$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8019b6e5-e053-3e12-993a-85a25e264e1e.roa File: 8019b6e5-e053-3e12-993a-85a25e264e1e.roa (raw, json) Hash identifier: KYc5DNzgEBxKFf3FZb9FkDu7myH5qqRYHZPLDUIO00g= Subject key identifier: 17:21:E5:30:88:2B:72:34:50:3D:68:95:B2:35:01:A2:35:D8:7D:A5 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981C3915FB1FA01A8202740 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8019b6e5-e053-3e12-993a-85a25e264e1e.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 50.3.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:c3:91:5f:b1:fa:01:a8:20:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=957c11af-6b7a-4594-b87c-a8413beb5a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:0c:36:12:b9:91:32:dd:5e:32:ce:6b:c4: c6:62:94:ed:f2:4d:82:a5:94:d0:89:bc:26:27:04: 58:87:61:2f:bd:b8:53:04:0e:36:b8:48:92:5a:c8: 71:62:9d:46:9d:76:c6:e7:d8:cf:f4:68:ee:0c:36: f4:dd:8f:3b:a5:c9:6c:d4:8f:19:d8:0c:e6:8d:5d: 90:4e:c9:6e:da:66:7a:ff:97:25:6e:f1:fa:6a:1d: 86:5e:f6:f5:0b:d6:fa:8d:67:52:e5:2d:fc:ce:1c: 53:9c:b5:1a:7b:8c:fe:ea:a5:10:90:48:8d:d8:71: 84:23:d8:ed:10:12:95:23:d0:79:03:37:cb:94:c8: 5b:63:f5:a0:09:91:96:d0:07:78:e0:4d:78:0d:b1: cd:8c:c3:4f:a7:77:1f:7e:42:7e:42:6c:c9:84:ee: 56:80:6a:b6:16:3f:19:43:16:f2:7f:dc:bc:74:b7: 2a:0e:90:64:75:6f:c4:29:15:4f:d6:90:7a:df:2f: 62:67:e2:8a:fa:43:1b:e4:19:d0:0d:54:00:9d:1e: 15:04:4f:c0:9d:73:9d:a4:d7:e2:f7:2d:76:2f:95: 55:06:12:91:a9:93:ec:4c:fc:48:ae:98:97:47:5b: 1c:8a:b7:56:9d:ae:23:a0:66:26:46:92:d9:03:be: 9e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:E5:30:88:2B:72:34:50:3D:68:95:B2:35:01:A2:35:D8:7D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8019b6e5-e053-3e12-993a-85a25e264e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9f:10:15:2b:6e:fa:84:bd:d2:78:71:9f:ee:f5:fc:d3:cf: b8:fd:36:68:03:ba:91:06:12:c3:12:9e:9c:52:5b:ed:80:89: f9:75:3d:10:7a:72:0c:e4:44:55:26:4d:5e:fb:65:83:66:2a: 2f:5b:43:96:43:76:9a:8b:91:af:5a:d2:e3:eb:a7:b4:99:1c: 9e:8d:fe:b3:52:4a:a7:1b:df:73:f5:f0:3c:a1:45:01:34:28: e9:0e:dd:f5:16:d7:6d:ee:c7:d8:ee:49:4c:b7:42:13:8e:94: 05:2a:46:cb:d2:1f:10:71:d0:fb:4a:66:81:7d:6f:4a:4a:21: d7:96:b5:ef:fd:a6:f9:dc:91:8c:68:b8:80:ee:8a:33:8d:9f: 14:eb:13:8e:ad:cc:5f:2f:1e:14:6c:64:f5:d4:7e:e4:ff:f2: 55:fb:e0:12:05:20:c7:56:56:6e:4b:d4:36:7f:3d:be:28:ad: 71:c4:3d:e2:92:9f:b2:88:72:18:45:c0:6f:53:d2:30:46:58: 1d:2d:ba:ce:7d:92:17:12:68:ae:3c:fa:8c:a7:1e:d6:68:e4: 12:4f:ad:b9:3d:9a:e5:b1:66:79:60:f0:5b:44:e3:d6:0e:37: 98:90:98:3e:32:67:cd:c5:d0:04:96:0c:09:36:43:81:70:16: 50:f3:bf:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcORX7H6AaggJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk OTU3YzExYWYtNmI3YS00NTk0LWI4N2MtYTg0MTNiZWI1YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPsMNhK5kTLdXjLOa8TGYpTt8k2CpZTQibwm JwRYh2EvvbhTBA42uEiSWshxYp1GnXbG59jP9GjuDDb03Y87pcls1I8Z2AzmjV2Q Tslu2mZ6/5clbvH6ah2GXvb1C9b6jWdS5S38zhxTnLUae4z+6qUQkEiN2HGEI9jt EBKVI9B5AzfLlMhbY/WgCZGW0Ad44E14DbHNjMNPp3cffkJ+QmzJhO5WgGq2Fj8Z Qxbyf9y8dLcqDpBkdW/EKRVP1pB63y9iZ+KK+kMb5BnQDVQAnR4VBE/AnXOdpNfi 9y12L5VVBhKRqZPsTPxIrpiXR1scirdWna4joGYmRpLZA76e0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBch5TCIK3I0UD1olbI1AaI12H2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODAxOWI2ZTUtZTA1My0z ZTEyLTk5M2EtODVhMjVlMjY0ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMgOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCfEBUrbvqEvdJ4cZ/u9fzTz7j9NmgDupEGEsMSnpxSW+2Aifl1PRB6 cgzkRFUmTV77ZYNmKi9bQ5ZDdpqLka9a0uPrp7SZHJ6N/rNSSqcb33P18DyhRQE0 KOkO3fUW123ux9juSUy3QhOOlAUqRsvSHxBx0PtKZoF9b0pKIdeWte/9pvnckYxo uIDuijONnxTrE46tzF8vHhRsZPXUfuT/8lX74BIFIMdWVm5L1DZ/Pb4orXHEPeKS n7KIchhFwG9T0jBGWB0tus59khcSaK48+oynHtZo5BJPrbk9muWxZnlg8FtE49YO N5iQmD4yZ83F0ASWDAk2Q4FwFlDzv7k= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:36 2026 by rpki-client