$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a2eba030-35b0-36ce-bb51-841333ff50e0.roa File: a2eba030-35b0-36ce-bb51-841333ff50e0.roa (raw, json) Hash identifier: LbsIOtBXFaFpA5pDwJkoMpL1RnZrQj4vIJDwhU3FbMc= Subject key identifier: 26:71:92:ED:0C:66:65:76:2F:4F:BF:6B:8E:E4:79:8C:4A:2F:B2:15 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F52BB31C5CB64D533D07AB580 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a2eba030-35b0-36ce-bb51-841333ff50e0.roa Signing time: Mon 28 Sep 2026 08:48:54 +0000 ROA not before: Mon 28 Sep 2026 08:48:54 +0000 ROA not after: Sun 27 Dec 2026 09:48:54 +0000 asID: 62904 IP address blocks: 50.2.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:bb:31:c5:cb:64:d5:33:d0:7a:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 08:48:54 2026 GMT Not After : Dec 27 09:48:54 2026 GMT Subject: CN=3f459f68-ec8f-4294-9cf1-8de252858489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:10:73:1e:dc:4e:39:57:5f:3c:92:fe:50: c9:b8:b1:06:b8:5c:75:4b:27:4a:7b:d4:ae:91:1a: 9e:78:27:1e:16:5a:55:f8:23:3c:1b:ef:27:e8:0a: 32:da:fd:a6:8a:9a:09:33:9b:31:c3:a1:8e:28:8f: ab:19:59:af:03:6a:42:89:69:27:50:d1:df:da:6d: 2a:03:2e:f0:94:4e:b9:05:e4:c8:29:eb:23:9b:8e: ff:76:99:36:d9:9f:f4:2d:7a:ce:2f:5d:da:13:e4: e1:12:e3:23:81:87:45:44:9f:3f:69:76:10:12:17: 11:f3:27:a9:22:79:22:ad:be:40:cd:e4:05:8c:45: 3b:89:5e:ad:91:3d:45:16:0e:cd:5a:c1:94:52:66: 6f:5e:c7:c8:6e:f8:4a:9c:ee:51:b4:de:4b:f6:61: 85:e6:21:b3:46:b6:7a:77:e6:cd:01:2c:02:7e:2d: 9f:d0:f9:5a:a2:a1:7d:24:7c:52:15:2e:fe:d1:d4: 3d:33:8e:bb:d4:dd:02:55:c3:67:1f:49:24:3e:f1: 4d:4c:1d:27:1c:2b:87:dd:06:1b:06:35:e0:8f:12: ad:37:99:b9:85:cd:45:df:34:81:be:19:0e:f2:34: 96:5e:45:67:75:a9:9e:a0:6a:5a:0b:24:1e:91:c8: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:92:ED:0C:66:65:76:2F:4F:BF:6B:8E:E4:79:8C:4A:2F:B2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a2eba030-35b0-36ce-bb51-841333ff50e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:22:2c:47:4b:ea:6f:18:17:2b:05:b9:48:70:56:d3:3f:3c: 1a:c6:89:a6:fd:f0:b2:02:84:6d:89:78:3f:1a:1e:1b:cf:1d: aa:0e:92:a7:2e:52:59:55:a0:b2:94:01:b4:13:a5:11:0d:31: e5:5d:ea:de:ec:65:43:98:aa:0f:ad:be:df:ef:a4:a5:b5:d2: b0:31:db:2a:9d:56:67:9c:95:6d:b2:b9:ed:cd:ab:0c:5f:06: 9c:93:51:3e:93:54:e6:4b:0e:b8:af:7a:07:c5:e7:1d:11:ed: 76:e8:d7:41:d9:c8:8c:3a:0f:78:6b:d7:96:f1:e4:f6:6d:61: 45:0b:79:14:82:77:4c:6f:00:20:18:6c:83:dd:4d:d8:3a:d4: 84:cc:aa:8c:b4:47:26:15:04:67:b1:23:4a:4e:af:91:fc:e0: 45:91:6e:17:2b:89:d3:15:63:84:d8:a1:01:78:ec:fe:54:28: 04:7e:b2:9b:50:f5:a0:9b:42:3c:5f:06:5d:a6:27:9b:81:35: 0d:8c:a4:48:c8:13:28:45:16:4e:23:40:9a:f2:38:6d:63:80: a5:61:a8:be:ff:41:1e:1c:24:ec:a9:fb:8a:8f:87:3c:ea:94: f6:8c:4f:95:03:d4:c2:a0:40:70:e8:c2:f9:2a:ca:4a:f7:da: cf:7f:22:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9SuzHFy2TVM9B6tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODA4NDg1NFoXDTI2MTIyNzA5NDg1NFowLzEtMCsGA1UEAxMk M2Y0NTlmNjgtZWM4Zi00Mjk0LTljZjEtOGRlMjUyODU4NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtgQcx7cTjlXXzyS/lDJuLEGuFx1SydKe9Su kRqeeCceFlpV+CM8G+8n6Aoy2v2mipoJM5sxw6GOKI+rGVmvA2pCiWknUNHf2m0q Ay7wlE65BeTIKesjm47/dpk22Z/0LXrOL13aE+ThEuMjgYdFRJ8/aXYQEhcR8yep Inkirb5AzeQFjEU7iV6tkT1FFg7NWsGUUmZvXsfIbvhKnO5RtN5L9mGF5iGzRrZ6 d+bNASwCfi2f0PlaoqF9JHxSFS7+0dQ9M4671N0CVcNnH0kkPvFNTB0nHCuH3QYb BjXgjxKtN5m5hc1F3zSBvhkO8jSWXkVndameoGpaCyQekci4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZxku0MZmV2L0+/a47keYxKL7IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTJlYmEwMzAtMzViMC0z NmNlLWJiNTEtODQxMzMzZmY1MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMgLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsiLEdL6m8YFysFuUhwVtM/PBrGiab98LIChG2JeD8aHhvPHaoOkqcu UllVoLKUAbQTpRENMeVd6t7sZUOYqg+tvt/vpKW10rAx2yqdVmeclW2yue3Nqwxf BpyTUT6TVOZLDrivegfF5x0R7Xbo10HZyIw6D3hr15bx5PZtYUULeRSCd0xvACAY bIPdTdg61ITMqoy0RyYVBGexI0pOr5H84EWRbhcridMVY4TYoQF47P5UKAR+sptQ 9aCbQjxfBl2mJ5uBNQ2MpEjIEyhFFk4jQJryOG1jgKVhqL7/QR4cJOyp+4qPhzzq lPaMT5UD1MKgQHDowvkqykr32s9/Ip0= -----END CERTIFICATE-----Generated at Sun Oct 11 14:30:56 2026 by rpki-client