$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa File: a20e0277-c9c3-3cea-abfc-1a4724175152.roa (raw, json) Hash identifier: qGN/RI4e93RK4At0sD1TaELoZPaqmANK40yM0qIRg9Y= Subject key identifier: 80:4E:A5:E7:F4:AF:67:2E:CD:AE:2E:FB:6F:EC:2F:F7:C2:44:3A:E2 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BB5C2682E3D68E2B725AA9280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 2914 IP address blocks: 50.3.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:68:2e:3d:68:e2:b7:25:aa:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=07b46b0a-e873-4627-b964-b917169d8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:ed:2b:5d:3a:14:e0:8c:d0:80:a5:ca:a1: f2:15:96:de:68:71:39:ed:3a:3e:8f:a9:a4:f5:32: 19:29:b3:c1:3e:83:21:48:e9:bb:1b:6a:1b:92:ec: 85:03:7b:aa:15:37:c8:ca:24:22:ed:7b:b5:e2:01: a9:a9:70:76:16:66:ba:72:18:df:eb:aa:d9:c1:f7: e9:6c:99:57:34:0d:39:da:e9:d1:55:8a:af:80:4b: cf:5f:62:fd:0c:7d:94:d2:db:a5:e7:5a:66:94:80: 5e:ea:e6:a7:2f:da:5b:a5:da:69:b7:f2:cc:97:29: d5:43:98:ef:4c:74:b3:fb:87:2e:cb:44:3b:e2:03: 4d:9d:c1:ae:28:b5:85:8f:a8:80:c6:0e:71:46:17: 0f:bd:27:02:86:02:91:7a:cc:cb:5a:67:fe:84:1c: d3:2e:98:dd:92:b6:59:69:13:77:07:7e:1b:05:88: ce:d1:d2:23:ad:2c:52:c4:d8:25:8f:55:c6:fa:95: af:26:92:e6:d2:49:c2:c4:9a:7b:31:47:02:3f:dc: 3d:59:33:ce:96:25:46:0a:c9:4b:f0:dc:55:8e:65: fa:d7:c7:f8:2c:15:89:45:75:55:37:b1:07:17:43: 10:48:8c:63:9d:40:06:19:31:42:6a:8b:1f:c5:5b: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:A5:E7:F4:AF:67:2E:CD:AE:2E:FB:6F:EC:2F:F7:C2:44:3A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b6:90:ad:5e:75:96:c1:b0:5a:04:da:84:ee:02:b9:b6:ae: 41:80:72:bf:a4:b3:03:1a:3d:f7:5f:eb:ed:b6:e0:7e:c6:18: f0:2b:15:5d:40:58:0b:98:00:28:05:12:ab:1c:e5:68:7e:30: 45:84:17:2e:37:16:fb:47:02:e9:a9:4a:8b:41:16:7a:0e:21: 86:d8:88:88:93:1a:e4:fa:4f:9f:fd:2b:e9:ef:37:10:12:6c: e0:21:fc:8c:7c:2a:18:bd:f2:67:91:3e:d0:aa:d0:c1:b1:d1: ae:8b:9b:55:4c:a3:38:45:38:e6:bd:bd:27:08:3c:12:d9:32: 6a:f5:be:11:d9:10:0b:ab:80:0a:a4:8c:d1:ef:1e:58:bd:4f: 50:08:07:d6:4c:a0:f4:17:37:8a:60:c5:85:8d:3d:bb:02:ca: 8d:3a:de:39:d4:c9:7f:76:39:79:e2:e0:9d:f0:08:3d:84:d0: 79:3e:ac:e3:71:fb:21:bd:70:fa:1b:20:3a:d0:26:4f:da:60: 49:86:b0:cb:3a:91:6c:7d:bb:5f:ee:18:fb:e1:f3:40:c0:a5: 99:45:19:ee:92:91:4f:8a:fc:8b:38:7f:ee:b3:0a:56:7f:72: 0a:68:99:24:2c:02:5f:20:57:8c:e7:ab:e8:73:b2:0d:b9:c1: ac:35:c6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmguPWjityWqkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MDdiNDZiMGEtZTg3My00NjI3LWI5NjQtYjkxNzE2OWQ4YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2HtK106FOCM0IClyqHyFZbeaHE57To+j6mk 9TIZKbPBPoMhSOm7G2obkuyFA3uqFTfIyiQi7Xu14gGpqXB2Fma6chjf66rZwffp bJlXNA052unRVYqvgEvPX2L9DH2U0tul51pmlIBe6uanL9pbpdppt/LMlynVQ5jv THSz+4cuy0Q74gNNncGuKLWFj6iAxg5xRhcPvScChgKReszLWmf+hBzTLpjdkrZZ aRN3B34bBYjO0dIjrSxSxNglj1XG+pWvJpLm0knCxJp7MUcCP9w9WTPOliVGCslL 8NxVjmX618f4LBWJRXVVN7EHF0MQSIxjnUAGGTFCaosfxVu4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBOpef0r2cuza4u+2/sL/fCRDriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTIwZTAyNzctYzljMy0z Y2VhLWFiZmMtMWE0NzI0MTc1MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu2kK1edZbBsFoE2oTuArm2rkGAcr+kswMaPfdf6+224H7GGPArFV1A WAuYACgFEqsc5Wh+MEWEFy43FvtHAumpSotBFnoOIYbYiIiTGuT6T5/9K+nvNxAS bOAh/Ix8Khi98meRPtCq0MGx0a6Lm1VMozhFOOa9vScIPBLZMmr1vhHZEAurgAqk jNHvHli9T1AIB9ZMoPQXN4pgxYWNPbsCyo063jnUyX92OXni4J3wCD2E0Hk+rONx +yG9cPobIDrQJk/aYEmGsMs6kWx9u1/uGPvh80DApZlFGe6SkU+K/Is4f+6zClZ/ cgpomSQsAl8gV4znq+hzsg25waw1xgM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:23 2025 by rpki-client