$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa File: b9dca8d7-0acc-3d24-8347-eae678616a28.roa (raw, json) Hash identifier: YoixFHOJnrrQ0rd9Ew4r8EmiNo8aYtZOrefOVtpvguc= Subject key identifier: ED:58:87:17:95:71:99:43:23:0C:21:D6:B2:3D:EF:FC:72:D3:28:43 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6CB1B430AC89B8F8799620 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 50.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b1:b4:30:ac:89:b8:f8:79:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=0b08d420-dace-4fcd-ae1f-e6c5eaccfd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:03:dc:0b:07:66:e1:0d:b4:b5:98:d7:fa: a7:74:4c:5d:03:4d:65:a4:fe:dd:e7:52:bf:34:b8: 89:b2:db:3a:3a:98:74:0a:fc:e9:9f:b0:fc:7d:60: 85:b3:32:ec:49:1f:18:85:e6:fd:c2:8d:a9:00:ae: f9:fa:7f:85:92:8c:93:af:b4:3f:bf:d7:5a:88:d0: fc:3b:e4:06:87:5b:54:c1:11:56:fb:6d:8f:96:ea: d1:61:bf:9e:cd:b8:c8:59:bd:36:f2:76:84:e5:35: 97:7d:b7:b3:fd:1b:fa:59:5b:49:2e:dd:6d:7c:d2: 6d:6f:3f:1e:83:c6:be:d1:70:30:5f:13:05:f5:94: 0e:6b:43:8d:7b:a4:77:b1:29:4e:bd:1b:b7:bd:dc: 37:74:18:21:7d:9a:0b:a3:8c:89:0c:66:5c:f8:d9: 9d:64:57:3b:53:6b:c4:f8:a5:1e:2d:41:a4:72:70: ad:01:b8:83:03:6e:c9:af:0f:cc:2f:91:c2:41:cd: d9:29:a3:69:9f:b7:e2:30:a9:fe:2d:6b:b9:23:4f: f4:c7:32:de:fe:91:4f:ec:a8:0c:65:e4:f4:0b:3d: c2:a4:60:98:06:57:b9:9a:1c:7b:8e:06:59:46:95: 77:92:71:fb:cf:37:75:c8:28:af:7a:75:4b:2a:71: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:58:87:17:95:71:99:43:23:0C:21:D6:B2:3D:EF:FC:72:D3:28:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b7:9a:8d:f1:a9:6c:87:39:92:04:5d:76:62:9c:8b:7c:dd: a2:6f:d0:f9:b4:38:26:0c:21:f6:1f:ae:ca:2e:53:0a:ec:3b: e2:fc:b8:62:fe:d4:b6:5b:77:ee:11:43:cc:a7:75:bc:1e:af: 3a:3a:62:e3:b4:51:ae:ea:44:36:94:10:a0:eb:c6:ac:44:d3: e7:24:6f:ea:1c:d9:1c:c4:e8:6f:fc:b5:20:ae:6a:a6:fb:60: 38:7a:3c:24:f7:0f:9a:34:8c:7f:cd:38:13:4c:40:55:1e:3c: e7:eb:8a:f8:45:8e:11:2d:b0:24:fd:2e:23:e0:06:5b:f8:11: 55:a1:78:7d:e6:22:a8:ae:96:8a:33:39:aa:a6:40:5c:a4:ae: 22:06:ff:02:ff:14:9d:ef:42:84:51:f5:ce:66:6a:d9:90:e9: b1:b2:37:bf:8e:55:04:f6:89:a7:b0:df:37:19:d2:3c:19:d6: 94:fc:15:38:f5:2d:3d:f1:b3:f3:c8:ce:6c:46:a4:e8:12:cf: f6:53:f3:62:39:00:2d:12:5a:76:ee:b5:9f:7e:76:23:b3:d4: b5:6d:4b:39:47:f8:32:a7:2f:da:d3:dd:b2:a4:6d:f4:b9:dc: f3:4e:59:4c:9c:d1:53:ad:64:2b:cd:6e:a9:da:93:25:cc:88: 0a:e5:cf:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLG0MKyJuPh5liAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MGIwOGQ0MjAtZGFjZS00ZmNkLWFlMWYtZTZjNWVhY2NmZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQQD3AsHZuENtLWY1/qndExdA01lpP7d51K/ NLiJsts6Oph0Cvzpn7D8fWCFszLsSR8Yheb9wo2pAK75+n+FkoyTr7Q/v9daiND8 O+QGh1tUwRFW+22PlurRYb+ezbjIWb028naE5TWXfbez/Rv6WVtJLt1tfNJtbz8e g8a+0XAwXxMF9ZQOa0ONe6R3sSlOvRu3vdw3dBghfZoLo4yJDGZc+NmdZFc7U2vE +KUeLUGkcnCtAbiDA27Jrw/ML5HCQc3ZKaNpn7fiMKn+LWu5I0/0xzLe/pFP7KgM ZeT0Cz3CpGCYBle5mhx7jgZZRpV3knH7zzd1yCivenVLKnFbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1YhxeVcZlDIwwh1rI97/xy0yhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjlkY2E4ZDctMGFjYy0z ZDI0LTgzNDctZWFlNjc4NjE2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS3mo3xqWyHOZIEXXZinIt83aJv0Pm0OCYMIfYfrsouUwrsO+L8uGL+ 1LZbd+4RQ8yndbwerzo6YuO0Ua7qRDaUEKDrxqxE0+ckb+oc2RzE6G/8tSCuaqb7 YDh6PCT3D5o0jH/NOBNMQFUePOfrivhFjhEtsCT9LiPgBlv4EVWheH3mIqiulooz OaqmQFykriIG/wL/FJ3vQoRR9c5matmQ6bGyN7+OVQT2iaew3zcZ0jwZ1pT8FTj1 LT3xs/PIzmxGpOgSz/ZT82I5AC0SWnbutZ9+diOz1LVtSzlH+DKnL9rT3bKkbfS5 3PNOWUyc0VOtZCvNbqnakyXMiArlz9w= -----END CERTIFICATE-----Generated at Wed Oct 8 15:38:58 2025 by rpki-client