7a:6a:6d:0d:73:d6:29:af:dd:23:35: 14:a9:64:19:bb:38:aa:9a:7d:69:7c:5e:e4:d6:7a: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:53:18:27:99:95:91:55:0B:1D:BF:7C:7A:43:5A:E9:48:E8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:85:33:df:e9:05:22:0a:9b:0f:5f:9d:89:0f:ba:b4:b6:c8: 64:a2:58:6a:8d:4c:4d:9d:e3:2d:1f:eb:bb:19:d0:c2:3f:39: 25:01:68:9a:84:41:a9:ee:5f:90:4a:92:a7:a3:b1:5a:9c:5e: 30:d5:e2:ed:31:1a:27:f0:ca:f0:f0:c9:af:de:3f:20:10:93: d8:db:a3:18:b6:d3:ef:b0:43:0f:94:59:9d:2d:ea:4a:8e:90: 19:07:9c:7e:ab:a3:91:30:9d:0c:6e:06:ea:a2:0d:15:86:53: 85:24:3c:37:7d:8e:00:ac:b5:53:a0:ac:94:05:6e:7a:10:1e: dc:78:1c:5a:fc:38:e7:84:25:02:6f:58:bd:52:53:11:00:c8: 2d:e0:73:77:df:85:14:27:86:01:6c:4f:09:fc:ae:91:45:7e: 51:28:97:e7:39:f7:77:61:9a:76:c9:67:98:2a:2c:80:56:de: 19:4d:7d:29:4b:3a:39:3a:e9:e2:65:df:46:2b:26:58:db:69: eb:20:d5:30:1c:3c:4b:7f:b2:a3:93:cc:b3:90:f9:c0:4e:a6: 1a:43:08:4f:4d:88:a4:df:06:db:8a:73:9e:c3:47:8a:b5:75: 8d:ac:26:7c:c6:eb:48:25:44:d7:3c:93:b1:64:82:12:6a:7f: 36:5d:3b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9zPzw15dcIpyt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NjFlMWE5NDktYTk2MC00ZThiLWFiMzAtMzg4YWJhMjZmNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBpvhq8oJlEwDJhqEkHfvuvrdl7RezMuQxgd OatV8mUVnprMLk4GPx3EafDnpgP0wf5rwDs3h2kOGHnHL58dEinR8ONLGIkL/+ps 9Tpt9bWGuX9590SW7Ky6pZSNRTpK4203X7P8IrB8rMjzQgFN3DB8MlE5I1h5h0oL f7/FeYl/dF8izrgme1CntYMxoUTuS2k+I71WGMCUFsJZhPCNfY0tUd/+S3wIIQYl Y25OP2SJah46LtY5JZt2RlgVca8oGkblCBSgHP2QkPGXT+vbWUSzRvwuWFn9tB+w kV6F+UsCFleoemptDXPWKa/dIzUUqWQZuziqmn1pfF7k1noTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKnUxgnmZWRVQsdv3x6Q1rpSOidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDI5OTljNTEtOWU5NS0z OGVmLTgwNTQtM2M1ODVhNzQ1YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgL9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmFM9/pBSIKmw9fnYkPurS2yGSiWGqNTE2d4y0f67sZ0MI/OSUBaJqE QanuX5BKkqejsVqcXjDV4u0xGifwyvDwya/ePyAQk9jboxi20++wQw+UWZ0t6kqO kBkHnH6ro5EwnQxuBuqiDRWGU4UkPDd9jgCstVOgrJQFbnoQHtx4HFr8OOeEJQJv WL1SUxEAyC3gc3ffhRQnhgFsTwn8rpFFflEol+c593dhmnbJZ5gqLIBW3hlNfSlL Ojk66eJl30YrJljbaesg1TAcPEt/sqOTzLOQ+cBOphpDCE9NiKTfBtuKc57DR4q1 dY2sJnzG60glRNc8k7FkghJqfzZdOzc= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:47 2025 by rpki-client