$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa File: 42f3700d-498f-3164-9508-b07e06be2c2d.roa (raw, json) Hash identifier: d6wNwosYMDJpeaaocnIswDufhFjmC8e32xLooebw4LY= Subject key identifier: 18:6F:12:46:29:CB:E4:DC:5E:19:BA:B1:31:80:E9:2D:8E:66:32:B7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1CC7C340B715BDF2F38A5700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 62904 IP address blocks: 50.3.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:c3:40:b7:15:bd:f2:f3:8a:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=84106939-98b4-4173-8912-8b6d4b075e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:94:92:4b:e9:84:0b:67:55:87:ea:4b:27: 3e:dd:ed:92:d8:ca:8b:9f:82:1a:b6:b5:b4:c4:8f: d0:a0:3b:7b:66:0e:cd:40:9f:31:4b:b1:d9:53:b1: 67:2f:4c:64:bd:88:bb:5d:34:a6:5e:d7:d9:76:04: a9:30:67:b6:3a:f7:ad:93:9b:8e:db:ad:f8:b8:9a: 83:9b:a2:eb:22:33:7f:c5:b4:58:45:2b:59:29:e6: 0e:3b:af:5d:4a:03:f5:41:0f:2d:1c:53:b6:c5:99: 73:e4:77:b1:cf:bd:4d:94:ab:cf:24:96:86:90:e8: da:d0:2e:68:76:bd:74:76:bc:2b:45:7e:6c:70:2d: 1c:cb:90:06:35:05:32:85:ba:86:b2:15:90:dd:bb: fe:99:a2:1f:40:be:03:fb:cf:63:c5:e3:ec:fa:94: 77:be:9e:cb:d0:03:a0:bf:4a:57:9d:a5:9a:33:eb: 37:24:46:d9:62:79:34:90:7d:0d:b9:a1:15:46:e9: e6:e2:2b:89:be:38:80:4b:bf:4c:2a:b8:9c:84:40: 36:b3:df:26:63:ce:6a:ed:15:58:22:a3:cf:79:56: 4f:6e:71:33:0e:c4:55:b4:e0:ed:8b:2d:77:2c:ff: 5f:8c:0a:f4:ba:bc:df:dc:d7:d2:91:2c:23:2d:ac: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:12:46:29:CB:E4:DC:5E:19:BA:B1:31:80:E9:2D:8E:66:32:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1e:35:40:23:e0:37:e7:07:03:96:da:31:47:d5:34:9f:88: 50:e9:55:c6:17:bf:37:55:40:2b:a5:68:4f:56:ab:c6:e3:a5: 9e:e1:22:af:7e:44:09:72:9f:aa:5c:09:96:df:bb:54:3b:a0: 9e:e3:30:e5:8f:30:6b:71:a4:1a:e2:4c:d2:98:17:a4:f8:3f: e6:e7:f4:d8:86:98:38:22:a7:71:d2:10:28:88:fd:b4:c4:23: 9e:d7:c5:25:61:34:bb:fc:71:6b:ba:fa:fc:e6:2d:aa:b1:d2: fc:c2:75:75:10:99:3c:a0:e9:d0:d9:8a:ce:28:5e:57:ff:07: cc:e8:a1:6b:16:7e:fe:99:a8:15:f4:e2:02:18:50:20:56:de: 72:4a:19:30:6a:a8:0c:66:b2:1d:70:c4:fc:6b:6a:bd:e7:4a: 05:e9:eb:58:7d:4f:22:de:4d:04:6f:a4:62:91:92:7b:fa:e5: 5b:30:af:11:71:74:d5:d9:73:5c:15:d1:c7:f1:9a:b3:a3:87: 62:99:4b:e0:06:89:9b:e6:7e:4f:07:b8:22:08:68:ec:32:50: cd:e2:db:7f:09:48:f1:c2:cd:b9:13:c9:4e:82:98:19:3b:11: 8c:c2:5a:c3:4f:9f:99:a7:6b:05:22:4c:01:a3:fd:0d:ed:bb: 7e:13:a1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx8NAtxW98vOKVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ODQxMDY5MzktOThiNC00MTczLTg5MTItOGI2ZDRiMDc1ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv6UkkvphAtnVYfqSyc+3e2S2MqLn4IatrW0 xI/QoDt7Zg7NQJ8xS7HZU7FnL0xkvYi7XTSmXtfZdgSpMGe2Ovetk5uO2634uJqD m6LrIjN/xbRYRStZKeYOO69dSgP1QQ8tHFO2xZlz5Hexz71NlKvPJJaGkOja0C5o dr10drwrRX5scC0cy5AGNQUyhbqGshWQ3bv+maIfQL4D+89jxePs+pR3vp7L0AOg v0pXnaWaM+s3JEbZYnk0kH0NuaEVRunm4iuJvjiAS79MKrichEA2s98mY85q7RVY IqPPeVZPbnEzDsRVtODtiy13LP9fjAr0urzf3NfSkSwjLawOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhvEkYpy+TcXhm6sTGA6S2OZjK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDJmMzcwMGQtNDk4Zi0z MTY0LTk1MDgtYjA3ZTA2YmUyYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8eNUAj4DfnBwOW2jFH1TSfiFDpVcYXvzdVQCulaE9Wq8bjpZ7hIq9+ RAlyn6pcCZbfu1Q7oJ7jMOWPMGtxpBriTNKYF6T4P+bn9NiGmDgip3HSECiI/bTE I57XxSVhNLv8cWu6+vzmLaqx0vzCdXUQmTyg6dDZis4oXlf/B8zooWsWfv6ZqBX0 4gIYUCBW3nJKGTBqqAxmsh1wxPxrar3nSgXp61h9TyLeTQRvpGKRknv65VswrxFx dNXZc1wV0cfxmrOjh2KZS+AGiZvmfk8HuCIIaOwyUM3i238JSPHCzbkTyU6CmBk7 EYzCWsNPn5mnawUiTAGj/Q3tu34ToUc= -----END CERTIFICATE-----Generated at Sun Oct 4 11:41:36 2026 by rpki-client