$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa File: 8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json) Hash identifier: 0mt9/isWy1wVaAwUJ2kYVWvpPe25X/lwhhGO+Wk75gI= Subject key identifier: 24:34:17:32:3B:50:19:69:53:88:5E:38:E8:92:F9:EE:88:6A:ED:56 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A7BB0B46BF78BB9E5E13A4500 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 174 IP address blocks: 50.2.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b4:6b:f7:8b:b9:e5:e1:3a:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=3df2b151-124a-4d5a-b69c-ade8a2a6a3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:85:0e:c8:39:ec:f9:00:cc:b0:3b:89:1c: 19:b5:65:cf:eb:4f:28:3b:fe:3d:82:db:3a:f4:3d: 77:2f:e0:49:5a:5a:14:6b:57:5a:3e:28:8a:f9:e2: fa:27:73:e9:86:d9:06:ef:d3:53:08:1d:d0:f5:54: 2e:59:97:b5:23:c0:40:90:6a:b0:8a:af:ca:1e:9c: 04:6c:a5:58:b7:e1:1a:e2:83:8f:b7:26:d8:03:18: ab:80:47:54:c5:aa:6f:ab:09:ad:58:a4:3f:78:74: b2:dd:1b:02:77:f0:f4:14:61:21:9e:22:90:26:06: e3:d9:c8:19:07:ea:72:d4:a4:13:28:29:fa:2f:db: 78:c3:34:99:0d:8f:b6:dc:b6:f2:a5:08:23:d6:a1: 91:14:02:3b:d7:95:71:86:76:c3:a0:35:b1:81:d2: 8e:46:13:6c:55:24:40:fa:8e:9c:b7:82:d9:95:6d: 83:54:35:da:92:05:e1:8c:ab:b7:c4:31:66:35:88: e6:5d:46:14:0d:66:ae:74:16:30:c6:53:44:d3:74: c6:d5:6a:0a:04:fe:a3:d7:72:58:b6:4b:1b:b4:18: 43:6e:9a:51:e3:48:70:be:3d:c0:11:ed:84:76:32: 83:a4:b8:d2:e0:bf:13:b1:da:b9:8f:e1:09:4c:d8: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:34:17:32:3B:50:19:69:53:88:5E:38:E8:92:F9:EE:88:6A:ED:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a2:b8:a8:31:57:ef:81:45:a1:11:78:0b:f1:41:d1:4e:92: 50:7f:25:77:41:a6:35:40:79:72:77:a5:dd:45:be:37:b5:e1: c7:2e:47:c4:56:2a:10:b9:bc:01:dc:94:07:7d:07:86:86:81: 67:68:04:f1:da:31:bc:0b:a9:22:27:0b:7a:bb:1c:80:de:84: 5e:0e:c5:07:1f:33:03:4e:26:7d:0c:cc:4c:28:39:db:52:c9: 5e:f9:f9:ba:22:9d:f0:2d:95:64:c6:d5:f5:81:e2:88:bc:74: 22:30:f0:97:00:0d:c7:33:f1:18:a8:80:21:af:96:ba:4b:7c: 07:db:8f:22:8a:0d:c8:2d:a4:95:39:96:ac:c5:55:27:8e:da: 8f:93:29:50:20:fc:2d:8d:cd:66:08:ff:28:4a:3f:53:e9:b8: 74:fb:8d:f1:9d:52:ae:cd:71:9a:9d:86:2b:ec:5d:96:25:31: df:9a:33:5a:95:c6:fe:f2:c1:f8:ad:60:e8:3e:ba:3b:60:3c: 98:7e:79:90:2b:a4:83:4a:d1:c5:a7:38:c2:c1:cb:10:be:8b: d3:a8:f4:6d:92:bb:4c:5a:37:9f:21:87:b1:c6:4f:19:11:57: ae:6d:29:b5:44:c6:f2:d7:d8:11:45:cc:b4:30:6c:63:c0:41: ee:92:67:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLRr94u55eE6RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk M2RmMmIxNTEtMTI0YS00ZDVhLWI2OWMtYWRlOGEyYTZhM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta2FDsg57PkAzLA7iRwZtWXP608oO/49gts6 9D13L+BJWloUa1daPiiK+eL6J3PphtkG79NTCB3Q9VQuWZe1I8BAkGqwiq/KHpwE bKVYt+Ea4oOPtybYAxirgEdUxapvqwmtWKQ/eHSy3RsCd/D0FGEhniKQJgbj2cgZ B+py1KQTKCn6L9t4wzSZDY+23LbypQgj1qGRFAI715VxhnbDoDWxgdKORhNsVSRA +o6ct4LZlW2DVDXakgXhjKu3xDFmNYjmXUYUDWaudBYwxlNE03TG1WoKBP6j13JY tksbtBhDbppR40hwvj3AEe2EdjKDpLjS4L8Tsdq5j+EJTNhHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ0FzI7UBlpU4heOOiS+e6Iau1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGE1MjQ1MjYtZTI1OS0z NWIxLWE4MGQtZDI3Y2NlYzYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuiuKgxV++BRaEReAvxQdFOklB/JXdBpjVAeXJ3pd1Fvje14ccuR8RW KhC5vAHclAd9B4aGgWdoBPHaMbwLqSInC3q7HIDehF4OxQcfMwNOJn0MzEwoOdtS yV75+boinfAtlWTG1fWB4oi8dCIw8JcADccz8RiogCGvlrpLfAfbjyKKDcgtpJU5 lqzFVSeO2o+TKVAg/C2NzWYI/yhKP1PpuHT7jfGdUq7NcZqdhivsXZYlMd+aM1qV xv7ywfitYOg+ujtgPJh+eZArpINK0cWnOMLByxC+i9Oo9G2Su0xaN58hh7HGTxkR V65tKbVExvLX2BFFzLQwbGPAQe6SZ4w= -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:05 2025 by rpki-client