$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa File: a8794f77-a850-3e62-bbce-6ba1c46301d2.roa (raw, json) Hash identifier: xKgpyolqV29iIDFDjBQnM6jJz3voeze3/eA3WAPmtBM= Subject key identifier: 22:73:6B:F5:E9:08:36:82:62:DC:81:23:44:D5:64:69:6D:C7:A0:A5 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6CB5FABAC13EC113173D00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 50.2.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b5:fa:ba:c1:3e:c1:13:17:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=3cd32cbb-bdcb-495a-9ec9-482d335712e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:5b:40:3e:46:45:fc:2d:6a:c5:a8:b3:59: 4f:cf:e5:39:2a:c4:ae:c7:d4:1a:99:a5:ef:52:9e: bd:d5:65:c7:4b:55:a5:80:f1:a2:97:ab:84:88:db: e2:63:f9:97:44:f0:e7:bf:8c:f5:58:39:97:51:82: 77:b5:7a:fe:a4:eb:50:be:78:cc:ba:d8:2e:9f:8a: 3b:c4:48:70:93:d9:d6:20:14:86:21:33:42:68:34: a1:4c:d9:3e:fb:7e:04:8b:b2:b1:6e:fc:df:10:79: f1:44:83:f9:c3:c1:95:52:94:04:a7:17:83:cc:41: 10:1d:35:5d:82:fb:77:72:fe:cf:95:69:29:eb:ed: 15:36:40:eb:5c:45:c3:7e:d4:f1:f8:80:89:b5:2d: e6:19:4a:0a:44:ec:13:52:7e:bb:bc:66:c8:d4:b7: 3c:a3:f0:9d:cc:64:76:b0:cd:87:22:2f:9b:ac:c5: 8f:94:bc:19:cd:c5:5f:2c:71:c7:37:e3:de:21:2f: 04:1a:73:ec:7d:33:8b:a0:44:68:2c:83:e8:10:2e: 05:be:cb:ee:b6:9f:b3:3c:aa:be:67:04:3c:6f:75: ef:14:b7:20:4c:c9:99:86:61:68:8f:bc:7f:e9:78: 8d:78:23:13:dc:e9:59:2f:dc:ca:6e:ae:07:9b:98: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:6B:F5:E9:08:36:82:62:DC:81:23:44:D5:64:69:6D:C7:A0:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:88:82:12:4c:93:cf:60:d5:0c:2c:14:89:12:d7:a5:cf:a6: 9d:e6:1e:fc:ca:8a:d1:94:3b:be:03:48:f4:5a:87:f5:b5:73: 91:1d:a6:a8:df:bd:2c:76:2e:26:d4:60:01:5e:0c:bd:f1:69: 2f:76:cc:43:c3:85:cd:5a:fc:96:33:2a:5a:1b:67:1a:10:a9: 4d:17:c8:7a:8a:fe:7d:54:9f:f4:da:1c:0d:ac:33:e1:3d:e5: 71:84:fd:0a:88:26:16:29:db:90:b9:f3:bd:80:a9:4d:da:1b: e2:b2:0b:22:7e:3d:c2:30:de:2f:2d:f8:7e:bb:12:5a:17:00: 37:f4:0f:22:4a:d4:dc:c8:05:8c:1c:f7:c3:86:26:cb:37:6f: 18:1b:2a:de:c4:b3:49:64:22:ce:32:13:d4:77:28:1d:32:97: 01:ee:36:b9:f6:e9:d2:48:7c:fd:b9:87:62:10:d2:aa:58:ec: e4:55:88:f2:93:4e:f2:8a:95:57:a6:dd:1e:da:c8:5d:04:2d: a1:3c:db:74:c3:73:56:17:a8:f5:75:89:bc:7a:1d:e5:eb:b6: 8a:86:54:61:5d:12:31:80:b8:92:fe:04:cf:3b:a9:cd:c5:5c: 57:8c:a6:51:06:8c:dd:c7:1f:3d:6f:af:2d:f5:e2:91:a3:3c: 3d:17:47:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLX6usE+wRMXPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk M2NkMzJjYmItYmRjYi00OTVhLTllYzktNDgyZDMzNTcxMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsJbQD5GRfwtasWos1lPz+U5KsSux9QamaXv Up691WXHS1WlgPGil6uEiNviY/mXRPDnv4z1WDmXUYJ3tXr+pOtQvnjMutgun4o7 xEhwk9nWIBSGITNCaDShTNk++34Ei7KxbvzfEHnxRIP5w8GVUpQEpxeDzEEQHTVd gvt3cv7PlWkp6+0VNkDrXEXDftTx+ICJtS3mGUoKROwTUn67vGbI1Lc8o/CdzGR2 sM2HIi+brMWPlLwZzcVfLHHHN+PeIS8EGnPsfTOLoERoLIPoEC4Fvsvutp+zPKq+ ZwQ8b3XvFLcgTMmZhmFoj7x/6XiNeCMT3OlZL9zKbq4Hm5h2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJza/XpCDaCYtyBI0TVZGltx6ClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTg3OTRmNzctYTg1MC0z ZTYyLWJiY2UtNmJhMWM0NjMwMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWIghJMk89g1QwsFIkS16XPpp3mHvzKitGUO74DSPRah/W1c5Edpqjf vSx2LibUYAFeDL3xaS92zEPDhc1a/JYzKlobZxoQqU0XyHqK/n1Un/TaHA2sM+E9 5XGE/QqIJhYp25C5872AqU3aG+KyCyJ+PcIw3i8t+H67EloXADf0DyJK1NzIBYwc 98OGJss3bxgbKt7Es0lkIs4yE9R3KB0ylwHuNrn26dJIfP25h2IQ0qpY7ORViPKT TvKKlVem3R7ayF0ELaE823TDc1YXqPV1ibx6HeXrtoqGVGFdEjGAuJL+BM87qc3F XFeMplEGjN3HHz1vry314pGjPD0XRys= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:16 2025 by rpki-client