$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa File: 975b438c-433c-35cf-b0c2-2a245df4002d.roa (raw, json) Hash identifier: mBFZFZZk1osTyBPtl5NYPghfXG07gVE0OZnP3ItmjE8= Subject key identifier: 84:F3:03:F9:3A:07:40:28:17:CF:A3:B9:21:BD:F1:14:EA:A2:60:3B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B6FF7357EF9F89BF08FE057C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 174 IP address blocks: 50.3.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:35:7e:f9:f8:9b:f0:8f:e0:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=75327e64-b2b3-4940-b5c5-df0608730915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:15:e4:3c:a9:de:16:0f:7c:cf:a7:1d:b8: 37:75:95:1a:82:fc:7b:03:68:de:e0:e9:62:3a:5b: ff:96:a5:de:73:9e:62:ff:b1:4c:80:78:84:5a:d3: 93:2c:04:4d:fc:9f:22:21:10:69:eb:3c:6d:0c:1a: df:3d:1b:7e:e3:fb:27:84:02:88:06:fc:8c:d0:a1: 55:22:3f:3d:b0:3d:9f:cd:18:44:71:81:ab:71:36: b3:f9:17:81:34:3e:cb:9b:8f:6a:2d:67:c7:4f:0f: bc:6e:62:36:7c:a1:bc:c1:7d:d0:3d:67:02:5e:0f: c4:8a:78:b6:08:b1:a7:1b:98:d4:36:85:43:4e:24: 2f:e1:d4:98:6d:0f:da:8d:fe:be:4a:2b:6f:f8:b8: d9:22:87:8e:7b:66:51:ce:c4:c0:94:2a:d0:9b:d0: 37:bb:a4:28:c4:46:8f:a0:e7:84:94:ba:71:6d:e8: b5:9b:d7:b0:84:53:9e:23:d9:4d:27:69:ef:8f:db: 03:c4:92:4f:4b:42:92:1a:b8:bb:6d:5f:85:ca:9a: f5:28:b5:64:e3:e3:9f:cd:23:a8:1a:e8:ca:75:8f: 6d:28:a6:7a:b5:d3:5a:b7:40:80:d5:41:11:6a:e7: c0:73:ce:17:05:ce:c3:a6:d9:10:e9:6b:05:66:36: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:03:F9:3A:07:40:28:17:CF:A3:B9:21:BD:F1:14:EA:A2:60:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:69:4c:c6:55:84:50:73:fd:00:aa:25:ae:ce:53:c6:b6:49: ea:b1:bc:1c:60:0c:d5:77:78:7f:c5:57:ea:5a:17:98:0e:cb: b4:81:a9:b9:aa:d7:ed:b8:c1:92:cc:e2:a3:95:15:a7:9b:f2: f2:a6:89:cb:92:3c:e7:70:47:f9:fe:ef:6f:30:06:77:13:f1: 33:83:84:d2:20:7c:9e:58:45:28:f5:f1:90:a1:a6:3f:1a:6d: b6:04:7f:56:09:7b:84:67:03:26:83:c4:ea:c4:b6:2d:20:a9: ea:ca:42:94:db:db:57:88:91:97:bd:73:06:94:38:19:b8:47: 31:82:19:94:b8:08:88:35:a0:4d:2e:85:10:c8:35:92:dd:82: b7:90:e6:f8:0b:ba:b5:45:ba:d2:2a:57:27:09:78:f9:94:02: 5f:6c:38:64:35:9f:ad:16:47:af:84:ab:b9:36:cd:de:e9:6a: d1:61:c5:cd:f0:23:dd:0b:2d:07:28:0b:27:16:f0:23:f1:aa: 41:c4:3f:50:c5:0c:5d:51:82:ae:72:4a:36:21:78:d0:ca:5d: d7:5d:1d:c1:d0:a3:a8:40:78:59:db:03:89:22:bc:25:e2:0d: b2:09:db:9e:0f:37:d5:8e:46:60:11:c0:2f:4d:8a:aa:0c:f4: e6:36:64:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9zV++fib8I/gV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NzUzMjdlNjQtYjJiMy00OTQwLWI1YzUtZGYwNjA4NzMwOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vsV5Dyp3hYPfM+nHbg3dZUagvx7A2je4Oli Olv/lqXec55i/7FMgHiEWtOTLARN/J8iIRBp6zxtDBrfPRt+4/snhAKIBvyM0KFV Ij89sD2fzRhEcYGrcTaz+ReBND7Lm49qLWfHTw+8bmI2fKG8wX3QPWcCXg/Eini2 CLGnG5jUNoVDTiQv4dSYbQ/ajf6+Sitv+LjZIoeOe2ZRzsTAlCrQm9A3u6QoxEaP oOeElLpxbei1m9ewhFOeI9lNJ2nvj9sDxJJPS0KSGri7bV+Fypr1KLVk4+OfzSOo GujKdY9tKKZ6tdNat0CA1UERaufAc84XBc7DptkQ6WsFZjY8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITzA/k6B0AoF8+juSG98RTqomA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTc1YjQzOGMtNDMzYy0z NWNmLWIwYzItMmEyNDVkZjQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdpTMZVhFBz/QCqJa7OU8a2SeqxvBxgDNV3eH/FV+paF5gOy7SBqbmq 1+24wZLM4qOVFaeb8vKmicuSPOdwR/n+728wBncT8TODhNIgfJ5YRSj18ZChpj8a bbYEf1YJe4RnAyaDxOrEti0gqerKQpTb21eIkZe9cwaUOBm4RzGCGZS4CIg1oE0u hRDINZLdgreQ5vgLurVFutIqVycJePmUAl9sOGQ1n60WR6+Eq7k2zd7patFhxc3w I90LLQcoCycW8CPxqkHEP1DFDF1Rgq5ySjYheNDKXdddHcHQo6hAeFnbA4kivCXi DbIJ254PN9WORmARwC9NiqoM9OY2ZIg= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:38 2025 by rpki-client