$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa File: 216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json) Hash identifier: 9HDp9Oh1asS+VBXsvMdZzf4QiEik6SmJ3x+Yblgn9fQ= Subject key identifier: 7E:6C:9C:FE:A0:D7:72:2A:EC:F4:E3:22:3B:04:45:E6:A5:AA:A6:73 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B0CDC06835BA20CBF30948E00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 396881 IP address blocks: 2604:880:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:06:83:5b:a2:0c:bf:30:94:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=91abf734-4df3-4bdf-a7ef-7745ea2b897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:b8:a5:d0:28:2c:5d:cd:e2:e0:0b:30:28: 95:5d:fc:80:98:02:8b:1a:12:f0:31:c3:3f:9d:f0: e5:c0:00:fa:5f:80:33:eb:b1:b6:0d:7e:68:e9:46: d3:12:7d:f4:c3:66:5d:0c:09:91:31:ca:fe:58:65: 88:1c:51:97:ef:65:a0:1a:dd:2c:93:ef:0e:18:54: 9c:81:1e:d7:68:f7:40:ae:59:b0:0a:d0:01:ed:a0: b7:c5:fc:78:12:0a:7d:f8:91:e5:10:ed:9e:1a:02: ea:db:9a:40:77:f4:10:bc:a6:49:c1:13:e8:ec:89: 86:f3:eb:68:ab:65:68:6d:0a:e4:38:c8:44:62:33: 78:72:75:68:86:d2:bb:56:8b:75:49:3c:50:00:57: 3e:61:60:d2:c4:25:e9:9c:87:d3:a3:7d:d3:ee:41: fd:37:c6:20:3c:d5:45:1c:21:13:9c:37:d8:10:20: 6e:a3:ec:6f:90:79:32:9d:1c:f8:c7:71:94:1b:4a: 44:f2:63:d6:5d:5d:9b:56:30:47:74:39:49:3a:85: c8:90:3a:33:4b:ba:ab:b4:56:cc:7e:e9:df:c9:ce: 26:f0:5b:19:eb:73:6f:dc:19:46:25:75:fe:9b:24: cb:3d:37:b2:ff:af:f3:33:0d:dd:d1:64:a0:8d:69: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6C:9C:FE:A0:D7:72:2A:EC:F4:E3:22:3B:04:45:E6:A5:AA:A6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ef:da:e8:3c:54:5a:9c:42:61:19:a6:06:ad:da:29:97:73: 1e:46:b9:7d:58:89:38:ca:a5:50:40:5a:8e:57:3d:dd:84:79: 06:6a:c8:6e:6d:3f:d6:c6:8c:8a:b5:0d:74:62:46:c6:41:aa: 92:a1:7d:21:46:93:f2:f8:11:2b:40:29:f0:2e:c6:6d:e6:95: 36:b7:27:f1:cc:0c:b0:7d:85:72:dd:16:60:6f:5b:c3:4d:21: 8a:80:69:b2:02:be:c4:ba:5b:cd:e0:38:3e:c4:8f:03:1b:33: 6b:72:78:da:09:4d:44:51:49:12:ec:e7:84:b0:77:da:4e:83: 20:0f:28:e7:37:48:91:9b:d1:ec:d6:29:9c:84:67:78:65:aa: d9:63:f3:69:02:0c:db:a1:8b:59:42:8f:5c:2c:d5:d9:40:0f: 7c:a8:12:ec:83:36:1f:a6:c0:84:ab:c9:63:43:ac:8a:be:16: 23:61:3e:09:4d:30:98:b9:ba:a6:90:65:e0:96:52:7b:93:d0: 0d:75:36:76:57:88:0c:ae:e8:70:3c:b8:20:7d:9b:44:f8:9e: 43:4d:6c:f4:5c:d9:d1:0d:50:4c:c8:ca:4d:c8:63:28:a4:31: 16:1f:51:74:02:60:c3:c0:5d:4d:6c:de:a6:27:d1:25:ba:d0: b1:62:09:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3AaDW6IMvzCUjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OTFhYmY3MzQtNGRmMy00YmRmLWE3ZWYtNzc0NWVhMmI4OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWG4pdAoLF3N4uALMCiVXfyAmAKLGhLwMcM/ nfDlwAD6X4Az67G2DX5o6UbTEn30w2ZdDAmRMcr+WGWIHFGX72WgGt0sk+8OGFSc gR7XaPdArlmwCtAB7aC3xfx4Egp9+JHlEO2eGgLq25pAd/QQvKZJwRPo7ImG8+to q2VobQrkOMhEYjN4cnVohtK7Vot1STxQAFc+YWDSxCXpnIfTo33T7kH9N8YgPNVF HCETnDfYECBuo+xvkHkynRz4x3GUG0pE8mPWXV2bVjBHdDlJOoXIkDozS7qrtFbM funfyc4m8FsZ63Nv3BlGJXX+myTLPTey/6/zMw3d0WSgjWlliQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH5snP6g13Iq7PTjIjsERealqqZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjE2ZDFiMDEtNWE4OS0z ODcyLWFlOGUtNDE2MTM1OTY1Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHv2ug8VFqcQmEZpgat2imXcx5GuX1YiTjKpVBAWo5XPd2EeQZq yG5tP9bGjIq1DXRiRsZBqpKhfSFGk/L4EStAKfAuxm3mlTa3J/HMDLB9hXLdFmBv W8NNIYqAabICvsS6W83gOD7EjwMbM2tyeNoJTURRSRLs54Swd9pOgyAPKOc3SJGb 0ezWKZyEZ3hlqtlj82kCDNuhi1lCj1ws1dlAD3yoEuyDNh+mwISryWNDrIq+FiNh PglNMJi5uqaQZeCWUnuT0A11NnZXiAyu6HA8uCB9m0T4nkNNbPRc2dENUEzIyk3I YyikMRYfUXQCYMPAXU1s3qYn0SW60LFiCQc= -----END CERTIFICATE-----Generated at Mon Nov 3 02:46:26 2025 by rpki-client