$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e247a35-a23f-3e2f-a156-b86a5a32dbe7.roa File: 5e247a35-a23f-3e2f-a156-b86a5a32dbe7.roa (raw, json) Hash identifier: UVIqfoaecex5mr73O2wZyux2BG9FDjdtk0UaCTJEzzI= Subject key identifier: 1B:5F:03:15:51:43:25:25:FB:14:C5:0D:45:31:EE:7D:D0:EE:35:3F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B8A7CCD47C0205790392F6C80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e247a35-a23f-3e2f-a156-b86a5a32dbe7.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 2914 IP address blocks: 50.3.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cd:47:c0:20:57:90:39:2f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=690b8d98-0de3-4d29-82b0-c5d6a16a4fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:1a:16:9a:1b:bd:1f:11:48:2a:45:af:8f: 20:62:ad:c8:6c:6b:53:b3:69:2b:39:98:a8:e4:60: e0:19:b7:e6:e3:f5:12:d2:e9:cf:6f:35:fd:32:25: 6d:de:61:08:91:4d:43:d3:03:c8:15:ab:14:59:15: b1:97:e8:6e:9c:6a:34:47:9b:d9:de:fa:2c:dc:9b: a7:ee:5b:bd:58:3a:a9:4e:15:59:c9:20:3d:6c:c8: 3f:63:48:0e:9f:3d:e6:f3:8c:b7:52:d5:82:4b:6a: 81:92:95:33:96:4c:14:26:41:5f:56:b7:58:06:10: 5d:29:e7:33:fb:a1:90:8b:57:cc:44:d5:40:a2:f5: 32:51:d3:0b:97:f7:9f:b8:19:d8:8e:a9:4f:24:12: 1b:42:75:0d:d2:ae:b6:90:2e:44:a2:84:7f:42:a7: f7:cc:f6:9f:14:4c:6c:10:fc:46:f9:cc:b4:aa:c0: 18:96:d3:51:c7:f3:1f:02:d4:96:c8:8f:3e:6f:41: 40:94:27:87:3f:fb:84:5f:0e:83:2e:f1:60:09:9b: f3:3c:c2:83:14:5f:cd:83:c2:74:bb:b2:c1:29:92: 77:3f:28:de:8e:61:77:c9:7d:fc:a2:07:9e:06:06: e3:76:38:fb:12:1f:6a:1e:43:b1:65:3c:90:6d:d8: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5F:03:15:51:43:25:25:FB:14:C5:0D:45:31:EE:7D:D0:EE:35:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e247a35-a23f-3e2f-a156-b86a5a32dbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:de:a5:fa:74:33:a2:75:68:57:ba:24:11:54:b3:fd:31: 76:46:ed:62:b7:38:67:af:8c:40:29:ac:4a:d9:6c:4a:65:6c: 11:12:d4:7b:67:89:a6:ee:83:80:b8:27:aa:dd:0d:0f:25:da: 05:e2:73:9e:4d:f5:7a:a3:f0:3d:d6:d3:f9:52:0a:cb:47:e6: ae:df:d6:0b:2d:10:90:2b:f9:02:55:e9:71:68:c6:c8:1e:61: 97:df:1b:a3:e4:98:47:66:f5:bc:ab:e4:99:a4:8b:65:1a:85: d3:c8:3b:4e:9b:17:68:ec:c0:df:5c:38:c4:26:8c:a4:dd:af: 3e:73:9c:37:c2:83:ba:4b:2b:0d:01:ce:97:0f:39:db:e0:99: 5c:77:30:47:f9:9d:1f:c1:9c:5e:60:00:40:30:0f:6e:55:da: f0:bf:f0:21:ad:88:43:1f:af:81:08:59:d0:14:69:16:25:b9: f3:c4:d4:06:f5:df:71:5f:e1:3e:e9:15:d4:ba:67:03:57:ab: e5:92:16:f3:f8:59:16:f1:21:90:c4:40:df:f5:f0:c6:26:63: a0:ea:7f:11:b0:58:8a:55:56:1b:19:5d:4f:77:79:ce:57:56: 23:29:35:30:23:7c:3b:28:e8:f3:86:b8:0a:2d:c1:b7:61:35: 61:68:08:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfM1HwCBXkDkvbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NjkwYjhkOTgtMGRlMy00ZDI5LTgyYjAtYzVkNmExNmE0ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5waFpobvR8RSCpFr48gYq3IbGtTs2krOZio 5GDgGbfm4/US0unPbzX9MiVt3mEIkU1D0wPIFasUWRWxl+hunGo0R5vZ3vos3Jun 7lu9WDqpThVZySA9bMg/Y0gOnz3m84y3UtWCS2qBkpUzlkwUJkFfVrdYBhBdKecz +6GQi1fMRNVAovUyUdMLl/efuBnYjqlPJBIbQnUN0q62kC5EooR/Qqf3zPafFExs EPxG+cy0qsAYltNRx/MfAtSWyI8+b0FAlCeHP/uEXw6DLvFgCZvzPMKDFF/Ng8J0 u7LBKZJ3PyjejmF3yX38ogeeBgbjdjj7Eh9qHkOxZTyQbdi/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtfAxVRQyUl+xTFDUUx7n3Q7jU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNWUyNDdhMzUtYTIzZi0z ZTJmLWExNTYtYjg2YTVhMzJkYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJ3qX6dDOidWhXuiQRVLP9MXZG7WK3OGevjEAprErZbEplbBES1Htn iabug4C4J6rdDQ8l2gXic55N9Xqj8D3W0/lSCstH5q7f1gstEJAr+QJV6XFoxsge YZffG6PkmEdm9byr5Jmki2UahdPIO06bF2jswN9cOMQmjKTdrz5znDfCg7pLKw0B zpcPOdvgmVx3MEf5nR/BnF5gAEAwD25V2vC/8CGtiEMfr4EIWdAUaRYlufPE1Ab1 33Ff4T7pFdS6ZwNXq+WSFvP4WRbxIZDEQN/18MYmY6DqfxGwWIpVVhsZXU93ec5X ViMpNTAjfDso6POGuAotwbdhNWFoCKM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:58 2025 by rpki-client