$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/af78bd01-e9d0-3b18-8585-fe8cd7d7f685.roa File: af78bd01-e9d0-3b18-8585-fe8cd7d7f685.roa (raw, json) Hash identifier: bhLhkPguf0K4Mv9514aWj4STvQISl6IRR1nmkeicG0E= Subject key identifier: 45:B1:09:E3:1E:6A:17:7F:01:3B:F4:B0:70:1B:C0:98:52:28:DD:5B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AD5615DBEF7F1178920876360 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/af78bd01-e9d0-3b18-8585-fe8cd7d7f685.roa Signing time: Tue 12 Aug 2025 16:04:07 +0000 ROA not before: Tue 12 Aug 2025 16:04:07 +0000 ROA not after: Mon 10 Nov 2025 17:04:07 +0000 asID: 2914 IP address blocks: 50.3.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:61:5d:be:f7:f1:17:89:20:87:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 12 16:04:07 2025 GMT Not After : Nov 10 17:04:07 2025 GMT Subject: CN=cbbac361-1b04-4706-a5e8-82fffb90dd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:01:05:80:64:42:90:19:8d:7e:ef:81:0c: 16:ec:12:5f:01:21:83:ab:26:93:5d:52:88:2f:58: 74:21:00:73:00:80:7b:00:b2:eb:96:d0:4a:cd:7f: a9:00:76:c6:2e:57:62:f9:70:13:72:d7:5c:87:16: 26:d2:8f:dc:38:57:9c:65:91:d2:ca:22:e9:0d:39: cc:eb:31:99:7e:eb:ed:42:1b:78:c2:e9:99:3c:b6: 63:97:54:a4:9d:8b:0a:68:87:95:21:23:2e:6f:5f: 71:d1:04:05:c2:6a:21:97:4a:1f:27:35:e1:8b:96: f8:5f:f0:e9:6d:eb:db:5c:c7:3f:a6:18:3e:99:1f: 7e:bb:e5:84:73:6a:0f:12:53:37:65:fc:3f:11:fe: 38:1f:c3:20:5f:d2:6e:10:41:ca:3c:63:89:09:19: 97:68:3d:62:95:51:37:e4:02:30:66:e0:c4:9f:f7: f7:a3:18:75:69:89:a6:c3:1e:6d:34:a7:6a:f9:52: 18:7e:97:71:2e:59:aa:c9:c4:33:e2:c6:49:78:b7: 50:01:9c:21:fc:4f:bd:99:c4:82:8e:ae:9e:be:58: 28:77:0b:55:40:84:2e:d0:1c:ae:77:c3:45:0c:af: 3e:39:79:cc:18:b9:bd:d2:21:2a:32:ba:7e:ed:88: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:09:E3:1E:6A:17:7F:01:3B:F4:B0:70:1B:C0:98:52:28:DD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/af78bd01-e9d0-3b18-8585-fe8cd7d7f685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e2:7f:c6:43:7e:3a:1b:b6:31:4b:f7:de:a2:ac:e0:f7:09: 67:75:f3:d7:46:17:35:2b:9e:66:34:c4:af:6c:3c:32:95:39: 02:f6:cd:71:42:59:90:85:cf:b0:8b:22:13:83:77:9d:1c:1e: 99:33:c4:ff:7e:fd:71:f1:ea:75:24:cd:6f:aa:54:a1:d3:b8: e6:3e:f9:a9:ba:82:1b:b5:a5:05:70:84:f5:09:95:2f:b6:83: 6e:4c:e9:62:d4:e8:81:66:d8:ed:ab:8a:ab:eb:b7:d0:17:e9: 7e:87:8a:f8:10:09:bc:4f:ec:15:63:1e:be:47:dc:c9:b8:55: 1b:1b:39:97:43:de:9e:1a:df:3e:4f:b8:73:32:96:f4:a5:81: 55:54:20:5e:8f:6e:ab:42:da:6f:61:80:8e:be:17:5c:e5:60: 74:bf:5b:aa:2a:f2:b9:56:37:e9:06:a3:f2:2c:ee:e0:65:31: 19:56:e2:12:d4:f1:1c:18:a8:6b:cb:73:ca:be:f9:46:87:5b: 41:7b:6b:1b:c1:e2:6b:ca:e7:0d:78:3b:4c:e8:d5:f6:d0:a8: 47:2b:ad:97:62:6f:51:2e:d3:b0:dc:d4:9c:c6:89:77:d2:97: 76:6f:38:ce:9f:99:b9:08:b2:33:9e:5b:01:38:09:69:28:de: 77:b6:4e:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVYV2+9/EXiSCHY2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxMjE2MDQwN1oXDTI1MTExMDE3MDQwN1owLzEtMCsGA1UEAxMk Y2JiYWMzNjEtMWIwNC00NzA2LWE1ZTgtODJmZmZiOTBkZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqUBBYBkQpAZjX7vgQwW7BJfASGDqyaTXVKI L1h0IQBzAIB7ALLrltBKzX+pAHbGLldi+XATctdchxYm0o/cOFecZZHSyiLpDTnM 6zGZfuvtQht4wumZPLZjl1SknYsKaIeVISMub19x0QQFwmohl0ofJzXhi5b4X/Dp bevbXMc/phg+mR9+u+WEc2oPElM3Zfw/Ef44H8MgX9JuEEHKPGOJCRmXaD1ilVE3 5AIwZuDEn/f3oxh1aYmmwx5tNKdq+VIYfpdxLlmqycQz4sZJeLdQAZwh/E+9mcSC jq6evlgodwtVQIQu0Byud8NFDK8+OXnMGLm90iEqMrp+7YjaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWxCeMeahd/ATv0sHAbwJhSKN1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWY3OGJkMDEtZTlkMC0z YjE4LTg1ODUtZmU4Y2Q3ZDdmNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7if8ZDfjobtjFL996irOD3CWd189dGFzUrnmY0xK9sPDKVOQL2zXFC WZCFz7CLIhODd50cHpkzxP9+/XHx6nUkzW+qVKHTuOY++am6ghu1pQVwhPUJlS+2 g25M6WLU6IFm2O2riqvrt9AX6X6HivgQCbxP7BVjHr5H3Mm4VRsbOZdD3p4a3z5P uHMylvSlgVVUIF6PbqtC2m9hgI6+F1zlYHS/W6oq8rlWN+kGo/Is7uBlMRlW4hLU 8RwYqGvLc8q++UaHW0F7axvB4mvK5w14O0zo1fbQqEcrrZdib1Eu07Dc1JzGiXfS l3ZvOM6fmbkIsjOeWwE4CWko3ne2TqY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:59 2025 by rpki-client