$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa File: a20e0277-c9c3-3cea-abfc-1a4724175152.roa (raw, json) Hash identifier: cB5KdwdIvRdSszInacmIdt2/4tUz3LiBsntwSvmhXq8= Subject key identifier: 56:5D:2A:40:82:3E:35:B6:DC:E4:F5:4E:11:5A:DA:10:44:44:34:64 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AD562A50AA5D297ED3651D290 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa Signing time: Tue 12 Aug 2025 16:06:42 +0000 ROA not before: Tue 12 Aug 2025 16:06:42 +0000 ROA not after: Mon 10 Nov 2025 17:06:42 +0000 asID: 2914 IP address blocks: 50.3.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:62:a5:0a:a5:d2:97:ed:36:51:d2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 12 16:06:42 2025 GMT Not After : Nov 10 17:06:42 2025 GMT Subject: CN=7dff90b5-4955-4cf9-bfa0-1ef517319e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:d0:92:d9:36:11:21:89:96:29:c6:05:11: 13:dc:50:58:42:bb:bc:7a:45:13:af:16:ca:e7:5a: 6e:99:11:0d:c1:8d:5f:a0:cc:e7:03:3a:c9:f2:a2: ce:b0:94:1a:8a:c1:e2:2c:96:46:06:af:82:b6:85: 73:88:58:7d:10:0a:57:fa:f2:fa:c3:4d:4c:1c:4a: 51:98:bb:02:87:5b:23:3a:4c:ac:2b:15:ba:7d:ad: c4:c3:43:d8:d5:33:dd:8a:c3:51:92:fc:a8:ef:d1: cf:85:ad:1c:b2:19:94:6e:0e:51:ab:a5:36:f5:36: 44:7f:c3:ef:5e:63:7d:b3:ca:87:f1:80:57:79:6f: 36:a3:3b:6c:22:f8:c1:3a:3c:7e:33:4d:df:7e:40: e8:44:c0:e8:da:3a:fe:5c:0f:da:02:bb:02:ad:93: 33:09:0a:5b:1f:c9:bb:aa:7c:ad:4e:49:aa:b2:d0: 8b:9e:38:27:2e:8a:cb:23:8f:74:a6:fb:31:00:e8: 91:d6:31:5b:9c:c0:42:3c:3f:6d:62:f9:98:30:95: 05:ee:77:06:86:67:01:86:86:6c:bb:80:0a:db:65: 9e:0e:1e:04:35:0e:bc:3f:94:1d:eb:d9:c7:60:88: 74:19:52:68:f9:0f:54:ae:f7:bb:8e:e6:b9:52:85: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5D:2A:40:82:3E:35:B6:DC:E4:F5:4E:11:5A:DA:10:44:44:34:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bd:d2:e1:c5:a9:b2:e6:a0:32:0a:82:e9:0e:60:a3:64:98: e3:ab:70:da:9f:78:3f:1a:d2:a3:1b:0b:d6:ac:fe:16:0c:fa: a2:cf:d1:b1:ea:0a:7b:3d:21:71:57:45:0c:ef:8b:63:96:07: af:54:27:62:d0:09:4b:4a:ce:a8:3d:b9:95:d5:b7:1b:0d:38: 46:d1:16:29:f2:bb:4c:2f:7a:d0:51:39:80:fe:f0:f9:b3:7d: c2:b2:23:29:42:a1:29:48:05:e3:10:54:16:b9:22:cd:25:a1: cc:f4:64:0c:47:4b:ec:89:f9:32:5f:43:58:d3:6e:df:1c:ea: ac:db:bd:76:18:f2:1f:6d:64:26:0d:8e:c6:4b:14:bf:59:bf: bd:8e:19:53:7d:4c:a3:3f:de:8a:8a:04:c4:1d:e1:cc:e8:80: 76:8d:7c:ce:d6:02:2d:f0:2e:3f:89:ca:41:96:1e:8c:29:b6: fb:b7:80:8f:88:a7:c7:af:2c:bf:8c:1d:9a:d9:1f:90:ca:f7: ee:7e:da:5e:6f:b7:d3:c7:0b:2d:73:ea:c9:82:58:cc:09:dc: d4:d0:09:3c:8f:68:a6:89:9c:78:8d:66:d5:9a:28:86:fd:15: f5:4e:67:c7:5e:e1:ba:b9:60:2c:bf:50:fd:ee:ca:a9:2b:48: 5b:db:d8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVYqUKpdKX7TZR0pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxMjE2MDY0MloXDTI1MTExMDE3MDY0MlowLzEtMCsGA1UEAxMk N2RmZjkwYjUtNDk1NS00Y2Y5LWJmYTAtMWVmNTE3MzE5ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQjQktk2ESGJlinGBRET3FBYQru8ekUTrxbK 51pumRENwY1foMznAzrJ8qLOsJQaisHiLJZGBq+CtoVziFh9EApX+vL6w01MHEpR mLsCh1sjOkysKxW6fa3Ew0PY1TPdisNRkvyo79HPha0cshmUbg5Rq6U29TZEf8Pv XmN9s8qH8YBXeW82oztsIvjBOjx+M03ffkDoRMDo2jr+XA/aArsCrZMzCQpbH8m7 qnytTkmqstCLnjgnLorLI490pvsxAOiR1jFbnMBCPD9tYvmYMJUF7ncGhmcBhoZs u4AK22WeDh4ENQ68P5Qd69nHYIh0GVJo+Q9Urve7jua5UoXjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZdKkCCPjW23OT1ThFa2hBERDRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTIwZTAyNzctYzljMy0z Y2VhLWFiZmMtMWE0NzI0MTc1MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK90uHFqbLmoDIKgukOYKNkmOOrcNqfeD8a0qMbC9as/hYM+qLP0bHq Cns9IXFXRQzvi2OWB69UJ2LQCUtKzqg9uZXVtxsNOEbRFinyu0wvetBROYD+8Pmz fcKyIylCoSlIBeMQVBa5Is0locz0ZAxHS+yJ+TJfQ1jTbt8c6qzbvXYY8h9tZCYN jsZLFL9Zv72OGVN9TKM/3oqKBMQd4czogHaNfM7WAi3wLj+JykGWHowptvu3gI+I p8evLL+MHZrZH5DK9+5+2l5vt9PHCy1z6smCWMwJ3NTQCTyPaKaJnHiNZtWaKIb9 FfVOZ8de4bq5YCy/UP3uyqkrSFvb2Ok= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:18 2025 by rpki-client