$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa File: 89dd45a3-d400-3f18-ad49-001161dc8936.roa (raw, json) Hash identifier: IakTslydy3kh+ab9Gth2MXkblVfRxwVs36Wmp0oyeXk= Subject key identifier: D3:3B:80:8E:B4:F5:96:B7:EC:8F:01:70:B9:A5:08:13:F8:7A:58:1F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B96C819CD60B12AD0918CC2A8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa Signing time: Mon 20 Oct 2025 22:42:08 +0000 ROA not before: Mon 20 Oct 2025 22:42:08 +0000 ROA not after: Sun 18 Jan 2026 23:42:08 +0000 asID: 19905 IP address blocks: 50.81.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:c8:19:cd:60:b1:2a:d0:91:8c:c2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 20 22:42:08 2025 GMT Not After : Jan 18 23:42:08 2026 GMT Subject: CN=4c4173c4-1f8b-4677-98cf-0261b05d162a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:ed:90:81:41:02:d4:ac:07:45:fb:c7:3f: cd:1b:75:03:c3:c5:97:c7:47:f9:e9:81:87:93:49: e1:86:32:6f:81:23:50:5b:6d:2e:8c:77:eb:72:de: 5e:5e:64:03:d0:a7:a6:08:a6:b6:fd:75:87:b7:77: da:40:38:b4:ab:bc:2a:f6:e7:8c:b2:56:2e:eb:14: 9e:ad:5d:46:77:60:6b:6b:56:a3:67:f1:8c:0e:0b: ff:fc:e2:b1:cd:68:8a:21:d0:9c:d9:c1:f8:b6:b9: 85:7f:cc:ca:03:db:7a:27:95:7f:90:1b:dd:b5:5d: af:22:d4:35:93:67:e6:1b:f6:f5:a0:2c:16:f2:91: fa:93:b3:7a:83:b8:a7:dd:1d:23:8c:3e:dd:99:78: 80:c8:11:24:32:33:7c:d6:bc:3c:5b:ce:41:dd:24: 54:0d:f5:3e:60:5f:53:5e:98:8d:ab:db:a9:99:c7: d2:4d:78:61:e1:0b:85:54:d8:51:80:28:eb:4a:f6: ba:d1:5a:4b:ae:9b:ab:86:98:3d:3b:c8:94:98:e2: e4:89:83:85:4c:d7:d6:c7:66:de:ba:ae:44:bf:8e: 17:58:d4:34:bf:99:da:29:a5:10:70:27:c6:56:ec: 56:55:74:25:bb:af:4f:dd:79:79:cc:f2:e9:15:bf: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3B:80:8E:B4:F5:96:B7:EC:8F:01:70:B9:A5:08:13:F8:7A:58:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:43:31:9a:31:ab:44:8b:22:b3:d5:4d:dc:61:70:39:a2:88: 3a:3f:f4:92:04:24:0c:91:1a:fc:7f:31:af:a4:0c:7a:e2:5f: a1:35:d1:c2:f3:e0:de:d3:06:a5:2d:41:fa:d3:57:dc:57:11: bc:89:af:3f:52:f2:c6:6d:49:92:62:e7:ca:bc:42:eb:77:ef: 50:ea:46:1d:d9:41:6c:52:5a:b1:6d:5a:c6:59:0a:f5:17:92: 1d:d1:56:be:67:4c:87:ab:d3:22:96:7f:a4:f5:e3:85:30:ad: cf:1b:c9:b9:52:16:51:d8:17:08:5f:f0:c1:af:5a:ec:4b:c4: 2f:ff:98:29:f2:c1:ef:41:7f:3c:28:d6:30:47:db:78:d2:31: 98:ac:c5:bd:a0:b1:00:6e:45:0b:40:c4:93:7d:27:a6:16:b7: 6b:4a:c3:18:51:a9:48:52:29:0e:dd:c3:df:c5:8c:b5:05:b6: 48:1a:cd:66:c8:e2:a3:b4:07:ec:a6:a6:7b:69:4f:09:9d:5f: 75:29:e2:6d:d8:39:95:29:86:b7:e4:9e:65:3e:70:3c:62:19: 17:18:ee:c3:41:60:66:bf:3a:6f:f3:e9:6c:c4:d3:33:d2:6e: 5d:54:1a:23:d3:98:da:35:ba:98:cf:e7:23:4b:88:b1:95:c9: 03:a7:99:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWyBnNYLEq0JGMwqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyMDIyNDIwOFoXDTI2MDExODIzNDIwOFowLzEtMCsGA1UEAxMk NGM0MTczYzQtMWY4Yi00Njc3LTk4Y2YtMDI2MWIwNWQxNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu7tkIFBAtSsB0X7xz/NG3UDw8WXx0f56YGH k0nhhjJvgSNQW20ujHfrct5eXmQD0KemCKa2/XWHt3faQDi0q7wq9ueMslYu6xSe rV1Gd2Bra1ajZ/GMDgv//OKxzWiKIdCc2cH4trmFf8zKA9t6J5V/kBvdtV2vItQ1 k2fmG/b1oCwW8pH6k7N6g7in3R0jjD7dmXiAyBEkMjN81rw8W85B3SRUDfU+YF9T XpiNq9upmcfSTXhh4QuFVNhRgCjrSva60VpLrpurhpg9O8iUmOLkiYOFTNfWx2be uq5Ev44XWNQ0v5naKaUQcCfGVuxWVXQlu69P3Xl5zPLpFb+S9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM7gI609Za37I8BcLmlCBP4elgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlkZDQ1YTMtZDQwMC0z ZjE4LWFkNDktMDAxMTYxZGM4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJDMZoxq0SLIrPVTdxhcDmiiDo/9JIEJAyRGvx/Ma+kDHriX6E10cLz 4N7TBqUtQfrTV9xXEbyJrz9S8sZtSZJi58q8Qut371DqRh3ZQWxSWrFtWsZZCvUX kh3RVr5nTIer0yKWf6T144Uwrc8byblSFlHYFwhf8MGvWuxLxC//mCnywe9Bfzwo 1jBH23jSMZisxb2gsQBuRQtAxJN9J6YWt2tKwxhRqUhSKQ7dw9/FjLUFtkgazWbI 4qO0B+ympntpTwmdX3Up4m3YOZUphrfknmU+cDxiGRcY7sNBYGa/Om/z6WzE0zPS bl1UGiPTmNo1upjP5yNLiLGVyQOnmZQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:50 2025 by rpki-client