$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa File: d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa (raw, json) Hash identifier: jcaMmnV8i9fO+hcRhRo4N9wVdwu+s0OpUhUscnyMQ4I= Subject key identifier: 15:25:27:CA:3E:6E:A9:F9:86:31:B7:F4:27:16:CA:76:98:A3:DE:1A Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BB88D5942892745B544251F80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 50.2.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:59:42:89:27:45:b5:44:25:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=bef0c0a3-7c4d-4f55-9464-2b733ae73ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:70:e1:33:f5:6a:85:56:f1:11:5c:b2:ac: b4:d7:06:a4:c0:b4:85:09:86:3d:2a:94:83:7f:4b: 4f:fd:a3:28:ae:f8:2c:78:c9:28:bf:e7:46:51:57: 7d:1b:65:b9:d4:73:c6:df:2a:76:c4:cb:f8:9c:a0: a9:21:9d:ff:e3:0c:e6:9e:95:05:33:00:97:65:da: 87:bb:aa:f4:cb:60:c8:84:4e:f2:cd:cf:78:e6:e9: ae:19:f1:0d:41:56:1b:ab:ad:6f:80:87:43:2a:60: 66:75:bd:c9:e9:d2:34:14:ce:03:e6:b2:22:b2:62: 56:e2:dc:44:f0:d2:4b:ef:8e:f0:fd:cd:40:19:d9: d6:30:b9:03:71:d9:4b:d7:16:27:a7:39:5b:3a:45: b5:1c:73:63:c7:18:49:11:6c:45:d4:48:c4:5f:b4: 28:10:9d:33:29:b9:70:73:99:c8:15:46:da:c1:e7: 19:fa:96:75:60:a6:ae:23:db:73:08:65:0f:14:cb: ea:8d:7d:d9:be:b5:8a:1b:38:50:6d:f0:88:76:32: 7e:a1:94:94:bb:70:6f:4c:ed:81:b0:9e:8a:fa:4c: d3:e1:ad:40:75:4b:a7:da:15:b7:7b:79:be:96:8c: 54:d0:37:e2:8e:f2:ec:3d:12:0b:b9:22:ed:80:eb: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:25:27:CA:3E:6E:A9:F9:86:31:B7:F4:27:16:CA:76:98:A3:DE:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:43:25:66:f6:d1:86:5b:4f:43:e5:15:49:73:32:66:e2:71: 91:c6:c2:d7:aa:a2:83:df:55:ac:77:67:e9:28:1f:d9:8c:61: fc:b7:aa:6e:cc:ab:01:77:23:56:cf:82:55:0f:53:f9:84:49: e7:06:b3:4b:13:41:55:fc:dc:28:35:bb:52:f6:62:a7:0a:1b: 1a:f5:88:91:f9:7b:30:ad:db:dd:c3:07:4f:5c:27:7e:fd:49: f0:51:71:57:52:72:d8:e4:e0:40:06:1d:68:9c:7a:cf:26:c3: 1c:a8:c3:ff:ea:13:2a:b4:1d:ab:ca:a5:d5:c6:ea:93:58:97: a8:91:dd:1f:9d:98:2c:ba:cc:fb:77:c8:97:0c:c0:d3:df:96: 15:26:b4:46:9e:52:2a:5e:b4:55:68:fe:8f:65:8e:fe:5e:b5: 95:d6:cd:16:a4:0e:aa:5c:bb:a2:38:62:2d:a2:a8:a9:2f:44: 4f:d9:41:a0:98:3b:9b:34:aa:da:ae:e3:8e:9e:f6:45:05:12: 62:f2:7b:e8:5f:2b:74:85:63:4e:a3:fb:e1:21:9e:b5:f5:0b: 0a:ab:57:81:6d:53:6e:73:a7:18:38:69:97:48:d9:42:78:0d: 24:f5:82:a0:2b:80:45:6d:92:25:f3:90:b9:0b:eb:1d:fd:f0: dc:3e:5e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVlCiSdFtUQlH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmVmMGMwYTMtN2M0ZC00ZjU1LTk0NjQtMmI3MzNhZTczY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVpw4TP1aoVW8RFcsqy01wakwLSFCYY9KpSD f0tP/aMorvgseMkov+dGUVd9G2W51HPG3yp2xMv4nKCpIZ3/4wzmnpUFMwCXZdqH u6r0y2DIhE7yzc945umuGfENQVYbq61vgIdDKmBmdb3J6dI0FM4D5rIismJW4txE 8NJL747w/c1AGdnWMLkDcdlL1xYnpzlbOkW1HHNjxxhJEWxF1EjEX7QoEJ0zKblw c5nIFUbawecZ+pZ1YKauI9tzCGUPFMvqjX3ZvrWKGzhQbfCIdjJ+oZSUu3BvTO2B sJ6K+kzT4a1AdUun2hW3e3m+loxU0DfijvLsPRILuSLtgOup1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUlJ8o+bqn5hjG39CcWynaYo94aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDljMjY2MGUtZTk0Zi0z ZTNjLWJhYjctOGNmZGVkZGY1MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVDJWb20YZbT0PlFUlzMmbicZHGwteqooPfVax3Z+koH9mMYfy3qm7M qwF3I1bPglUPU/mESecGs0sTQVX83Cg1u1L2YqcKGxr1iJH5ezCt293DB09cJ379 SfBRcVdSctjk4EAGHWices8mwxyow//qEyq0HavKpdXG6pNYl6iR3R+dmCy6zPt3 yJcMwNPflhUmtEaeUipetFVo/o9ljv5etZXWzRakDqpcu6I4Yi2iqKkvRE/ZQaCY O5s0qtqu446e9kUFEmLye+hfK3SFY06j++EhnrX1CwqrV4FtU25zpxg4aZdI2UJ4 DST1gqArgEVtkiXzkLkL6x398Nw+XmY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:18 2025 by rpki-client