$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/add7f233-1dc7-3a50-bd6b-16f90dfdf19d.roa File: add7f233-1dc7-3a50-bd6b-16f90dfdf19d.roa (raw, json) Hash identifier: eIh6HJDIsggPgxpY1uNwt0u/RpBBXmvvcyfV1+napLI= Subject key identifier: 23:AB:D1:4D:8F:12:7E:5F:6E:6F:B2:7F:E3:77:85:3F:F4:25:92:97 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F38B26F9F61EEE997C7DE9C80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/add7f233-1dc7-3a50-bd6b-16f90dfdf19d.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 50.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:6f:9f:61:ee:e9:97:c7:de:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=b7012830-ca1b-4fd5-88f8-34c49d22a2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:53:a7:d0:01:2f:8c:83:4c:bc:ef:0e:3a:e1: 63:d6:c6:aa:c1:8e:7c:e0:20:45:06:e6:47:43:df: af:9f:2c:b4:b9:61:b0:31:6c:d4:4d:98:a9:15:d2: 7b:f6:8a:4b:6d:b2:59:ea:ed:95:18:83:4e:1f:2f: 9e:f4:52:a0:ac:56:8d:f2:87:41:c5:57:5d:bd:60: 6f:7e:6e:a6:a7:db:47:f1:19:52:c7:a4:d2:78:8c: 9a:10:13:60:1b:b0:bd:1b:b3:ba:03:69:ba:e5:20: 85:f9:f7:e7:12:17:83:c2:7e:fd:96:35:aa:69:43: 1f:f2:68:80:63:09:9d:3d:4c:d6:52:b3:7b:d4:8f: bd:df:20:2c:78:ef:33:71:a9:16:36:14:e7:1c:13: 51:81:45:e7:91:ee:7a:64:e6:d3:32:d2:7b:d4:0a: a9:b0:c2:5b:f7:6c:69:00:0d:9c:f2:dc:57:95:db: a4:a2:d6:00:41:47:7c:c7:68:93:e6:34:15:a7:b9: 82:ae:1b:10:a6:7f:5d:49:07:94:c9:b2:f7:55:e0: cf:b6:40:6a:45:5d:54:95:78:d5:ed:9b:75:72:0c: f1:16:ef:2d:ab:d6:22:d3:53:ad:3d:ca:5d:bf:5b: 16:32:86:13:86:7e:14:c9:05:13:05:3a:e1:bf:e3: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AB:D1:4D:8F:12:7E:5F:6E:6F:B2:7F:E3:77:85:3F:F4:25:92:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/add7f233-1dc7-3a50-bd6b-16f90dfdf19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:34:a9:07:ca:5b:16:4a:45:0c:40:fe:29:49:d1:94:ba:7a: 35:33:3e:4e:90:5a:a2:2a:8f:d0:90:c5:05:ab:3b:99:36:7e: 49:e7:64:27:b1:94:d6:13:bb:cb:7a:f2:58:8a:36:68:81:6f: a1:b4:cd:ba:b9:cc:a3:e1:3c:b1:a5:fd:77:9a:67:a6:71:38: 0f:ae:94:cb:7e:61:c1:8c:2a:b0:4a:d8:10:cc:04:c9:8d:26: 4d:1f:93:1e:bf:ba:38:74:f5:5c:7b:53:70:4f:cf:92:da:a8: 51:ca:cb:42:56:29:10:ed:52:46:48:56:3e:fb:63:5a:c7:16: 1b:43:45:95:ec:9f:3a:1b:c2:e2:f1:ee:a3:3c:8a:85:bb:51: 85:ed:68:bf:b4:b4:f5:9e:4b:08:91:0d:fd:1a:03:49:c7:0b: fe:03:42:d1:c1:f7:e2:19:aa:a5:09:02:c1:2b:60:09:d1:b8: 29:86:d3:18:54:8c:af:ab:b4:7f:c7:6b:60:ab:0b:70:5e:10: 10:35:08:a0:e2:78:50:c2:f7:6f:0b:a6:23:75:aa:01:29:cf: 3f:d1:ba:d5:1f:45:96:c9:88:8d:16:fa:9b:75:3b:45:a9:fa: 9a:e7:a7:6a:ab:c3:e5:40:6d:92:e0:8c:dd:48:44:f7:4d:60: a8:ab:c1:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84sm+fYe7pl8fenIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk YjcwMTI4MzAtY2ExYi00ZmQ1LTg4ZjgtMzRjNDlkMjJhMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1On0AEvjINMvO8OOuFj1saqwY584CBFBuZH Q9+vnyy0uWGwMWzUTZipFdJ79opLbbJZ6u2VGINOHy+e9FKgrFaN8odBxVddvWBv fm6mp9tH8RlSx6TSeIyaEBNgG7C9G7O6A2m65SCF+ffnEheDwn79ljWqaUMf8miA YwmdPUzWUrN71I+93yAseO8zcakWNhTnHBNRgUXnke56ZObTMtJ71AqpsMJb92xp AA2c8txXldukotYAQUd8x2iT5jQVp7mCrhsQpn9dSQeUybL3VeDPtkBqRV1UlXjV 7Zt1cgzxFu8tq9Yi01OtPcpdv1sWMoYThn4UyQUTBTrhv+ONswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOr0U2PEn5fbm+yf+N3hT/0JZKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWRkN2YyMzMtMWRjNy0z YTUwLWJkNmItMTZmOTBkZmRmMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs0qQfKWxZKRQxA/ilJ0ZS6ejUzPk6QWqIqj9CQxQWrO5k2fknnZCex lNYTu8t68liKNmiBb6G0zbq5zKPhPLGl/XeaZ6ZxOA+ulMt+YcGMKrBK2BDMBMmN Jk0fkx6/ujh09Vx7U3BPz5LaqFHKy0JWKRDtUkZIVj77Y1rHFhtDRZXsnzobwuLx 7qM8ioW7UYXtaL+0tPWeSwiRDf0aA0nHC/4DQtHB9+IZqqUJAsErYAnRuCmG0xhU jK+rtH/Ha2CrC3BeEBA1CKDieFDC928LpiN1qgEpzz/RutUfRZbJiI0W+pt1O0Wp +prnp2qrw+VAbZLgjN1IRPdNYKirwfU= -----END CERTIFICATE-----Generated at Sun Oct 4 19:46:16 2026 by rpki-client