$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e95210ca-f2cc-31a7-976d-4ee64a8300ea.roa File: e95210ca-f2cc-31a7-976d-4ee64a8300ea.roa (raw, json) Hash identifier: iwLQ5YM0Sj9kqQdnDzvoq1FO5ZtRRCoRyuFej/2GCw8= Subject key identifier: 44:92:54:EA:B2:30:06:A2:64:59:D8:66:FF:19:70:EB:0D:97:0E:67 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F52C0C7B43A3C8F2205D9B880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e95210ca-f2cc-31a7-976d-4ee64a8300ea.roa Signing time: Mon 28 Sep 2026 09:00:10 +0000 ROA not before: Mon 28 Sep 2026 09:00:10 +0000 ROA not after: Sun 27 Dec 2026 10:00:10 +0000 asID: 62904 IP address blocks: 50.2.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:c0:c7:b4:3a:3c:8f:22:05:d9:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 09:00:10 2026 GMT Not After : Dec 27 10:00:10 2026 GMT Subject: CN=1a76a1b3-ba8e-4f15-be41-825ea44ec616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:cb:67:04:cd:ab:93:bc:77:29:77:26:53: ec:b2:06:fd:9b:16:21:73:38:ce:3f:5c:86:e3:80: e4:66:a6:ff:40:db:f6:18:48:a9:3f:db:69:67:7d: 5d:c0:fc:57:d9:5a:a8:87:ab:b3:99:69:0b:7d:32: 24:eb:eb:17:15:04:87:34:b9:3a:d6:bb:91:65:f7: 2d:7d:49:86:13:59:be:6f:c8:93:5f:e1:e6:ae:a1: ce:8c:45:13:52:c4:0d:8b:0a:7a:60:71:ff:d1:58: 66:0a:74:89:62:bb:40:8e:fc:94:39:fd:13:c3:1a: 30:0e:47:df:35:a1:af:90:ec:ee:6a:f3:f6:eb:a3: dd:01:a4:f5:e8:47:0e:51:15:e5:53:2f:29:04:5e: 74:04:51:b5:71:17:51:d6:84:71:16:97:27:b6:a5: 6b:4f:50:b0:ec:4e:b8:ba:65:c0:4d:52:4b:f3:3e: c9:81:5d:52:d0:44:ea:24:35:df:8b:0f:77:7c:72: fa:ca:a9:9d:5b:9a:1f:0e:fc:04:ec:5e:05:c1:2a: 9d:e4:21:86:dd:ea:84:9f:0e:1a:d3:07:1b:b7:a0: 28:41:8c:6a:58:c9:b3:4f:4e:b5:a3:68:85:96:95: 2c:6e:5e:3b:70:94:90:00:58:54:87:20:4d:c1:a6: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:54:EA:B2:30:06:A2:64:59:D8:66:FF:19:70:EB:0D:97:0E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e95210ca-f2cc-31a7-976d-4ee64a8300ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:92:b5:88:db:fc:c2:13:ca:67:7a:dc:14:40:b4:63:ff:2b: 1d:5e:2d:19:d5:2c:68:44:57:e4:f1:ed:c9:ae:15:81:da:2f: 50:f5:7c:1f:38:90:4f:a2:d5:81:b7:86:fc:d8:1f:48:0b:c9: 4f:83:7f:5a:e8:3b:6b:b7:0e:eb:03:d5:d6:ad:da:52:3a:b9: c3:4b:3d:0a:bc:59:6e:d2:c3:de:ed:f6:6a:8f:b0:83:4d:e8: d4:b8:71:7f:76:78:14:4e:e9:5a:71:e2:9b:04:6c:c5:e6:a2: 2c:5e:40:b9:5b:4c:05:e8:4d:ff:a6:c5:7e:7f:d8:9f:fe:14: 37:eb:78:0f:3a:fd:d0:1c:a3:22:b6:f3:b8:61:34:f5:70:48: 93:88:10:2e:f4:8c:b6:90:7f:29:66:bd:22:10:27:a3:b4:21: d9:a3:70:a3:7b:a3:1c:0d:05:17:3d:57:bf:52:64:28:9e:62: 29:60:9e:1d:39:a4:4b:81:a1:5e:47:10:94:31:bb:a2:b3:38: 46:47:c2:d5:31:83:65:c4:9d:09:18:01:dc:c9:93:3d:63:30: cd:51:af:18:24:b4:ff:67:17:ca:87:40:43:ec:59:c5:0b:01: 3b:10:0b:9e:2c:f8:86:a7:57:41:22:65:0e:c4:fc:f3:58:d1: ac:e3:16:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9SwMe0OjyPIgXZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODA5MDAxMFoXDTI2MTIyNzEwMDAxMFowLzEtMCsGA1UEAxMk MWE3NmExYjMtYmE4ZS00ZjE1LWJlNDEtODI1ZWE0NGVjNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK/LZwTNq5O8dyl3JlPssgb9mxYhczjOP1yG 44DkZqb/QNv2GEipP9tpZ31dwPxX2Vqoh6uzmWkLfTIk6+sXFQSHNLk61ruRZfct fUmGE1m+b8iTX+HmrqHOjEUTUsQNiwp6YHH/0VhmCnSJYrtAjvyUOf0TwxowDkff NaGvkOzuavP266PdAaT16EcOURXlUy8pBF50BFG1cRdR1oRxFpcntqVrT1Cw7E64 umXATVJL8z7JgV1S0ETqJDXfiw93fHL6yqmdW5ofDvwE7F4FwSqd5CGG3eqEnw4a 0wcbt6AoQYxqWMmzT061o2iFlpUsbl47cJSQAFhUhyBNwaa+oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESSVOqyMAaiZFnYZv8ZcOsNlw5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZTk1MjEwY2EtZjJjYy0z MWE3LTk3NmQtNGVlNjRhODMwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmStYjb/MITymd63BRAtGP/Kx1eLRnVLGhEV+Tx7cmuFYHaL1D1fB84 kE+i1YG3hvzYH0gLyU+Df1roO2u3DusD1dat2lI6ucNLPQq8WW7Sw97t9mqPsINN 6NS4cX92eBRO6Vpx4psEbMXmoixeQLlbTAXoTf+mxX5/2J/+FDfreA86/dAcoyK2 87hhNPVwSJOIEC70jLaQfylmvSIQJ6O0IdmjcKN7oxwNBRc9V79SZCieYilgnh05 pEuBoV5HEJQxu6KzOEZHwtUxg2XEnQkYAdzJkz1jMM1RrxgktP9nF8qHQEPsWcUL ATsQC54s+IanV0EiZQ7E/PNY0azjFtk= -----END CERTIFICATE-----Generated at Sun Oct 11 03:41:04 2026 by rpki-client