$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa File: 975b438c-433c-35cf-b0c2-2a245df4002d.roa (raw, json) Hash identifier: 0sPfqMonTvnEFbBjpQ+I0oCleu5uF+P0/TEkd6hyoNI= Subject key identifier: 20:6C:99:D8:88:08:A8:88:C1:80:39:8A:8F:CF:30:F0:FC:4E:B6:87 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A8F3B799BDD2D4C78E7C46780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 174 IP address blocks: 50.3.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:79:9b:dd:2d:4c:78:e7:c4:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=1a68a916-569c-47a3-9fa0-15b4274c976e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:68:32:6a:09:11:ed:9d:14:30:c8:81:71: 12:24:ca:51:28:be:d1:e6:da:6f:6e:9b:4b:c2:84: 23:01:c2:69:43:96:45:df:d7:e8:d2:d6:73:46:c5: a3:0e:f4:bd:1e:2b:69:29:51:2e:50:cc:ec:b4:b5: ef:fe:e7:fa:1c:8e:c5:cb:83:d9:6b:33:88:77:56: d5:34:60:24:b4:cc:7e:97:2d:d3:ec:75:79:e6:83: b7:20:a9:22:24:26:4a:4a:1e:59:ce:4c:33:1e:9a: 29:02:8f:64:cd:a4:f5:d2:04:19:0f:8c:65:7c:42: 51:1f:be:7b:f1:d0:4c:de:6d:2f:c5:86:3b:26:67: 19:58:dd:e7:f6:2b:1a:fc:b4:1e:69:78:72:6a:62: 4c:88:6a:50:df:82:e4:60:80:d1:a8:1e:f8:64:5f: c2:c7:ee:90:fd:24:95:9d:b2:a7:89:84:72:5e:58: 67:26:f3:92:10:79:40:c7:16:63:fa:8e:06:24:c3: 10:1e:e5:33:ff:2f:17:b0:c0:3f:ee:b7:0e:47:fe: 3c:89:bc:14:a1:29:a4:29:9e:53:bc:3d:51:c2:42: d4:53:06:31:ca:1b:ed:aa:37:2b:fe:97:05:94:9a: 95:c4:71:39:ca:4a:cc:f2:ae:e9:37:4f:67:be:53: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:99:D8:88:08:A8:88:C1:80:39:8A:8F:CF:30:F0:FC:4E:B6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d4:89:3d:6d:ba:7a:f1:31:51:0e:63:cb:a7:6c:4f:c3:14: f0:dc:b3:94:46:bf:30:62:b9:57:84:13:2c:4c:f2:b5:f4:78: 14:e1:1a:88:1f:eb:d3:eb:fe:76:ba:7f:b3:b0:57:bb:21:36: 09:11:16:e7:8c:9c:f2:67:36:17:e5:94:47:9d:0e:a5:88:71: a8:ff:94:cf:8b:dc:56:33:65:5b:a2:56:2a:77:a4:53:92:9d: 21:2a:51:87:75:24:8f:f9:46:6e:19:73:e8:70:25:6a:68:2d: 76:67:95:4a:a6:53:65:79:08:12:f8:b5:63:8c:ab:19:bf:49: 5f:ef:5f:93:83:7d:19:61:db:2d:c0:94:c7:43:c5:76:ee:cc: 39:32:9a:c9:b5:d7:04:78:44:93:5b:41:38:08:a9:71:f6:1a: 00:97:91:aa:4d:91:ba:77:ce:93:9e:22:4c:74:b2:0c:05:65: c8:18:ca:da:e9:a5:57:28:64:a2:33:5f:4f:36:fb:a3:d3:1d: 65:75:da:90:11:45:38:7c:80:97:8e:29:27:e5:57:43:4a:88: 37:39:c2:a3:4e:64:18:86:63:1c:6d:b6:ec:a4:76:a8:76:64: 08:12:39:3b:a2:c3:7a:fe:36:67:80:5e:8e:8d:97:9f:90:f6: 83:d7:d0:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO3mb3S1MeOfEZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk MWE2OGE5MTYtNTY5Yy00N2EzLTlmYTAtMTViNDI3NGM5NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdFoMmoJEe2dFDDIgXESJMpRKL7R5tpvbptL woQjAcJpQ5ZF39fo0tZzRsWjDvS9HitpKVEuUMzstLXv/uf6HI7Fy4PZazOId1bV NGAktMx+ly3T7HV55oO3IKkiJCZKSh5ZzkwzHpopAo9kzaT10gQZD4xlfEJRH757 8dBM3m0vxYY7JmcZWN3n9isa/LQeaXhyamJMiGpQ34LkYIDRqB74ZF/Cx+6Q/SSV nbKniYRyXlhnJvOSEHlAxxZj+o4GJMMQHuUz/y8XsMA/7rcOR/48ibwUoSmkKZ5T vD1RwkLUUwYxyhvtqjcr/pcFlJqVxHE5ykrM8q7pN09nvlNIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBsmdiICKiIwYA5io/PMPD8TraHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTc1YjQzOGMtNDMzYy0z NWNmLWIwYzItMmEyNDVkZjQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfUiT1tunrxMVEOY8unbE/DFPDcs5RGvzBiuVeEEyxM8rX0eBThGogf 69Pr/na6f7OwV7shNgkRFueMnPJnNhfllEedDqWIcaj/lM+L3FYzZVuiVip3pFOS nSEqUYd1JI/5Rm4Zc+hwJWpoLXZnlUqmU2V5CBL4tWOMqxm/SV/vX5ODfRlh2y3A lMdDxXbuzDkymsm11wR4RJNbQTgIqXH2GgCXkapNkbp3zpOeIkx0sgwFZcgYytrp pVcoZKIzX082+6PTHWV12pARRTh8gJeOKSflV0NKiDc5wqNOZBiGYxxttuykdqh2 ZAgSOTuiw3r+NmeAXo6Nl5+Q9oPX0Bs= -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:11 2025 by rpki-client