$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa File: f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa (raw, json) Hash identifier: D51XQptGanGbwaHEGNxzXWIngVk0PBs25tFV8fixQ3U= Subject key identifier: 3A:F6:26:84:33:99:60:21:35:D0:C3:21:3D:1E:EF:9B:75:5A:CE:76 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB121E2A970B204BB68114440 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 50.3.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:e2:a9:70:b2:04:bb:68:11:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=969e3a89-f8a3-42fb-be3f-2c64be3feae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:55:d0:19:80:d9:78:a8:0a:b2:28:71:fd: 91:88:cf:12:bf:1e:3b:4d:4c:78:bf:0d:99:e7:4b: fc:57:b8:5c:57:dd:93:eb:8c:37:b2:f5:f6:83:77: cc:c6:39:ad:55:8b:b3:08:a9:6b:a8:83:c7:52:ba: de:54:40:3c:5f:4d:c5:7e:45:6b:92:de:25:20:88: 74:7b:81:0f:7b:31:a6:1c:90:c2:82:35:05:55:94: b1:db:c8:6a:8d:dd:a6:26:a2:ee:63:5f:a8:e3:fd: 1e:f3:49:5a:e0:77:15:8b:9e:dc:38:6b:36:7d:66: 4d:b4:d7:ff:39:10:99:9f:4d:0e:f1:c6:0f:fb:da: 1b:9f:a2:4b:35:ec:f9:c3:86:ff:d3:32:bc:3d:47: a0:9d:c4:cd:64:33:39:43:b2:36:22:14:1e:63:94: 6e:9c:d0:91:5f:54:cf:e4:c7:ac:67:de:57:eb:e5: 65:16:3b:5b:38:2e:a2:82:91:5d:da:18:a0:73:05: 7e:90:94:1b:78:a8:0a:e5:98:82:b7:c9:18:04:26: 32:60:5b:90:c0:9d:39:9e:91:9c:63:58:b0:28:0f: 44:b6:c9:ed:62:67:f7:96:21:56:93:c4:d8:81:8b: 41:71:ed:c1:b8:78:e5:c8:0c:a4:0e:c6:ff:bc:90: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:26:84:33:99:60:21:35:D0:C3:21:3D:1E:EF:9B:75:5A:CE:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d6:a5:c6:76:35:07:42:85:4f:2b:36:9d:3b:a0:f6:90:11: ea:8d:61:b8:98:71:7c:46:f1:a0:c3:c0:bc:0e:b6:48:ff:ae: 8e:96:10:10:d1:31:f1:f0:38:4d:2c:3b:a6:3a:63:22:4b:94: f7:20:75:8b:27:26:c5:cb:37:fb:8d:08:ce:ff:14:ab:a2:8e: 95:b9:fb:b2:7b:91:ba:41:4c:6c:93:2f:8b:8e:e6:a0:21:64: 2d:ac:0d:cf:6e:88:1a:fb:f5:e3:e6:63:1b:60:cc:bc:56:12: 32:8c:3f:1f:aa:21:e7:9a:60:8a:8f:7e:e5:1f:54:db:c6:3e: 86:99:3a:06:4e:ad:b9:2e:f1:0f:85:2c:55:47:13:47:d4:48: c3:b0:43:b3:87:d0:a6:af:53:f6:45:5c:bf:eb:23:66:50:78: d9:03:16:14:7a:78:79:60:47:c9:7e:27:4e:8f:47:fe:75:9c: fb:bd:4e:49:49:c1:2e:98:ad:b2:98:30:03:df:0d:1d:8b:7a: 46:de:96:ca:53:d3:ec:92:7c:5d:36:b2:70:72:62:ad:67:4a: 2b:82:77:be:9b:23:d1:d7:9f:1c:87:d4:3e:3e:d8:7a:c2:c2: 44:03:e0:71:93:b1:e5:a6:22:7d:1b:da:df:ff:68:73:ee:95: 35:3e:2e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIeKpcLIEu2gRREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTY5ZTNhODktZjhhMy00MmZiLWJlM2YtMmM2NGJlM2ZlYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5V0BmA2XioCrIocf2RiM8Svx47TUx4vw2Z 50v8V7hcV92T64w3svX2g3fMxjmtVYuzCKlrqIPHUrreVEA8X03FfkVrkt4lIIh0 e4EPezGmHJDCgjUFVZSx28hqjd2mJqLuY1+o4/0e80la4HcVi57cOGs2fWZNtNf/ ORCZn00O8cYP+9obn6JLNez5w4b/0zK8PUegncTNZDM5Q7I2IhQeY5RunNCRX1TP 5MesZ95X6+VlFjtbOC6igpFd2higcwV+kJQbeKgK5ZiCt8kYBCYyYFuQwJ05npGc Y1iwKA9EtsntYmf3liFWk8TYgYtBce3BuHjlyAykDsb/vJDZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr2JoQzmWAhNdDDIT0e75t1Ws52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjAwYjdmZDQtN2NkMS0z MDJmLWE4NTEtNTI3NTRlMWIxZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvWpcZ2NQdChU8rNp07oPaQEeqNYbiYcXxG8aDDwLwOtkj/ro6WEBDR MfHwOE0sO6Y6YyJLlPcgdYsnJsXLN/uNCM7/FKuijpW5+7J7kbpBTGyTL4uO5qAh ZC2sDc9uiBr79ePmYxtgzLxWEjKMPx+qIeeaYIqPfuUfVNvGPoaZOgZOrbku8Q+F LFVHE0fUSMOwQ7OH0KavU/ZFXL/rI2ZQeNkDFhR6eHlgR8l+J06PR/51nPu9TklJ wS6YrbKYMAPfDR2LekbelspT0+ySfF02snByYq1nSiuCd76bI9HXnxyH1D4+2HrC wkQD4HGTseWmIn0b2t//aHPulTU+Ll8= -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:42 2026 by rpki-client