$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa File: 8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json) Hash identifier: f7i/TXRh9Yd9Y8i4TYbwzp+x7XsN0mUp1PLhikDrjhM= Subject key identifier: 59:35:5E:41:B5:49:2F:02:A9:89:DD:A0:9D:9A:C0:47:13:16:BE:41 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EA798A613CD282700B85E3200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 50.2.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:a6:13:cd:28:27:00:b8:5e:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9a467648-ed13-4839-87c5-aa9db562a365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:c5:06:1c:2d:28:c9:56:48:62:0a:0b:73: 76:4f:7a:15:fa:ae:8b:d9:20:a2:bf:9e:9f:33:bc: a6:d6:6c:5e:b9:15:29:8a:29:73:56:d8:ff:48:81: bd:53:6c:01:16:a8:a2:a0:90:27:5a:52:ba:a1:ec: 05:00:1b:db:bd:f9:e6:ec:f5:e9:14:e4:5a:a9:3e: 65:3b:ac:e5:11:8e:6d:f4:f5:25:98:7a:f3:7c:84: 4c:25:26:13:d9:66:0e:cd:3a:8a:61:9a:b4:33:78: 70:08:08:ea:bf:6f:7d:b3:43:d5:60:68:d4:d7:3e: 0d:aa:f4:b2:fb:26:f4:4d:10:60:b9:54:2f:60:3b: fc:0e:ec:5b:12:45:f2:0f:8c:dc:e5:ea:74:0f:90: 0c:0b:03:f0:c0:52:98:58:ef:f5:f0:f0:97:fa:e8: d8:fd:48:57:46:f6:92:d7:20:99:c8:72:b0:f4:8d: ba:f2:37:bb:fa:b7:31:01:9f:28:46:c5:c6:f1:e4: aa:f6:8f:86:6a:25:c5:72:70:f1:f7:ab:54:cb:9a: 4e:17:da:91:27:96:ed:3c:4e:df:01:e1:59:fe:02: c5:6f:7b:5d:0d:fc:94:8e:33:e9:56:5d:ca:a5:dc: f7:d6:f1:29:6a:e9:9d:37:be:88:fb:42:5f:17:2b: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:5E:41:B5:49:2F:02:A9:89:DD:A0:9D:9A:C0:47:13:16:BE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a2:36:4e:da:2c:0b:0d:60:87:74:24:49:b7:e2:8a:c3:92: 73:68:0b:81:06:98:ac:51:d2:f5:c4:7a:98:9c:86:7c:1f:4e: 7b:66:6c:d6:d7:37:aa:8a:17:3b:79:ad:27:76:8b:bc:01:1f: 0c:b4:dd:a8:81:b3:5f:ce:d1:77:8d:6b:97:dc:0e:fb:6f:c8: d2:d9:b7:19:a5:ad:13:cb:f9:4d:b8:3d:14:47:2c:a4:63:22: a4:53:e8:7f:43:f3:ed:f6:50:85:d0:27:f9:1d:73:9c:f3:33: 22:8e:4d:62:23:07:bb:72:5e:c0:38:d3:cc:00:09:17:ad:42: 06:68:50:27:ce:0d:af:cf:0a:5f:1a:71:74:e2:8a:07:ef:9e: be:0b:41:f7:d2:02:05:9e:71:23:6f:81:4c:dc:7a:d3:6a:09: f7:89:13:10:f6:bc:05:21:25:c3:d0:5d:d8:c2:15:f5:fd:87: 7b:3f:cc:d4:2d:21:51:c3:61:a9:c1:8e:c7:e8:84:02:a1:28: d6:0d:3b:19:5f:c5:0c:0e:08:68:bc:21:40:07:24:82:53:f7: f0:3d:5b:2a:83:22:96:04:c2:1f:3c:40:f4:8a:7d:cd:ee:26: 75:5e:d7:c9:d5:53:f9:83:25:ab:2b:19:46:25:4a:4f:2f:4f: 52:7c:d3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKYTzSgnALheMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWE0Njc2NDgtZWQxMy00ODM5LTg3YzUtYWE5ZGI1NjJhMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7FBhwtKMlWSGIKC3N2T3oV+q6L2SCiv56f M7ym1mxeuRUpiilzVtj/SIG9U2wBFqiioJAnWlK6oewFABvbvfnm7PXpFORaqT5l O6zlEY5t9PUlmHrzfIRMJSYT2WYOzTqKYZq0M3hwCAjqv299s0PVYGjU1z4NqvSy +yb0TRBguVQvYDv8DuxbEkXyD4zc5ep0D5AMCwPwwFKYWO/18PCX+ujY/UhXRvaS 1yCZyHKw9I268je7+rcxAZ8oRsXG8eSq9o+GaiXFcnDx96tUy5pOF9qRJ5btPE7f AeFZ/gLFb3tdDfyUjjPpVl3Kpdz31vEpaumdN76I+0JfFysFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk1XkG1SS8CqYndoJ2awEcTFr5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGE1MjQ1MjYtZTI1OS0z NWIxLWE4MGQtZDI3Y2NlYzYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+iNk7aLAsNYId0JEm34orDknNoC4EGmKxR0vXEepichnwfTntmbNbX N6qKFzt5rSd2i7wBHwy03aiBs1/O0XeNa5fcDvtvyNLZtxmlrRPL+U24PRRHLKRj IqRT6H9D8+32UIXQJ/kdc5zzMyKOTWIjB7tyXsA408wACRetQgZoUCfODa/PCl8a cXTiigfvnr4LQffSAgWecSNvgUzcetNqCfeJExD2vAUhJcPQXdjCFfX9h3s/zNQt IVHDYanBjsfohAKhKNYNOxlfxQwOCGi8IUAHJIJT9/A9WyqDIpYEwh88QPSKfc3u JnVe18nVU/mDJasrGUYlSk8vT1J802g= -----END CERTIFICATE-----Generated at Sat Aug 29 05:53:36 2026 by rpki-client