$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa File: 1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa (raw, json) Hash identifier: u+0G/snQiKINOnxXLCRJwmUswPbyf+7iD+i6EgX+nOI= Subject key identifier: 9C:90:B7:4B:D5:BD:8C:BE:57:49:7C:49:A6:E9:16:47:C4:0E:B6:0F Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D6AAA8801E52194B457A42F80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 61317 IP address blocks: 2604:4500:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:88:01:e5:21:94:b4:57:a4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=c7cbeddf-8e96-4190-b9b0-8947de02f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:24:8d:e8:29:b7:93:68:db:cc:fc:0a:4d:7c: ea:9c:26:8a:21:9a:13:a1:53:3a:6d:27:35:48:1b: 99:6f:f0:78:63:ec:51:6b:04:a2:a4:4b:1a:ae:18: 4b:d9:0a:a6:68:0e:90:f4:a2:f4:50:f1:c6:2d:3e: 9d:06:c2:4f:b2:10:3c:25:59:12:13:47:ae:b9:de: 92:96:90:44:72:11:c5:00:c1:3f:06:9c:22:ff:10: 23:c0:44:94:84:c7:af:8e:ae:14:18:ec:96:60:2f: 7d:5d:0a:84:13:f9:99:01:33:99:ca:c1:19:af:08: 8d:1a:69:cc:d5:e6:ad:9e:5f:0b:de:f6:0f:5a:4b: 26:9c:bf:e1:6e:e0:84:fb:78:a2:ed:57:1a:15:6f: 88:57:9d:04:e1:00:b9:36:55:42:bf:b5:8e:12:7a: 0c:33:2c:a7:40:aa:13:36:b1:31:b3:32:2f:a1:b0: 6e:d0:b0:bb:fa:80:d6:a3:b4:ca:8a:74:fe:da:ee: 84:10:f3:ea:03:70:d2:ba:81:df:5e:b0:f4:f6:53: b1:e8:76:fe:65:19:5e:dd:48:9e:cd:19:cf:cb:fd: 93:cc:9e:21:32:ac:d6:cd:e4:f1:b3:c5:39:57:7e: 93:99:f3:9f:0f:de:8c:e0:61:b0:e2:93:93:6c:f1: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:B7:4B:D5:BD:8C:BE:57:49:7C:49:A6:E9:16:47:C4:0E:B6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b2:32:f9:51:12:5a:28:5b:66:a0:60:7a:bb:78:ff:26:8a: 04:3b:7b:a0:88:9b:4e:83:ec:a2:9f:8c:19:5d:7d:44:10:58: 19:5e:32:e3:c3:7c:d4:28:2b:64:08:78:16:48:27:99:13:e5: 9e:c5:c1:d8:e2:d7:c2:a6:0f:02:8e:c8:97:15:69:e7:0f:9d: b4:8a:56:9d:3d:85:95:df:10:5b:ec:ba:26:7c:d3:d4:50:96: a2:a8:e1:c7:2d:2c:1b:83:a8:04:01:95:18:ce:cb:bf:59:e8: 19:20:40:5f:c2:8f:5b:2c:48:d0:ee:b2:f8:24:94:e4:a5:5f: 58:4b:0d:4f:19:1d:26:b9:de:57:50:27:3c:ea:85:5b:30:0e: 9c:7d:ac:3d:60:02:f7:c1:ca:43:86:6f:e2:25:8f:52:9f:27: d0:4e:fd:0d:60:35:db:bb:19:2a:4a:bb:97:4b:75:a5:ab:c3: fc:34:90:b6:d5:f6:e7:88:ab:51:89:50:bf:58:e2:24:40:11: f1:c9:f8:b0:e5:82:70:d0:a2:65:07:37:9e:3f:ca:22:1f:8f: ec:34:87:75:52:4f:ed:d3:a3:07:12:15:31:79:cb:69:5e:94: 93:fe:d2:a3:ea:50:4d:52:08:02:6d:65:0e:96:65:0a:6b:05: e5:0c:82:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqogB5SGUtFekL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YzdjYmVkZGYtOGU5Ni00MTkwLWI5YjAtODk0N2RlMDJmNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSSN6Cm3k2jbzPwKTXzqnCaKIZoToVM6bSc1 SBuZb/B4Y+xRawSipEsarhhL2QqmaA6Q9KL0UPHGLT6dBsJPshA8JVkSE0euud6S lpBEchHFAME/Bpwi/xAjwESUhMevjq4UGOyWYC99XQqEE/mZATOZysEZrwiNGmnM 1eatnl8L3vYPWksmnL/hbuCE+3ii7VcaFW+IV50E4QC5NlVCv7WOEnoMMyynQKoT NrExszIvobBu0LC7+oDWo7TKinT+2u6EEPPqA3DSuoHfXrD09lOx6Hb+ZRle3Uie zRnPy/2TzJ4hMqzWzeTxs8U5V36TmfOfD96M4GGw4pOTbPE+fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJyQt0vVvYy+V0l8SabpFkfEDrYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWJhNWU0ZGUtYzJjZi0z MmZkLThkMDMtZjcwYzU5MjU3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJuyMvlRElooW2agYHq7eP8migQ7e6CIm06D7KKfjBldfUQQWBle MuPDfNQoK2QIeBZIJ5kT5Z7Fwdji18KmDwKOyJcVaecPnbSKVp09hZXfEFvsuiZ8 09RQlqKo4cctLBuDqAQBlRjOy79Z6BkgQF/Cj1ssSNDusvgklOSlX1hLDU8ZHSa5 3ldQJzzqhVswDpx9rD1gAvfBykOGb+Ilj1KfJ9BO/Q1gNdu7GSpKu5dLdaWrw/w0 kLbV9ueIq1GJUL9Y4iRAEfHJ+LDlgnDQomUHN54/yiIfj+w0h3VST+3TowcSFTF5 y2lelJP+0qPqUE1SCAJtZQ6WZQprBeUMgg0= -----END CERTIFICATE-----Generated at Wed Apr 8 20:48:06 2026 by rpki-client