$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa File: 95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa (raw, json) Hash identifier: Q/BoZjPnftcXoRtW8ZCB89W4hNHlq8kkXJd0SLGVAhI= Subject key identifier: D2:22:A0:14:3F:95:D0:49:98:E8:A0:01:05:69:F6:E3:52:1B:11:47 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584E104ED60EEAA9BA6E7C0C4700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 174 IP address blocks: 50.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:d6:0e:ea:a9:ba:6e:7c:0c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=cf790288-9bf2-4f63-923a-ae11340f5ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:59:ce:55:85:1b:4f:e5:19:0a:59:b1:ae: 23:99:a4:49:09:60:21:d5:be:11:2b:80:72:53:3a: 5a:12:4f:37:30:a7:a9:87:08:9e:0f:7a:89:b3:f2: 9f:88:8c:50:87:4d:b6:85:52:7f:3e:d5:d0:03:5d: bc:ce:fa:ee:f0:bc:c1:f2:54:9e:13:37:05:d5:0a: 88:a3:b9:92:44:95:04:a5:d2:02:36:68:53:9a:3c: 05:cc:90:ec:92:53:44:71:ea:00:3b:d8:7c:24:8b: e8:4e:00:75:87:3c:c3:a4:57:0a:00:65:19:9b:5a: 3a:8b:cb:96:71:c5:65:f0:a6:80:3d:1b:cb:1c:79: 82:6f:fa:ce:8b:e6:db:35:3c:28:bf:66:db:06:ef: d8:c4:da:5a:55:4a:ad:50:c6:8c:8f:be:d5:32:e1: 20:bc:bb:00:d1:be:08:e3:fc:ee:04:1d:ab:46:b6: 34:a9:52:eb:e8:c7:23:d7:34:1c:1e:9f:5a:c0:67: 5c:98:a1:67:ca:c6:a3:37:d8:d3:7d:61:41:1b:77: 3c:03:3f:b8:a9:39:28:82:9d:99:0a:c6:00:37:c5: a7:7c:95:ce:54:45:3e:73:c1:7e:d3:37:6a:54:be: 26:7c:94:8e:f3:4b:89:a7:86:d8:6d:aa:79:9e:83: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:A0:14:3F:95:D0:49:98:E8:A0:01:05:69:F6:E3:52:1B:11:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:06:3f:d2:35:25:69:76:c0:06:c5:66:63:75:af:b1:37:fd: b9:d5:e4:65:72:a3:cb:de:6c:a2:35:ef:29:57:ed:03:a8:46: 75:5b:3f:09:22:70:b5:6e:5e:ff:57:68:f4:8d:f0:16:d2:08: 83:a4:b2:c4:85:16:cb:71:47:c6:74:08:db:d1:4a:79:a7:ef: 4e:fc:e5:fa:9d:ae:46:6a:5b:2d:01:4b:66:a3:0f:f3:54:11: 43:9c:a5:4b:2c:1f:b9:fe:bf:10:45:be:cd:fb:4f:21:43:6c: 04:69:8d:d3:95:55:38:24:16:f7:d6:97:3d:71:b8:7c:59:30: 4a:ca:18:87:15:e7:ca:0f:a4:76:e3:b3:f6:fc:f9:fb:8c:d1: f9:c3:df:fd:79:62:4f:e1:5d:97:d0:4f:47:32:25:7a:a2:43: 2e:64:7d:19:16:96:2c:72:f9:aa:8c:82:91:c4:ea:40:27:46: f5:21:50:cd:ab:45:f4:e4:ae:2c:5e:bb:fe:3b:ce:f2:2c:05: 2c:78:da:ac:da:09:79:3c:78:f2:71:08:a5:17:ca:8e:75:1c: 57:c9:56:d9:7f:33:dc:00:55:70:2f:24:6f:b7:49:de:e3:76: e6:57:b9:ec:ac:39:4e:f4:74:be:4e:bd:60:17:4a:17:86:7f: 49:e5:e1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTtYO6qm6bnwMRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2Y3OTAyODgtOWJmMi00ZjYzLTkyM2EtYWUxMTM0MGY1Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZhZzlWFG0/lGQpZsa4jmaRJCWAh1b4RK4By UzpaEk83MKephwieD3qJs/KfiIxQh022hVJ/PtXQA128zvru8LzB8lSeEzcF1QqI o7mSRJUEpdICNmhTmjwFzJDsklNEceoAO9h8JIvoTgB1hzzDpFcKAGUZm1o6i8uW ccVl8KaAPRvLHHmCb/rOi+bbNTwov2bbBu/YxNpaVUqtUMaMj77VMuEgvLsA0b4I 4/zuBB2rRrY0qVLr6Mcj1zQcHp9awGdcmKFnysajN9jTfWFBG3c8Az+4qTkogp2Z CsYAN8WnfJXOVEU+c8F+0zdqVL4mfJSO80uJp4bYbap5noMTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIioBQ/ldBJmOigAQVp9uNSGxFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTVkNDc2ZTAtMzM1OC0z MGVlLTkxZDgtYmM1ZWVlYWYyZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIGP9I1JWl2wAbFZmN1r7E3/bnV5GVyo8vebKI17ylX7QOoRnVbPwki cLVuXv9XaPSN8BbSCIOkssSFFstxR8Z0CNvRSnmn70785fqdrkZqWy0BS2ajD/NU EUOcpUssH7n+vxBFvs37TyFDbARpjdOVVTgkFvfWlz1xuHxZMErKGIcV58oPpHbj s/b8+fuM0fnD3/15Yk/hXZfQT0cyJXqiQy5kfRkWlixy+aqMgpHE6kAnRvUhUM2r RfTkrixeu/47zvIsBSx42qzaCXk8ePJxCKUXyo51HFfJVtl/M9wAVXAvJG+3Sd7j duZXueysOU70dL5OvWAXSheGf0nl4XI= -----END CERTIFICATE-----Generated at Sat Jun 13 06:07:24 2026 by rpki-client