$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa File: ded75a2a-25ad-368f-862d-551b6add182e.roa (raw, json) Hash identifier: CVPSkzy2lyPnJA00rlvKf68ixwWAHj/q1lB/fYI59LU= Subject key identifier: D0:D0:40:23:AF:3C:0C:17:B2:2D:F7:1F:92:31:39:85:EF:CC:A7:C8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584ACE0BADCFC871F614AF471500 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 3257 IP address blocks: 50.2.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ad:cf:c8:71:f6:14:af:47:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=049a2aed-686d-4a22-84f1-f8b8a6d80281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:36:4a:13:93:c8:28:97:dc:58:e4:39:05: 56:52:33:95:99:21:8a:ed:e8:f1:8b:1e:38:d7:fa: 1d:39:a4:6c:1a:4c:61:14:79:64:4a:99:94:20:d8: 6e:ae:fb:d4:af:50:93:6e:cb:02:1e:21:46:30:25: 19:b0:11:9f:09:71:95:84:8c:31:cf:b6:52:37:c9: 7b:75:32:e9:ba:f7:af:24:c1:40:86:44:81:96:aa: 73:ac:b9:1a:ca:57:af:de:b6:c2:2d:d9:f0:c7:5d: 3c:d3:a9:25:fc:1e:0d:8f:ad:d4:28:d1:1d:f1:42: 7b:ef:73:af:4f:fa:f5:d9:bf:88:2c:59:86:4c:d0: 90:a2:7d:32:5e:de:df:fd:f6:42:43:15:db:5c:88: 3b:8b:5f:06:c3:3b:25:af:1f:fa:ce:fc:c3:5f:44: 53:eb:25:9a:2c:52:fb:e1:61:f6:f9:e8:b7:26:e2: 5b:07:0a:52:93:79:3d:5f:bf:11:68:52:2a:82:92: 08:a3:e6:1d:d3:79:ca:30:1f:90:01:ee:44:fd:a6: b3:7b:30:3a:1e:f1:91:0b:36:4d:93:4d:fb:c6:53: 0d:5c:b0:81:0c:79:57:b5:cb:2e:74:6c:84:99:93: dd:04:26:b2:17:38:a4:0a:e2:c6:d0:3c:8f:e3:91: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D0:40:23:AF:3C:0C:17:B2:2D:F7:1F:92:31:39:85:EF:CC:A7:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:82:43:24:07:f8:35:db:8a:6c:33:6f:44:79:5f:bd:83:03: ff:68:e0:46:4b:fd:92:03:05:c4:ca:b1:60:63:d1:e4:b9:39: 5d:80:e2:af:5c:36:d9:89:7f:0d:76:72:0a:58:73:c2:ba:39: 8d:0f:ac:d9:bf:bb:17:7c:c4:99:90:5a:96:09:2d:e0:8a:ff: 20:c0:77:07:a5:ee:a3:44:42:89:3c:bf:eb:bd:40:1c:61:3e: 66:1d:1e:94:4a:25:7d:6d:4d:a0:fd:1e:2b:26:2f:b8:a4:32: f1:9e:13:7d:cc:48:20:bc:8e:4f:b5:d5:16:2f:cb:58:5d:55: 4f:a7:0d:75:78:93:df:31:16:73:e2:bf:2e:fc:0f:2b:1c:d4: 6e:e2:35:52:0d:8d:a3:bf:9a:e7:2b:1f:67:ed:f0:f0:2c:2f: b9:67:78:4b:21:b4:05:6f:92:73:a0:e5:44:65:d3:79:31:5d: 08:dc:ff:99:66:c8:88:75:62:5e:be:bb:15:27:56:5c:0f:14: 89:8a:16:aa:38:20:59:95:fd:00:8d:69:d4:4b:5e:c7:0a:c4: e1:37:df:84:e5:cf:d1:63:00:18:8f:ab:7a:f6:85:fd:a3:45: 28:c7:0a:b0:97:06:a3:8a:87:7b:09:df:c2:e7:47:a9:9a:20: 32:68:d6:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC63PyHH2FK9HFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MDQ5YTJhZWQtNjg2ZC00YTIyLTg0ZjEtZjhiOGE2ZDgwMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcQ2ShOTyCiX3FjkOQVWUjOVmSGK7ejxix44 1/odOaRsGkxhFHlkSpmUINhurvvUr1CTbssCHiFGMCUZsBGfCXGVhIwxz7ZSN8l7 dTLpuvevJMFAhkSBlqpzrLkaylev3rbCLdnwx10806kl/B4Nj63UKNEd8UJ773Ov T/r12b+ILFmGTNCQon0yXt7f/fZCQxXbXIg7i18Gwzslrx/6zvzDX0RT6yWaLFL7 4WH2+ei3JuJbBwpSk3k9X78RaFIqgpIIo+Yd03nKMB+QAe5E/aazezA6HvGRCzZN k037xlMNXLCBDHlXtcsudGyEmZPdBCayFzikCuLG0DyP45ES4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDQQCOvPAwXsi33H5IxOYXvzKfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGVkNzVhMmEtMjVhZC0z NjhmLTg2MmQtNTUxYjZhZGQxODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaCQyQH+DXbimwzb0R5X72DA/9o4EZL/ZIDBcTKsWBj0eS5OV2A4q9c NtmJfw12cgpYc8K6OY0PrNm/uxd8xJmQWpYJLeCK/yDAdwel7qNEQok8v+u9QBxh PmYdHpRKJX1tTaD9HismL7ikMvGeE33MSCC8jk+11RYvy1hdVU+nDXV4k98xFnPi vy78Dysc1G7iNVINjaO/mucrH2ft8PAsL7lneEshtAVvknOg5URl03kxXQjc/5lm yIh1Yl6+uxUnVlwPFImKFqo4IFmV/QCNadRLXscKxOE334Tlz9FjABiPq3r2hf2j RSjHCrCXBqOKh3sJ38LnR6maIDJo1nA= -----END CERTIFICATE-----Generated at Wed Aug 20 13:20:12 2025 by rpki-client