$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa File: 0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa (raw, json) Hash identifier: rYXfisIZZkZ7H5C4xVNhbUT+HwrEbGxHX9HfhD1ptJ8= Subject key identifier: 3C:CF:46:4C:A7:99:DE:E3:AD:9D:A6:E8:5B:7C:8A:DA:E3:97:8A:FB Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584BA9326D3350B2C9FBBD1301C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 61317 IP address blocks: 2604:4500:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6d:33:50:b2:c9:fb:bd:13:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c2a67101-22e8-4e12-93d8-e07c716bf1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:03:18:81:85:04:e1:73:f5:85:9c:3a:a7: 3d:0f:24:33:5e:0d:b0:5c:3b:f0:ce:68:ae:da:02: 19:c3:75:e7:0a:3d:21:11:f5:b3:dd:72:33:8d:3a: 13:ca:b1:f3:17:33:b6:a0:7d:d5:ea:5b:b3:cd:57: da:c5:f8:ea:fa:b1:fa:fe:fe:f9:b6:4e:05:51:11: bc:a9:40:22:d6:39:46:7c:79:c0:4a:40:38:1c:27: a4:ad:25:05:41:0a:24:dc:ad:a2:4a:e5:77:af:25: 65:b2:42:70:39:28:d2:7d:32:c2:35:ea:93:0e:07: 48:1d:d6:89:77:15:1a:ad:29:72:0e:89:01:56:dc: ae:19:b2:6f:40:c1:14:dc:1a:9b:bb:a3:7f:06:07: e9:3e:fb:d0:18:ee:42:07:f3:56:e5:c1:73:ea:f5: 7e:62:59:75:02:0b:2d:82:b4:3e:99:e5:39:d9:de: f1:54:dd:dd:9e:31:45:87:87:d0:b7:79:91:dd:72: 28:74:1b:56:31:be:bc:d2:1c:be:22:9d:ae:f8:60: be:7e:79:92:71:b1:3b:27:42:ea:4d:57:49:a3:05: c9:ae:84:c6:fa:2d:27:d0:95:97:d8:f0:12:c2:34: 63:7f:b5:8e:e4:cf:de:2b:4b:61:b7:a5:a5:ac:c6: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:46:4C:A7:99:DE:E3:AD:9D:A6:E8:5B:7C:8A:DA:E3:97:8A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:19:33:15:63:65:da:bd:af:3d:f8:2d:0c:10:74:e8:e7:95: fe:da:d6:15:2b:df:bd:4b:45:69:8e:6f:be:e8:0e:bd:cb:28: c5:08:5a:36:03:13:61:41:e8:b1:8c:eb:4d:e2:09:de:89:1d: a3:00:0c:f0:18:39:bf:e5:89:f5:37:3e:c3:67:77:5e:c4:7e: 8b:33:ee:2c:54:2c:20:fa:b7:ab:43:e0:79:71:2d:7d:ee:4e: 61:31:cb:12:63:21:05:e0:e5:3e:5f:11:1e:56:fe:13:24:54: 6e:0e:3a:f9:7d:6c:76:04:f0:ff:48:e1:e9:d4:94:50:31:ec: 2f:00:e9:a5:03:95:27:87:72:da:fb:38:e9:f7:96:b6:b8:fc: 90:a3:79:d6:91:95:8a:1d:0f:c2:0f:68:e8:bf:f0:c6:99:23: 49:fe:c0:70:ee:d6:f4:ec:fb:50:a8:4c:40:43:a5:5d:33:dc: 45:4c:88:e7:ca:bb:8b:91:d3:54:16:ab:fa:ab:1b:cb:31:9a: ae:6a:89:4e:cd:f7:51:fa:10:72:c9:32:80:7e:5c:af:27:6c: 5e:a7:02:29:bd:4f:c6:29:5c:db:38:b6:2d:43:69:20:09:16: d4:95:b0:57:21:ac:d7:29:ef:4a:d1:0d:e5:2d:62:e3:98:55: b5:45:30:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMm0zULLJ+70TAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzJhNjcxMDEtMjJlOC00ZTEyLTkzZDgtZTA3YzcxNmJmMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIsDGIGFBOFz9YWcOqc9DyQzXg2wXDvwzmiu 2gIZw3XnCj0hEfWz3XIzjToTyrHzFzO2oH3V6luzzVfaxfjq+rH6/v75tk4FURG8 qUAi1jlGfHnASkA4HCekrSUFQQok3K2iSuV3ryVlskJwOSjSfTLCNeqTDgdIHdaJ dxUarSlyDokBVtyuGbJvQMEU3Bqbu6N/BgfpPvvQGO5CB/NW5cFz6vV+Yll1Agst grQ+meU52d7xVN3dnjFFh4fQt3mR3XIodBtWMb680hy+Ip2u+GC+fnmScbE7J0Lq TVdJowXJroTG+i0n0JWX2PASwjRjf7WO5M/eK0tht6WlrMZKsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzPRkynmd7jrZ2m6Ft8itrjl4r7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMGM2NWViNjctMWU2Mi0z YTAzLWEyMDEtZDQ2MmYxZWNlN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUZMxVjZdq9rz34LQwQdOjnlf7a1hUr371LRWmOb77oDr3LKMUI WjYDE2FB6LGM603iCd6JHaMADPAYOb/lifU3PsNnd17Efosz7ixULCD6t6tD4Hlx LX3uTmExyxJjIQXg5T5fER5W/hMkVG4OOvl9bHYE8P9I4enUlFAx7C8A6aUDlSeH ctr7OOn3lra4/JCjedaRlYodD8IPaOi/8MaZI0n+wHDu1vTs+1CoTEBDpV0z3EVM iOfKu4uR01QWq/qrG8sxmq5qiU7N91H6EHLJMoB+XK8nbF6nAim9T8YpXNs4ti1D aSAJFtSVsFchrNcp70rRDeUtYuOYVbVFMFE= -----END CERTIFICATE-----Generated at Mon Nov 3 02:47:21 2025 by rpki-client