$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa File: ded75a2a-25ad-368f-862d-551b6add182e.roa (raw, json) Hash identifier: PG8G2ExdeSYZ/qZxJqREUmqlGlosw4cJPb4Vrpe4dhg= Subject key identifier: C4:E8:A5:1B:11:B6:DE:4C:3D:12:C5:C2:17:A7:78:20:31:6B:F9:20 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BAEC7C9FDDC48A53D9DCB6B00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3257 IP address blocks: 50.2.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:fd:dc:48:a5:3d:9d:cb:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1141b6f0-fa5c-4df9-98f2-62b84ef71d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b6:d7:63:43:3f:e9:99:90:33:17:79:f4:43: bf:6c:4c:7d:4a:71:be:b3:b0:2f:ba:6d:e1:26:74: 18:25:51:e5:24:77:29:a7:be:41:52:95:66:b2:fc: 8f:d9:a4:d4:10:31:05:5f:6f:ca:21:5f:e8:70:fd: 05:0c:63:90:fa:04:6d:d6:4d:83:82:71:c6:2c:96: e3:22:f1:d3:e0:21:ec:00:e9:2d:41:41:e5:05:7c: 5e:b9:38:15:cb:84:96:c9:f6:2b:51:e4:df:eb:f4: b1:a0:3a:9b:0c:d5:4e:8a:50:79:18:53:0a:14:b1: cc:d8:89:2f:88:ed:70:8c:e6:db:43:a7:82:25:ed: e7:ff:21:6f:f8:a2:f9:37:57:74:5c:db:aa:fe:71: b2:d3:34:2d:d0:68:94:bb:78:48:4e:a8:23:e6:9f: ec:25:ba:a2:3e:94:98:47:bb:79:12:04:c5:2a:99: 66:58:79:ce:c6:3e:a9:ab:81:d9:cd:be:34:cf:cb: ec:bd:f3:43:41:08:a0:c9:75:d5:d4:3f:2c:6f:ed: e9:42:7f:23:ce:67:f5:ec:19:1f:fb:50:f4:2f:ed: cc:61:ee:79:01:1f:02:0f:f1:48:48:f5:fd:6f:30: ed:89:82:19:45:06:09:44:05:2d:84:f0:2a:ca:6b: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E8:A5:1B:11:B6:DE:4C:3D:12:C5:C2:17:A7:78:20:31:6B:F9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded75a2a-25ad-368f-862d-551b6add182e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6b:e3:c1:ee:de:82:37:e5:52:5d:d6:0a:6a:30:3a:97:b5: ea:16:ed:2d:6d:4d:3c:f8:8a:62:bd:83:6c:ca:f8:57:a5:fb: 2d:6f:8e:e5:cb:30:54:4c:34:38:71:4a:50:ee:e9:94:58:b3: 87:6f:aa:d4:eb:34:ab:7b:e0:1b:e5:df:a0:d6:a6:06:bc:b3: 5d:bd:67:9f:a9:92:80:ef:39:e3:ee:c3:67:93:24:7e:64:18: c1:d2:ed:1d:75:d6:45:05:25:31:a6:cd:7b:1a:82:be:71:cf: e4:e0:a7:19:5e:75:2a:a7:c6:b6:25:db:2e:34:73:54:bd:5f: 32:d1:9b:be:28:dd:77:78:b9:28:d9:8f:81:c1:f1:b4:80:ab: 4d:0d:84:bf:9c:b2:b4:39:c6:04:7f:5e:bd:52:67:7e:70:fb: be:70:a4:71:b1:3e:ac:78:30:cb:bc:d7:fe:0e:2f:c4:46:ce: e9:53:14:34:6c:3c:a6:bc:44:a8:75:a0:34:ff:32:7b:56:4e: 05:6a:25:ab:b5:08:80:c3:4b:c9:1a:9b:d7:43:4b:dd:a0:45: 30:ee:51:6a:ae:d1:4e:2b:61:ee:1d:a9:47:ba:80:38:12:a4: 92:bf:67:34:3d:52:77:dc:b3:f3:7c:9e:af:ec:4a:c0:a9:18: d9:01:4c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8n93EilPZ3LawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MTE0MWI2ZjAtZmE1Yy00ZGY5LTk4ZjItNjJiODRlZjcxZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rbXY0M/6ZmQMxd59EO/bEx9SnG+s7Avum3h JnQYJVHlJHcpp75BUpVmsvyP2aTUEDEFX2/KIV/ocP0FDGOQ+gRt1k2DgnHGLJbj IvHT4CHsAOktQUHlBXxeuTgVy4SWyfYrUeTf6/SxoDqbDNVOilB5GFMKFLHM2Ikv iO1wjObbQ6eCJe3n/yFv+KL5N1d0XNuq/nGy0zQt0GiUu3hITqgj5p/sJbqiPpSY R7t5EgTFKplmWHnOxj6pq4HZzb40z8vsvfNDQQigyXXV1D8sb+3pQn8jzmf17Bkf +1D0L+3MYe55AR8CD/FISPX9bzDtiYIZRQYJRAUthPAqyms+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTopRsRtt5MPRLFwheneCAxa/kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGVkNzVhMmEtMjVhZC0z NjhmLTg2MmQtNTUxYjZhZGQxODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVr48Hu3oI35VJd1gpqMDqXteoW7S1tTTz4imK9g2zK+Fel+y1vjuXL MFRMNDhxSlDu6ZRYs4dvqtTrNKt74Bvl36DWpga8s129Z5+pkoDvOePuw2eTJH5k GMHS7R111kUFJTGmzXsagr5xz+TgpxledSqnxrYl2y40c1S9XzLRm74o3Xd4uSjZ j4HB8bSAq00NhL+csrQ5xgR/Xr1SZ35w+75wpHGxPqx4MMu81/4OL8RGzulTFDRs PKa8RKh1oDT/MntWTgVqJau1CIDDS8kam9dDS92gRTDuUWqu0U4rYe4dqUe6gDgS pJK/ZzQ9Unfcs/N8nq/sSsCpGNkBTHs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:02 2025 by rpki-client