$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ed417a3f-38f3-33b3-b14f-90f6735c99a4.roa File: ed417a3f-38f3-33b3-b14f-90f6735c99a4.roa (raw, json) Hash identifier: LE1stNGoEJ1np2fSR+bgq96OFZbpPlz3kVSe0UnCLzQ= Subject key identifier: 5C:6A:E7:2A:A6:3D:86:61:31:10:E4:67:B6:0A:51:57:66:1F:65:01 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B59A1E0C9549B77574355CDC0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ed417a3f-38f3-33b3-b14f-90f6735c99a4.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 25198 IP address blocks: 50.2.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:e0:c9:54:9b:77:57:43:55:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=39666764-74ec-4755-aceb-9e4a17778f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:d8:ee:e0:df:37:f0:4e:54:2e:fb:5c:78: 9e:1c:29:3a:ea:7a:20:22:03:22:25:80:f2:e2:d4: ab:80:61:e3:d2:e1:29:47:74:89:ef:a9:2c:26:dd: bd:b5:8b:b3:da:3b:0f:0e:0b:1f:34:89:93:10:f3: 4e:36:ae:7d:a6:6a:1d:05:4d:59:88:e2:e9:ab:05: 27:6a:e9:53:d2:ec:ce:68:08:82:4b:25:84:ba:1b: 5f:cc:35:c7:cd:22:48:5e:91:4f:4f:00:ee:85:64: a5:52:d0:e5:e4:75:5e:47:a4:cb:93:6e:23:fc:ea: 80:3a:8e:5c:7d:79:e7:e7:13:66:25:cf:27:c0:2a: ff:c7:c1:60:de:a2:3d:31:77:6b:8f:c7:e4:b3:43: b7:21:14:86:9d:2b:44:9c:45:89:f8:30:cf:37:d7: 2b:ac:ff:9a:69:45:0b:ca:0b:0c:a7:cd:01:83:50: 5a:aa:19:a9:ef:8e:9b:08:d9:da:91:ff:fb:45:f3: 28:51:07:20:0c:83:58:38:3d:ab:9d:77:66:60:c8: cc:e5:bf:e4:f8:9a:0c:83:4f:17:93:21:c4:6e:1a: 81:da:43:f7:30:b4:9b:04:5f:19:34:b9:c2:28:75: 06:75:fa:d3:4b:cd:cc:3b:0c:9a:e4:ee:59:8d:0b: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6A:E7:2A:A6:3D:86:61:31:10:E4:67:B6:0A:51:57:66:1F:65:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ed417a3f-38f3-33b3-b14f-90f6735c99a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:10:00:b9:a2:e3:d5:09:ca:b1:04:3c:14:87:b0:fe:13:7c: 03:fc:77:c7:df:70:64:41:73:9e:8d:31:2a:cf:d4:29:36:ba: 12:8f:2d:85:7a:37:59:1b:75:da:b1:7a:a1:f0:d5:57:02:92: 4d:d2:2f:b0:d6:81:ef:78:3e:83:55:ab:26:21:27:42:0d:0e: bc:03:6e:0d:a0:98:f0:e1:3f:44:d7:39:79:be:c9:4c:4b:ab: e1:a9:35:7b:3a:9b:e9:ce:95:3a:6a:62:06:9b:08:55:39:5d: 09:09:08:4a:82:49:cf:a4:42:a4:52:a1:7b:ee:0c:b0:8c:f6: 29:83:0c:eb:04:51:71:4c:34:fb:60:9d:84:2c:01:8d:cf:6e: 26:bd:56:f0:bf:67:fc:c1:82:00:1e:25:ed:1b:12:27:c1:31: 9f:2f:a0:00:2f:1e:84:c3:69:2d:33:05:c7:8b:75:65:86:58: cf:48:28:62:49:b0:b7:61:e6:ac:4b:1f:7a:6b:7c:2e:01:60: b0:fd:5e:90:f4:0c:40:99:55:b3:77:43:2a:89:ac:0c:bf:39: bf:91:52:52:81:c0:93:1b:95:f0:f2:fa:ff:55:37:8a:38:2c: f9:76:da:f7:5b:1b:81:37:90:dc:bc:0f:b2:18:3e:d2:9c:65: fa:f2:30:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoeDJVJt3V0NVzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk Mzk2NjY3NjQtNzRlYy00NzU1LWFjZWItOWU0YTE3Nzc4ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTLY7uDfN/BOVC77XHieHCk66nogIgMiJYDy 4tSrgGHj0uEpR3SJ76ksJt29tYuz2jsPDgsfNImTEPNONq59pmodBU1ZiOLpqwUn aulT0uzOaAiCSyWEuhtfzDXHzSJIXpFPTwDuhWSlUtDl5HVeR6TLk24j/OqAOo5c fXnn5xNmJc8nwCr/x8Fg3qI9MXdrj8fks0O3IRSGnStEnEWJ+DDPN9crrP+aaUUL ygsMp80Bg1Baqhmp746bCNnakf/7RfMoUQcgDINYOD2rnXdmYMjM5b/k+JoMg08X kyHEbhqB2kP3MLSbBF8ZNLnCKHUGdfrTS83MOwya5O5ZjQva2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxq5yqmPYZhMRDkZ7YKUVdmH2UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZWQ0MTdhM2YtMzhmMy0z M2IzLWIxNGYtOTBmNjczNWM5OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAQALmi49UJyrEEPBSHsP4TfAP8d8ffcGRBc56NMSrP1Ck2uhKPLYV6 N1kbddqxeqHw1VcCkk3SL7DWge94PoNVqyYhJ0INDrwDbg2gmPDhP0TXOXm+yUxL q+GpNXs6m+nOlTpqYgabCFU5XQkJCEqCSc+kQqRSoXvuDLCM9imDDOsEUXFMNPtg nYQsAY3Pbia9VvC/Z/zBggAeJe0bEifBMZ8voAAvHoTDaS0zBceLdWWGWM9IKGJJ sLdh5qxLH3prfC4BYLD9XpD0DECZVbN3QyqJrAy/Ob+RUlKBwJMblfDy+v9VN4o4 LPl22vdbG4E3kNy8D7IYPtKcZfryMLs= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:46 2025 by rpki-client