$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a681bfc-1cbd-340a-9aea-be28f37a7ee2.roa File: 5a681bfc-1cbd-340a-9aea-be28f37a7ee2.roa (raw, json) Hash identifier: rAJXg+3QeJpZgLTxiQsk7CDKYJIg8JDB2Y5BqCg57bw= Subject key identifier: DF:D8:84:2A:4B:23:6C:4D:AE:11:38:5A:42:A0:67:C1:58:1B:3D:78 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F52950007579C2B9976476580 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a681bfc-1cbd-340a-9aea-be28f37a7ee2.roa Signing time: Mon 28 Sep 2026 07:31:57 +0000 ROA not before: Mon 28 Sep 2026 07:31:57 +0000 ROA not after: Sun 27 Dec 2026 08:31:57 +0000 asID: 62904 IP address blocks: 50.2.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:95:00:07:57:9c:2b:99:76:47:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 07:31:57 2026 GMT Not After : Dec 27 08:31:57 2026 GMT Subject: CN=b4671183-4522-4695-ad30-c2fb221d0f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:46:1c:81:56:59:e0:77:67:44:4a:49:07: f4:f4:b5:64:2b:7f:21:cb:22:27:3d:cc:d1:6b:44: 5b:5c:9c:bb:97:7d:ea:b5:e5:2a:c4:b6:82:b3:fc: 6b:61:1e:a0:4f:a3:79:c4:08:dd:a9:7c:7f:10:46: 3a:17:ff:f2:22:2c:01:83:e0:15:2e:bc:76:29:e6: bc:fa:f1:6e:a5:3a:63:5e:0d:66:2c:10:24:d2:c7: 0b:62:40:5d:f0:37:09:3a:8a:ac:73:4b:a6:01:7b: 93:b5:0d:32:b4:6d:d3:ef:45:a2:bd:cd:c1:b0:6a: 45:ba:6f:c4:9e:aa:d2:58:f4:18:05:d4:33:47:b7: 31:2b:2d:90:18:6f:d0:35:fb:79:4d:b9:3e:67:14: 51:5c:3e:c2:a2:54:26:56:5b:61:ff:a4:2f:e7:6b: 5a:48:43:4e:89:13:b6:a1:19:2b:ab:f5:9c:8f:7a: cb:03:d7:50:24:4b:c8:0b:bd:04:89:97:0a:23:c4: c9:fe:30:94:77:26:b0:de:a5:38:e0:16:53:7a:e3: 3a:85:d3:35:03:21:3b:3a:32:55:72:6c:2e:d6:4a: 3f:26:ee:5d:cb:91:32:8e:31:15:ec:45:53:eb:e4: d7:ca:a6:64:e9:c4:9d:7d:29:e1:a3:49:17:cc:b3: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:84:2A:4B:23:6C:4D:AE:11:38:5A:42:A0:67:C1:58:1B:3D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a681bfc-1cbd-340a-9aea-be28f37a7ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ab:af:1b:32:51:de:c2:44:e1:b5:f2:0f:db:43:d8:0e:3e: f0:06:c7:34:9f:c7:d0:ec:27:4e:f2:92:c9:10:98:b8:f6:26: 4b:ca:c8:3f:16:b9:6a:a0:43:29:8c:1c:1a:35:eb:6e:54:95: 06:5f:f0:86:1e:48:0a:f2:9a:0b:0e:66:2f:24:f2:82:1c:09: dd:49:df:a0:0d:a2:11:f3:3d:b6:05:df:a0:28:1e:f5:53:e6: ad:bb:26:77:5f:15:41:7c:3c:d4:98:f2:86:15:3e:cb:5e:ef: 2a:e7:7c:3b:d9:e9:e8:20:fc:ce:e0:0e:07:5c:46:8a:fe:9f: 2b:cf:da:a5:b2:95:e6:ef:38:30:6c:ea:fe:86:13:6b:58:e6: 38:c8:d8:cf:0d:dc:5b:86:a0:55:d9:9f:08:4a:2a:07:a9:07: 5e:bf:30:8d:80:d5:42:1f:c6:72:85:f0:db:07:c8:cf:70:b4: 3a:98:49:33:b2:a6:8c:53:b6:c3:41:f4:b0:9f:73:40:a4:95: f0:c4:1d:55:33:b0:d2:a3:02:5f:e1:fd:8d:6d:15:af:29:0c: 37:48:b0:fb:b2:17:63:5b:a8:67:b6:2a:bb:65:a0:78:ac:e2: 15:fb:dd:8f:f0:24:28:49:da:6b:6d:cf:3a:3e:db:f8:1f:cd: 4f:59:9d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9SlQAHV5wrmXZHZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODA3MzE1N1oXDTI2MTIyNzA4MzE1N1owLzEtMCsGA1UEAxMk YjQ2NzExODMtNDUyMi00Njk1LWFkMzAtYzJmYjIyMWQwZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3pGHIFWWeB3Z0RKSQf09LVkK38hyyInPczR a0RbXJy7l33qteUqxLaCs/xrYR6gT6N5xAjdqXx/EEY6F//yIiwBg+AVLrx2Kea8 +vFupTpjXg1mLBAk0scLYkBd8DcJOoqsc0umAXuTtQ0ytG3T70Wivc3BsGpFum/E nqrSWPQYBdQzR7cxKy2QGG/QNft5Tbk+ZxRRXD7ColQmVlth/6Qv52taSENOiRO2 oRkrq/Wcj3rLA9dQJEvIC70EiZcKI8TJ/jCUdyaw3qU44BZTeuM6hdM1AyE7OjJV cmwu1ko/Ju5dy5EyjjEV7EVT6+TXyqZk6cSdfSnho0kXzLMv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/YhCpLI2xNrhE4WkKgZ8FYGz14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNWE2ODFiZmMtMWNiZC0z NDBhLTlhZWEtYmUyOGYzN2E3ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2rrxsyUd7CROG18g/bQ9gOPvAGxzSfx9DsJ07ykskQmLj2JkvKyD8W uWqgQymMHBo1625UlQZf8IYeSArymgsOZi8k8oIcCd1J36ANohHzPbYF36AoHvVT 5q27JndfFUF8PNSY8oYVPste7yrnfDvZ6egg/M7gDgdcRor+nyvP2qWylebvODBs 6v6GE2tY5jjI2M8N3FuGoFXZnwhKKgepB16/MI2A1UIfxnKF8NsHyM9wtDqYSTOy poxTtsNB9LCfc0CklfDEHVUzsNKjAl/h/Y1tFa8pDDdIsPuyF2NbqGe2KrtloHis 4hX73Y/wJChJ2mttzzo+2/gfzU9ZnSE= -----END CERTIFICATE-----Generated at Sun Oct 11 22:24:10 2026 by rpki-client