$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa File: 8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json) Hash identifier: 13AKBa/qg5gFlBM3HH0yBslLTiv5g1/+UBwLSdby8jg= Subject key identifier: D4:1E:99:B0:77:2F:4A:3B:AB:AD:86:53:57:CB:A8:0D:65:1F:66:F2 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C7234BF6589F410A8F240 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 174 IP address blocks: 50.2.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:72:34:bf:65:89:f4:10:a8:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=b5613c40-e4d4-46d9-8685-f71901ad81bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:fd:e7:87:74:5a:fe:31:1c:cc:6d:22:cc: 5f:3d:91:c3:02:27:61:57:2c:20:cb:8b:4d:d2:a3: 30:8e:4a:45:20:9e:36:b8:04:cf:9e:b5:46:d4:ee: a8:48:0d:75:84:e9:9a:ca:be:b9:46:5e:64:02:df: 2d:03:93:b5:da:40:5d:b4:29:c4:d7:38:e7:e9:4f: e4:2e:9f:0f:48:cd:2d:c4:af:df:0b:59:48:53:55: 30:f6:a6:87:e1:69:26:6e:d0:04:a0:d9:6a:22:46: 27:28:5f:66:d9:29:a7:5c:31:64:36:2a:85:81:b3: db:3b:0a:a0:68:6b:3d:52:64:3d:8d:a4:07:bc:ec: 0a:3f:a8:8c:86:e8:0f:ad:78:5f:5f:26:68:ce:49: a5:62:68:f0:c5:c4:36:5a:b8:21:c5:2b:cb:bd:15: b4:6d:8e:8f:b9:1b:36:67:86:d0:29:12:3e:64:f8: 8b:a0:da:89:d4:1f:15:5d:44:7b:89:0d:6b:29:82: 8d:07:e6:dd:75:02:6e:55:23:0b:10:f3:8f:a8:8e: 7b:6d:34:fb:da:49:01:9d:d8:ee:45:fa:70:7e:37: 05:a1:5e:d7:8a:d9:eb:2d:81:ad:8e:b5:63:9c:35: 2a:96:73:ba:f8:cf:98:61:bc:6b:1e:8b:4f:b4:81: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:99:B0:77:2F:4A:3B:AB:AD:86:53:57:CB:A8:0D:65:1F:66:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:46:ec:15:07:20:8e:3f:26:1d:25:e7:88:fe:58:96:49:06: 01:a9:64:a9:57:5b:8b:b4:fb:6d:40:0d:36:7e:8e:09:bd:a3: 2d:57:6c:44:35:17:bb:04:f9:09:97:a3:a9:37:1f:5f:dd:28: 90:0e:a0:5b:ea:0c:a1:6c:3c:43:6d:4f:cd:25:88:8b:b3:cc: 7c:c6:fe:62:75:5c:96:66:c8:34:b1:19:8c:9a:b9:df:8e:d7: 81:bd:81:c0:3d:69:af:bb:ff:85:b5:39:93:77:c7:26:f8:39: bc:b7:a9:80:0a:bd:1d:0e:99:29:d1:28:4f:a5:ab:80:13:fc: 7d:db:a2:2c:d9:2c:5a:42:98:ab:42:c1:90:e3:f1:6b:8d:8e: f5:6a:c0:83:da:09:9f:4d:58:89:1c:7a:eb:b4:e6:6e:93:99: 5d:4e:ab:d6:c2:1a:07:bb:3f:7d:51:d3:77:97:fc:70:2d:72: 79:b9:8b:3b:2b:ba:47:27:6d:27:16:d7:e2:58:58:a0:6b:b9: 2c:dc:03:18:a2:e5:2c:be:40:7b:5d:41:92:94:c2:ee:50:d4: 09:d1:67:14:95:9e:58:dc:e3:80:ee:ff:1a:48:c3:4a:2d:08: 68:59:15:53:cf:5a:8f:51:71:27:ad:66:c3:be:9d:87:5a:46: 28:34:95:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHI0v2WJ9BCo8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YjU2MTNjNDAtZTRkNC00NmQ5LTg2ODUtZjcxOTAxYWQ4MWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwb954d0Wv4xHMxtIsxfPZHDAidhVywgy4tN 0qMwjkpFIJ42uATPnrVG1O6oSA11hOmayr65Rl5kAt8tA5O12kBdtCnE1zjn6U/k Lp8PSM0txK/fC1lIU1Uw9qaH4WkmbtAEoNlqIkYnKF9m2SmnXDFkNiqFgbPbOwqg aGs9UmQ9jaQHvOwKP6iMhugPrXhfXyZozkmlYmjwxcQ2WrghxSvLvRW0bY6PuRs2 Z4bQKRI+ZPiLoNqJ1B8VXUR7iQ1rKYKNB+bddQJuVSMLEPOPqI57bTT72kkBndju RfpwfjcFoV7XitnrLYGtjrVjnDUqlnO6+M+YYbxrHotPtIEW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQembB3L0o7q62GU1fLqA1lH2byMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGE1MjQ1MjYtZTI1OS0z NWIxLWE4MGQtZDI3Y2NlYzYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlG7BUHII4/Jh0l54j+WJZJBgGpZKlXW4u0+21ADTZ+jgm9oy1XbEQ1 F7sE+QmXo6k3H1/dKJAOoFvqDKFsPENtT80liIuzzHzG/mJ1XJZmyDSxGYyaud+O 14G9gcA9aa+7/4W1OZN3xyb4Oby3qYAKvR0OmSnRKE+lq4AT/H3boizZLFpCmKtC wZDj8WuNjvVqwIPaCZ9NWIkceuu05m6TmV1Oq9bCGge7P31R03eX/HAtcnm5izsr ukcnbScW1+JYWKBruSzcAxii5Sy+QHtdQZKUwu5Q1AnRZxSVnljc44Du/xpIw0ot CGhZFVPPWo9RcSetZsO+nYdaRig0lS4= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:56 2025 by rpki-client