$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa File: 3447dc73-c5f7-3def-a446-a22e233a8da2.roa (raw, json) Hash identifier: dMlf1UyGkF9w9oATTzkxuhgADveMoQSLtC47K30I7tE= Subject key identifier: 49:80:76:AA:64:6E:69:32:EC:18:67:C3:E8:57:FD:E7:C9:73:6D:21 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D3B34D34408C1995058F319A0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 214432 IP address blocks: 50.2.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d3:44:08:c1:99:50:58:f3:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=60bc503e-ff41-4914-8837-5b4f0bbaa1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:29:6c:54:b9:7d:68:5b:9d:a0:83:6b:f5: e8:05:7c:77:87:87:c4:78:81:4d:da:6e:c9:bc:d6: e6:db:3b:74:d6:6d:59:f3:4e:2d:ef:37:b8:bf:ba: 41:c1:20:e5:7e:c9:58:a8:7c:3e:07:0d:c7:dc:f8: 63:00:47:57:48:69:2e:e4:c1:60:b6:cd:0f:ec:bc: ad:b3:8d:fc:fa:d6:97:80:1a:db:a0:60:ea:8e:35: fa:c4:74:f0:7e:a0:00:c2:6b:84:54:df:75:be:76: 35:05:58:ec:9c:19:62:b9:9e:7f:2b:28:19:33:2c: d8:73:cf:7b:c6:23:2a:fc:38:f2:1b:a4:be:ce:be: 56:0e:c1:03:26:5c:4a:b1:5e:97:a1:66:ce:bc:d1: c3:6f:83:ab:fd:33:69:3f:f9:bc:da:f1:0a:9a:c5: 81:01:69:13:f3:56:26:bd:23:c7:b4:69:ee:cd:d7: 57:ac:e7:88:ba:00:da:3f:ba:06:38:76:7d:03:b7: 6d:3f:29:0f:a8:4a:dc:9c:9d:af:c7:92:09:98:63: 6f:8b:bb:2a:18:da:81:8b:0f:29:49:e2:5e:7f:37: 96:7b:5f:fe:12:63:8b:72:be:d8:b3:2a:74:0e:89: eb:7a:53:1a:0f:49:ab:9e:ef:cb:ab:ac:29:12:65: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:80:76:AA:64:6E:69:32:EC:18:67:C3:E8:57:FD:E7:C9:73:6D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ff:92:e2:71:26:76:a7:8a:f7:22:2f:ac:2f:a8:e0:28:9f: ea:48:af:28:5a:82:bd:6f:9c:db:c3:9a:c1:47:a5:ac:dc:f0: 6a:0b:d1:28:a6:f4:41:89:28:9e:91:9a:c8:1b:1b:23:8d:d7: 88:14:ab:3d:8f:5c:ff:94:10:64:ff:bf:7c:d0:a9:a2:ea:4b: 5b:e1:91:de:d7:ab:b0:e3:aa:c4:8c:f0:95:47:f7:51:85:f0: 74:b2:e5:5d:37:c1:6b:7f:e3:88:bb:0b:31:b9:c9:27:3c:a4: b0:6f:f0:f3:bb:b6:de:3f:1a:0f:94:36:40:93:1c:05:d5:72: 68:0d:2e:07:f7:af:a5:3c:88:61:03:21:a9:3f:d5:b6:88:5e: a9:1d:1b:aa:69:21:25:c3:40:9b:13:ec:b3:63:22:88:b9:e7: 64:fe:4b:f6:7d:f0:00:20:08:1e:d3:8c:bd:c8:33:90:32:47: cf:a7:05:f5:78:9b:f5:64:e3:e0:1b:48:a3:a8:89:3e:85:d7: dd:03:69:43:90:68:25:eb:b3:70:19:29:b3:35:85:f9:d9:20: ae:5e:6f:a2:fa:67:9e:05:b2:bc:fb:6f:af:39:44:b8:2e:a9: ce:0c:f1:07:c8:af:13:1a:42:e4:f5:34:57:72:42:d4:0d:bc: a8:a2:d7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNNECMGZUFjzGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NjBiYzUwM2UtZmY0MS00OTE0LTg4MzctNWI0ZjBiYmFhMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWgpbFS5fWhbnaCDa/XoBXx3h4fEeIFN2m7J vNbm2zt01m1Z804t7ze4v7pBwSDlfslYqHw+Bw3H3PhjAEdXSGku5MFgts0P7Lyt s438+taXgBrboGDqjjX6xHTwfqAAwmuEVN91vnY1BVjsnBliuZ5/KygZMyzYc897 xiMq/DjyG6S+zr5WDsEDJlxKsV6XoWbOvNHDb4Or/TNpP/m82vEKmsWBAWkT81Ym vSPHtGnuzddXrOeIugDaP7oGOHZ9A7dtPykPqErcnJ2vx5IJmGNvi7sqGNqBiw8p SeJefzeWe1/+EmOLcr7Ysyp0DonrelMaD0mrnu/Lq6wpEmXanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmAdqpkbmky7Bhnw+hX/efJc20hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzQ0N2RjNzMtYzVmNy0z ZGVmLWE0NDYtYTIyZTIzM2E4ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn/kuJxJnanivciL6wvqOAon+pIryhagr1vnNvDmsFHpazc8GoL0Sim 9EGJKJ6RmsgbGyON14gUqz2PXP+UEGT/v3zQqaLqS1vhkd7Xq7DjqsSM8JVH91GF 8HSy5V03wWt/44i7CzG5ySc8pLBv8PO7tt4/Gg+UNkCTHAXVcmgNLgf3r6U8iGED Iak/1baIXqkdG6ppISXDQJsT7LNjIoi552T+S/Z98AAgCB7TjL3IM5AyR8+nBfV4 m/Vk4+AbSKOoiT6F190DaUOQaCXrs3AZKbM1hfnZIK5eb6L6Z54Fsrz7b685RLgu qc4M8QfIrxMaQuT1NFdyQtQNvKii12o= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:24 2026 by rpki-client