$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa File: 8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json) Hash identifier: E2sQSagU2pC+usZ4N0DqX0o6VFyK4UFQ7+26fQDi7zc= Subject key identifier: 12:19:47:6E:9A:27:84:7B:3A:A1:48:C7:80:05:49:DA:75:08:CB:27 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D1B19F598A9D9E199D2A33940 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 174 IP address blocks: 50.2.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f5:98:a9:d9:e1:99:d2:a3:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=1dd283ec-824c-4626-9688-b581486cfb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:44:8c:47:bf:5d:6a:87:84:65:87:4f:10: 67:be:31:2a:5a:a2:2c:c7:6e:be:90:52:66:af:8a: b4:f4:15:12:17:d2:99:c2:03:f5:62:35:f3:33:98: 20:18:c0:a5:71:ba:fb:de:c7:02:fd:36:10:8f:a5: b0:33:44:12:90:95:82:dc:4d:af:02:35:6c:11:e1: 4d:62:96:38:d0:82:d4:8c:07:67:73:80:71:31:07: 1d:22:27:e6:e9:da:81:ab:d4:95:67:d6:25:2b:01: a4:94:d4:9a:ae:d0:c8:74:fe:52:69:68:e7:c3:90: 27:67:d2:d0:01:7f:21:97:bc:dd:13:da:1c:93:98: d7:e1:13:cc:9b:1e:9b:32:81:0d:bf:44:5e:bb:28: c2:dd:e1:ba:9c:2b:cc:3a:f8:1c:6e:17:43:74:ba: 12:92:d4:70:f3:88:0d:d3:8d:a7:86:8c:5e:9a:44: 12:f5:4f:e2:e2:26:15:05:57:a2:92:e6:9c:66:a5: 73:1a:62:18:8d:52:ac:02:b2:86:69:7d:c8:62:cc: e8:3f:dd:1a:d3:e6:b7:2a:02:56:f7:07:46:e3:4a: 31:df:9f:21:f0:4f:bd:bd:65:57:bd:90:c4:9e:0c: c6:8e:34:8f:e6:34:18:47:5e:91:c2:f8:f5:9e:fb: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:47:6E:9A:27:84:7B:3A:A1:48:C7:80:05:49:DA:75:08:CB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:8c:e3:49:9a:00:b6:63:7e:cf:41:85:67:b4:7c:60:b6:09: 79:06:8b:ed:bc:33:d0:96:77:d6:73:17:42:04:e8:44:82:8e: 71:33:c1:43:75:8b:32:92:30:7a:96:64:b7:46:c2:de:29:20: a8:2c:dd:96:8d:fb:33:86:f8:a1:b1:0f:38:55:0c:9e:aa:1f: bc:19:1f:e5:fc:3a:dd:1c:ef:e2:7f:89:0b:43:12:a1:1d:d7: 7d:55:2d:8e:85:d9:98:33:95:ca:86:44:ca:89:b9:38:a1:57: 03:3a:f7:9b:b6:12:d1:3a:79:53:aa:f9:60:41:45:b8:46:45: cc:e1:b6:48:e2:a0:9b:62:06:d1:72:05:1d:7b:f4:a6:ae:da: 7e:c8:b0:fd:9d:97:95:6e:6b:04:5d:b2:31:6b:18:2a:c8:bf: e6:30:2e:06:a7:0e:83:09:6c:61:43:8f:f6:83:c7:c1:26:44: 58:44:5f:17:b2:54:48:ce:00:1e:13:ed:d0:25:70:20:c6:53: 7f:bb:97:01:b1:c1:e0:18:db:06:d8:6d:bb:db:0a:48:45:6a: 41:a8:98:9d:42:b9:1d:13:6f:d0:99:32:23:d4:b2:d4:dd:77: 41:c8:5b:1d:70:8a:7b:57:54:fb:f9:26:b0:6a:5b:a3:d7:c9: 3c:85:b4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfWYqdnhmdKjOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MWRkMjgzZWMtODI0Yy00NjI2LTk2ODgtYjU4MTQ4NmNmYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qNEjEe/XWqHhGWHTxBnvjEqWqIsx26+kFJm r4q09BUSF9KZwgP1YjXzM5ggGMClcbr73scC/TYQj6WwM0QSkJWC3E2vAjVsEeFN YpY40ILUjAdnc4BxMQcdIifm6dqBq9SVZ9YlKwGklNSartDIdP5SaWjnw5AnZ9LQ AX8hl7zdE9ock5jX4RPMmx6bMoENv0ReuyjC3eG6nCvMOvgcbhdDdLoSktRw84gN 042nhoxemkQS9U/i4iYVBVeikuacZqVzGmIYjVKsArKGaX3IYszoP90a0+a3KgJW 9wdG40ox358h8E+9vWVXvZDEngzGjjSP5jQYR16Rwvj1nvsctQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIZR26aJ4R7OqFIx4AFSdp1CMsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGE1MjQ1MjYtZTI1OS0z NWIxLWE4MGQtZDI3Y2NlYzYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGM40maALZjfs9BhWe0fGC2CXkGi+28M9CWd9ZzF0IE6ESCjnEzwUN1 izKSMHqWZLdGwt4pIKgs3ZaN+zOG+KGxDzhVDJ6qH7wZH+X8Ot0c7+J/iQtDEqEd 131VLY6F2ZgzlcqGRMqJuTihVwM695u2EtE6eVOq+WBBRbhGRczhtkjioJtiBtFy BR179Kau2n7IsP2dl5VuawRdsjFrGCrIv+YwLganDoMJbGFDj/aDx8EmRFhEXxey VEjOAB4T7dAlcCDGU3+7lwGxweAY2wbYbbvbCkhFakGomJ1CuR0Tb9CZMiPUstTd d0HIWx1wintXVPv5JrBqW6PXyTyFtCI= -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:47 2026 by rpki-client