$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa File: 24dda753-48f0-3464-8586-4c56cb9bb7cc.roa (raw, json) Hash identifier: FFw9u3eLqs7m2vtXtVgGZGP/maERcda58iHQJqIWmlA= Subject key identifier: E1:41:27:8D:54:B7:90:EC:3C:42:D2:9B:BE:7A:59:2A:88:6A:A8:22 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B0CDC069CD7107893D84C6980 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 394727 IP address blocks: 2604:880:6e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:06:9c:d7:10:78:93:d8:4c:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=fb4e29ee-63c1-4c29-91d5-e320f0d5fd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:de:8f:09:93:19:87:3d:e9:83:b1:fb:1c:e7: 1a:76:17:3a:94:c3:9e:ff:9b:c8:0a:ce:4e:be:69: 15:70:d9:f5:b1:7a:aa:8c:00:60:e6:c5:dc:03:44: b9:e0:e6:ad:c0:29:25:2e:84:46:70:97:45:b7:56: c4:c7:b4:0e:d5:04:26:ae:20:80:6f:c5:86:bb:65: 3a:77:6c:4e:31:f2:d2:ed:fa:53:d5:db:7a:1b:0e: 30:d9:be:92:a8:19:82:e0:10:db:83:ce:1d:b7:5a: 62:3a:86:99:f2:c7:ca:36:bf:ad:02:4d:1c:a3:24: 25:b8:e5:87:da:e1:5a:d1:64:e8:e0:25:55:ac:3a: f7:40:12:33:b3:ea:99:b6:d0:80:04:b7:50:44:b7: 2d:31:41:e1:4d:3d:0d:6d:f9:6f:39:18:d5:e5:56: 0e:c3:28:1c:05:e1:48:73:9d:a0:f1:8e:88:ef:bf: 45:b5:6b:d5:8a:1c:7a:b6:77:50:6a:4d:e1:ee:08: 75:92:4e:ca:e3:83:00:7f:0b:92:24:81:36:ea:e2: 1d:7e:22:52:d4:d1:ba:6b:db:2c:f8:d2:2e:73:ba: 12:1a:79:a2:b1:47:53:4d:a8:1f:df:e1:d1:03:38: 79:a3:c7:c0:65:93:ea:6f:f9:69:8c:8d:f1:ed:e2: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:27:8D:54:B7:90:EC:3C:42:D2:9B:BE:7A:59:2A:88:6A:A8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:6e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:22:01:c0:6e:f3:dc:5d:27:8f:4d:5c:07:d2:4d:68:e6:05: c8:91:1d:45:1d:5a:6f:d4:71:9e:7e:5c:2e:41:4a:8f:8c:7a: 1d:c4:4f:72:78:b0:95:99:ca:74:82:fe:81:a0:88:d1:19:ff: 4e:af:22:34:2a:a5:49:cd:21:ba:f7:e3:a0:8d:63:f0:86:c1: cc:bf:1f:b6:94:7a:ce:7e:9c:82:64:8f:0f:d9:76:4f:4e:e7: c1:56:66:bb:b7:36:02:d3:65:0e:d2:ba:5a:71:1d:39:79:ab: e0:d2:19:37:6c:ea:c0:e5:14:62:1b:26:2f:c8:bc:e4:a9:40: 3b:5e:2e:de:ae:c0:f7:67:e1:91:3d:3d:b9:d8:45:13:83:56: ec:50:3c:a1:dd:a5:ab:aa:60:0e:c0:91:1a:95:85:c1:9e:a1: 3d:dc:be:06:46:a4:d3:1c:96:73:97:c3:a8:f3:ab:7a:0d:55: 23:18:2e:b6:e1:47:34:88:df:da:4e:fd:0b:72:7c:4a:8a:d4: af:9d:c1:e1:1a:b8:79:15:39:5f:ab:91:09:ae:73:05:ac:b5: ec:ab:ab:54:ce:b6:9b:0b:32:74:dd:b5:6f:84:3e:fc:36:f6: 97:54:8c:30:87:ce:de:02:cf:df:b6:d6:f5:b2:6b:8c:88:49: 99:bb:a0:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3Aac1xB4k9hMaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZmI0ZTI5ZWUtNjNjMS00YzI5LTkxZDUtZTMyMGYwZDVmZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t6PCZMZhz3pg7H7HOcadhc6lMOe/5vICs5O vmkVcNn1sXqqjABg5sXcA0S54OatwCklLoRGcJdFt1bEx7QO1QQmriCAb8WGu2U6 d2xOMfLS7fpT1dt6Gw4w2b6SqBmC4BDbg84dt1piOoaZ8sfKNr+tAk0coyQluOWH 2uFa0WTo4CVVrDr3QBIzs+qZttCABLdQRLctMUHhTT0NbflvORjV5VYOwygcBeFI c52g8Y6I779FtWvVihx6tndQak3h7gh1kk7K44MAfwuSJIE26uIdfiJS1NG6a9ss +NIuc7oSGnmisUdTTagf3+HRAzh5o8fAZZPqb/lpjI3x7eLaCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFBJ41Ut5DsPELSm756WSqIaqgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjRkZGE3NTMtNDhmMC0z NDY0LTg1ODYtNGM1NmNiOWJiN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0iAcBu89xdJ49NXAfSTWjmBciRHUUdWm/UcZ5+XC5BSo+Meh3E T3J4sJWZynSC/oGgiNEZ/06vIjQqpUnNIbr346CNY/CGwcy/H7aUes5+nIJkjw/Z dk9O58FWZru3NgLTZQ7SulpxHTl5q+DSGTds6sDlFGIbJi/IvOSpQDteLt6uwPdn 4ZE9PbnYRRODVuxQPKHdpauqYA7AkRqVhcGeoT3cvgZGpNMclnOXw6jzq3oNVSMY LrbhRzSI39pO/QtyfEqK1K+dweEauHkVOV+rkQmucwWsteyrq1TOtpsLMnTdtW+E Pvw29pdUjDCHzt4Cz9+21vWya4yISZm7oOg= -----END CERTIFICATE-----Generated at Mon Nov 3 02:45:14 2025 by rpki-client