$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa File: f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa (raw, json) Hash identifier: dp4iGMbsAIAMRBd5AEQW8R/eh6twX5SQtprJZETzUj8= Subject key identifier: E8:C2:B6:B3:95:63:02:DC:41:90:DE:A8:71:74:AF:40:ED:9B:DF:B2 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AF0F1557FE274C6271E157E80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 50.3.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:55:7f:e2:74:c6:27:1e:15:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=5ff093e7-2530-436e-988c-e87adf416082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:a2:06:2a:df:02:ca:e0:a2:67:f4:20:c6: 43:28:42:e6:3f:c2:40:1a:66:8e:5c:5e:30:c6:57: 07:09:00:76:60:40:0b:86:41:6d:44:a1:bb:40:01: 63:5e:f8:2c:a7:31:93:ce:a4:ff:00:d4:9b:51:e9: 08:8e:d3:a2:59:aa:70:e1:13:18:47:66:8d:97:28: 05:ea:3b:b7:e5:4c:6f:35:2d:86:16:f8:ae:72:7f: 0f:0b:d6:5b:9e:c7:7a:8b:19:82:c8:8e:46:91:df: 9e:5c:9c:7c:ce:46:ce:fd:0b:fc:65:2f:29:fb:e9: 65:ff:97:94:9b:0c:83:d1:f6:0d:cb:12:2c:c5:8c: dd:37:a4:f9:00:51:44:f3:3a:c2:71:fe:8b:25:7a: 6d:c4:78:96:95:d2:8c:23:db:83:bb:bf:e6:57:46: b6:9f:6f:7d:7a:5e:07:0e:1b:25:7d:65:f9:6d:a1: 9f:f5:c9:7d:4c:e9:c4:41:73:ce:2e:69:11:ee:22: 77:44:47:a0:08:83:35:27:49:c7:a3:19:b0:09:11: 60:2b:39:cb:6c:9b:b1:f5:31:eb:7e:ff:47:56:58: 20:55:a6:8f:83:53:e9:46:ab:09:d1:71:65:0b:7e: ca:a4:a1:1b:93:33:ff:c9:c6:24:dc:98:9b:7d:d6: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:B6:B3:95:63:02:DC:41:90:DE:A8:71:74:AF:40:ED:9B:DF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:13:01:7e:74:b1:a6:35:b7:ea:87:ff:ce:bb:d0:17:de:80: 2f:8e:ee:37:a1:07:7b:c1:1b:6c:69:97:27:08:f7:0e:ec:d5: fb:26:12:ed:2f:35:94:92:42:2a:0e:b8:88:3f:85:6d:bf:e1: 60:87:ab:4c:35:2a:86:17:37:03:b0:61:f5:22:b3:e4:65:5e: 25:20:80:81:1e:76:e7:4d:56:b4:f7:b1:b2:ca:4a:da:03:5d: 8b:bf:2f:03:95:a0:83:a9:34:80:b8:19:fb:10:a8:e5:e8:33: 3e:4c:0b:46:4c:f8:06:14:52:e1:fc:35:57:9b:0c:f8:bc:87: 4b:75:04:6c:1e:de:a4:2f:39:be:cf:8d:99:43:21:ff:63:3a: d1:35:ed:f8:0d:4a:89:b4:99:20:b8:92:b6:93:94:0f:05:95: 2d:27:91:c2:81:4e:f4:c2:96:3d:94:cb:20:f4:2e:3c:05:86: d6:f0:67:b5:c0:37:07:6c:b5:5a:96:de:df:09:fd:8f:f3:5b: 2f:6c:51:b2:84:a6:3f:83:97:f0:8f:1c:df:da:37:80:da:05: 69:2a:9a:22:11:fe:0a:0f:b2:e2:b1:dc:69:90:f6:76:3e:75: 15:ea:5e:dc:ef:2f:c1:97:8d:04:95:c1:b6:cf:99:02:24:44: b0:6d:2a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VV/4nTGJx4VfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NWZmMDkzZTctMjUzMC00MzZlLTk4OGMtZTg3YWRmNDE2MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkKiBirfAsrgomf0IMZDKELmP8JAGmaOXF4w xlcHCQB2YEALhkFtRKG7QAFjXvgspzGTzqT/ANSbUekIjtOiWapw4RMYR2aNlygF 6ju35UxvNS2GFviucn8PC9Zbnsd6ixmCyI5Gkd+eXJx8zkbO/Qv8ZS8p++ll/5eU mwyD0fYNyxIsxYzdN6T5AFFE8zrCcf6LJXptxHiWldKMI9uDu7/mV0a2n299el4H DhslfWX5baGf9cl9TOnEQXPOLmkR7iJ3REegCIM1J0nHoxmwCRFgKznLbJux9THr fv9HVlggVaaPg1PpRqsJ0XFlC37KpKEbkzP/ycYk3JibfdZpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjCtrOVYwLcQZDeqHF0r0Dtm9+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjAwYjdmZDQtN2NkMS0z MDJmLWE4NTEtNTI3NTRlMWIxZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4TAX50saY1t+qH/8670BfegC+O7jehB3vBG2xplycI9w7s1fsmEu0v NZSSQioOuIg/hW2/4WCHq0w1KoYXNwOwYfUis+RlXiUggIEedudNVrT3sbLKStoD XYu/LwOVoIOpNIC4GfsQqOXoMz5MC0ZM+AYUUuH8NVebDPi8h0t1BGwe3qQvOb7P jZlDIf9jOtE17fgNSom0mSC4kraTlA8FlS0nkcKBTvTClj2UyyD0LjwFhtbwZ7XA NwdstVqW3t8J/Y/zWy9sUbKEpj+Dl/CPHN/aN4DaBWkqmiIR/goPsuKx3GmQ9nY+ dRXqXtzvL8GXjQSVwbbPmQIkRLBtKic= -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:59 2025 by rpki-client