$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa File: f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa (raw, json) Hash identifier: NHl5NkprG2OuWuSISchU40e7R8O/12V6xXc2soVbgDE= Subject key identifier: A7:5F:79:56:61:DC:25:EC:68:02:54:9F:35:3D:AB:BA:F1:87:53:13 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1467AEB8E09A6FF7F983B9E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 50.3.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ae:b8:e0:9a:6f:f7:f9:83:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=6ff2c111-c234-430a-9e9b-3324701dd762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:0a:68:44:1a:2f:d4:e8:f9:b9:42:05:45: ba:69:8a:87:f0:48:05:f3:4e:b7:1d:c0:b9:46:2b: f4:d6:aa:6d:65:3e:25:e4:0d:fb:db:d1:5d:0c:57: 87:fd:94:78:dd:41:83:00:c3:ef:ff:49:7b:bc:9e: 29:22:49:03:49:35:a7:75:f0:b9:60:92:9f:55:cb: b8:04:b7:d5:5e:06:8a:3e:d9:e2:b8:34:e5:58:ae: 6e:c9:5e:8c:12:d5:d7:58:54:cb:9b:4c:9e:03:90: 07:93:c9:25:ca:bf:ba:a2:94:b6:94:8d:ed:b1:15: b8:b1:86:50:61:a1:3f:e7:b3:79:a4:48:43:f2:cf: 0a:bd:be:df:76:44:ca:3d:15:0b:37:1c:6f:44:24: 19:28:b0:5e:77:fd:da:1a:30:a0:a2:e2:75:25:1d: d4:59:8c:80:b6:5a:f1:ae:ff:14:b3:95:fd:2c:05: 43:f3:5f:76:ed:cf:4d:10:0a:44:9a:34:1a:18:0c: 8f:ca:55:b9:d9:ac:ae:f7:cf:d7:aa:99:37:80:48: 28:8f:cf:60:d7:af:05:3c:51:86:c4:83:4c:23:56: 96:dd:d2:ac:4d:c7:44:e4:3b:e0:f7:57:86:e1:10: 8a:2f:68:e7:a6:a5:c4:a1:c0:af:89:c1:50:b4:67: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:79:56:61:DC:25:EC:68:02:54:9F:35:3D:AB:BA:F1:87:53:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:92:fc:e9:3a:4a:dd:74:6a:51:d8:5a:b9:a9:e0:2e:4b:82: ea:3f:c7:e9:0c:1e:44:27:8e:f1:9e:2c:e4:92:fe:08:3e:82: 19:48:2e:b0:5f:91:d6:bc:f5:69:bb:2e:3a:c3:87:66:3a:0a: 13:33:9c:91:90:ad:f1:b9:3f:61:0b:72:12:ec:84:50:b2:b3: 0a:c7:25:63:a8:09:40:91:bd:6e:01:c1:67:2f:f4:70:1c:02: d7:60:f9:9f:4a:cf:36:67:83:b8:34:4a:46:49:f4:cd:d1:4d: 58:cc:7c:2d:7c:92:4e:71:75:8b:06:bb:70:62:e6:d6:78:d6: f2:37:f9:bf:de:ff:ed:85:b1:cd:ac:82:3f:76:e8:f4:6c:81: 60:9d:45:2d:97:60:21:e5:99:5d:67:62:b3:f9:ac:08:a1:66: 38:f6:ee:7d:b8:f2:2e:63:54:cc:15:e6:f5:2c:c5:5c:9d:a4: e9:8f:08:ef:06:5e:bc:1b:e8:63:c4:3e:d2:18:27:73:dd:0f: 7b:8b:96:16:0d:c4:66:8f:fd:f9:4c:20:04:a6:10:c0:1c:a2: ec:f6:37:be:0b:fe:8c:02:2c:e8:ef:40:df:13:45:e3:97:8a: d4:54:a4:1d:10:8e:c2:2b:a9:95:bf:59:69:8c:2d:23:06:f8: 33:17:85:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6644Jpv9/mDueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NmZmMmMxMTEtYzIzNC00MzBhLTllOWItMzMyNDcwMWRkNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtYKaEQaL9To+blCBUW6aYqH8EgF8063HcC5 Riv01qptZT4l5A3729FdDFeH/ZR43UGDAMPv/0l7vJ4pIkkDSTWndfC5YJKfVcu4 BLfVXgaKPtniuDTlWK5uyV6MEtXXWFTLm0yeA5AHk8klyr+6opS2lI3tsRW4sYZQ YaE/57N5pEhD8s8Kvb7fdkTKPRULNxxvRCQZKLBed/3aGjCgouJ1JR3UWYyAtlrx rv8Us5X9LAVD81927c9NEApEmjQaGAyPylW52ayu98/Xqpk3gEgoj89g168FPFGG xINMI1aW3dKsTcdE5Dvg91eG4RCKL2jnpqXEocCvicFQtGclcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdfeVZh3CXsaAJUnzU9q7rxh1MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjAwYjdmZDQtN2NkMS0z MDJmLWE4NTEtNTI3NTRlMWIxZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmS/Ok6St10alHYWrmp4C5Lguo/x+kMHkQnjvGeLOSS/gg+ghlILrBf kda89Wm7LjrDh2Y6ChMznJGQrfG5P2ELchLshFCyswrHJWOoCUCRvW4BwWcv9HAc Atdg+Z9KzzZng7g0SkZJ9M3RTVjMfC18kk5xdYsGu3Bi5tZ41vI3+b/e/+2Fsc2s gj926PRsgWCdRS2XYCHlmV1nYrP5rAihZjj27n248i5jVMwV5vUsxVydpOmPCO8G Xrwb6GPEPtIYJ3PdD3uLlhYNxGaP/flMIASmEMAcouz2N74L/owCLOjvQN8TReOX itRUpB0QjsIrqZW/WWmMLSMG+DMXhUA= -----END CERTIFICATE-----Generated at Sun Sep 20 13:03:55 2026 by rpki-client