$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0a07d691-f749-371c-9508-b58ddec6c141.roa File: 0a07d691-f749-371c-9508-b58ddec6c141.roa (raw, json) Hash identifier: OLihFKwChffEy3EkgGPLZ4egQmXpM8zBN53ntNwAlA4= Subject key identifier: 67:C1:FC:AE:60:64:08:28:53:65:82:2B:4C:7E:F3:F7:4E:BA:6F:04 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB121B798BEFC4DE775A16E00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0a07d691-f749-371c-9508-b58ddec6c141.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 13744 IP address blocks: 50.3.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:b7:98:be:fc:4d:e7:75:a1:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=e914fbfc-715b-46a7-93a5-d2c8d68412ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:a5:26:12:6c:b5:51:2d:74:32:3d:84:24: 0e:54:c6:30:84:40:c8:02:8a:31:25:9b:21:6f:cc: 14:aa:a4:7b:ad:c1:8c:0e:65:13:59:7c:88:d2:f8: c6:a8:fa:97:71:aa:23:b2:93:10:43:1a:5d:2b:ae: 2e:3d:76:c1:a6:b1:e5:fa:5b:c3:97:78:63:05:e9: 12:23:a5:2c:3f:2b:9c:6b:d0:00:cb:4f:a3:73:9a: 99:bc:82:fa:cf:65:1d:ee:f0:a4:cc:f6:cb:84:3e: ff:5f:2c:90:13:b2:16:9d:44:6a:ee:51:d7:5e:41: ef:eb:e9:cc:bd:7e:12:ea:e9:78:50:15:46:98:2e: b0:d4:22:dc:bd:fa:3e:79:5a:65:e4:fb:1c:1b:2c: a4:46:98:f1:62:c3:41:1e:c5:9b:be:45:c3:51:2b: 02:25:95:4f:69:ee:7d:14:18:56:8d:64:c5:3d:59: f6:96:65:66:04:da:1c:d6:8f:db:0d:09:63:0a:f2: dc:75:1e:e1:5d:22:02:09:8f:b6:a1:b8:e0:1b:57: 71:b6:2d:66:0f:25:8a:2a:aa:4f:34:bd:78:3f:b6: e4:15:26:4d:a7:2d:85:6c:2a:da:3b:ff:43:b1:42: 6a:71:7a:6d:15:87:92:3d:cb:51:ec:7b:c9:89:c6: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C1:FC:AE:60:64:08:28:53:65:82:2B:4C:7E:F3:F7:4E:BA:6F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0a07d691-f749-371c-9508-b58ddec6c141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:1f:cc:66:f8:bf:f8:62:6e:63:67:16:35:eb:ef:0a:9f: e5:30:7b:f9:fc:2b:63:94:3c:43:f0:1f:10:88:7d:49:8d:1f: cc:3d:df:3b:02:45:0b:2b:56:ef:72:3f:a9:c2:d4:6d:87:7e: 3f:35:bd:3d:53:4e:49:67:7f:82:5d:f1:19:d6:06:75:ce:4d: 19:01:06:7e:95:5a:aa:bb:44:af:8b:23:c4:a6:b8:a4:3e:9b: c9:72:07:8d:0e:5d:85:00:18:c3:a1:45:66:39:04:fa:d6:c7: 1c:e5:be:ae:21:74:9c:6c:7d:e5:18:28:28:bd:20:37:12:d6: 09:03:3c:7e:fb:6b:5c:5b:40:77:db:31:d1:dd:a4:de:43:aa: e9:d9:a8:3f:e6:cc:f6:a7:20:1f:8c:e8:87:5d:de:b1:ba:19: dc:5a:81:64:87:22:46:dc:00:ba:ca:16:c4:32:c9:c1:ca:04: c5:4e:a0:16:f3:72:56:b6:d8:43:12:e2:97:e7:00:f7:98:dc: a6:50:12:82:46:5b:af:6d:ed:93:63:f7:d9:84:e2:c3:91:ef: 70:2f:9b:64:2a:e8:16:bb:5b:24:06:17:8b:fd:76:c1:4a:22: 50:5c:5b:d5:40:17:0d:4f:7c:38:64:ea:ea:6e:65:27:64:e8: e7:c6:95:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbeYvvxN53WhbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTkxNGZiZmMtNzE1Yi00NmE3LTkzYTUtZDJjOGQ2ODQxMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZqlJhJstVEtdDI9hCQOVMYwhEDIAooxJZsh b8wUqqR7rcGMDmUTWXyI0vjGqPqXcaojspMQQxpdK64uPXbBprHl+lvDl3hjBekS I6UsPyuca9AAy0+jc5qZvIL6z2Ud7vCkzPbLhD7/XyyQE7IWnURq7lHXXkHv6+nM vX4S6ul4UBVGmC6w1CLcvfo+eVpl5PscGyykRpjxYsNBHsWbvkXDUSsCJZVPae59 FBhWjWTFPVn2lmVmBNoc1o/bDQljCvLcdR7hXSICCY+2objgG1dxti1mDyWKKqpP NL14P7bkFSZNpy2FbCraO/9DsUJqcXptFYeSPctR7HvJicZI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfB/K5gZAgoU2WCK0x+8/dOum8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGEwN2Q2OTEtZjc0OS0z NzFjLTk1MDgtYjU4ZGRlYzZjMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSxH8xm+L/4Ym5jZxY16+8Kn+Uwe/n8K2OUPEPwHxCIfUmNH8w93zsC RQsrVu9yP6nC1G2Hfj81vT1TTklnf4Jd8RnWBnXOTRkBBn6VWqq7RK+LI8SmuKQ+ m8lyB40OXYUAGMOhRWY5BPrWxxzlvq4hdJxsfeUYKCi9IDcS1gkDPH77a1xbQHfb MdHdpN5DqunZqD/mzPanIB+M6Idd3rG6GdxagWSHIkbcALrKFsQyycHKBMVOoBbz cla22EMS4pfnAPeY3KZQEoJGW69t7ZNj99mE4sOR73Avm2Qq6Ba7WyQGF4v9dsFK IlBcW9VAFw1PfDhk6upuZSdk6OfGld8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:21 2026 by rpki-client