$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa File: 25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa (raw, json) Hash identifier: DHdl2W4+MjOCUh72PYfM80GVuYNnlLeLnbwryfMJX94= Subject key identifier: 87:1B:6C:64:51:41:4E:52:AE:67:65:B0:64:AC:D6:E5:F7:D7:E8:2A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AFC1BFA8DC8355CE449223020 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 2604:8380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fa:8d:c8:35:5c:e4:49:22:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=1a4093cc-85e2-4a67-bd2c-2f1f7e74f7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:60:f2:9a:bd:67:de:1d:21:c0:4f:cf:a1: b6:a0:df:ab:64:7a:c6:2b:72:62:eb:95:1e:be:6f: 88:ec:79:6e:24:4b:1a:85:55:80:b1:45:37:67:16: 89:b4:d7:99:b1:31:33:9c:08:3f:46:37:87:4f:27: 1f:49:7c:22:b5:f8:dd:8a:4b:b7:f4:6d:a9:b0:15: ad:c2:3d:dd:f8:8b:be:d3:eb:b6:99:27:1d:ec:39: cd:95:e3:bd:67:04:df:2e:a5:69:21:a0:6f:5a:5b: 5a:cc:94:0d:4e:3a:a1:87:6f:d7:8e:15:b1:dd:d8: 33:f2:74:0d:54:2a:11:cb:e9:00:15:d0:2d:59:41: df:67:f7:6a:19:6b:73:1f:d5:82:0d:d4:20:19:50: a1:c1:9c:6b:44:17:6a:a2:17:62:1d:bc:d2:86:13: ed:5d:75:71:a0:b7:72:da:00:45:00:65:6b:d8:83: 7e:4e:0c:18:04:44:39:48:6a:19:ef:fd:56:f1:85: bd:53:4c:a2:21:cd:fc:65:dd:9d:6c:c6:0f:1e:f3: ad:59:fc:d7:b4:3e:27:e1:4a:29:af:4c:9d:34:93: 82:be:a0:2b:7e:f1:bf:4b:19:d2:ed:50:63:3f:31: 21:32:21:03:80:c9:cc:5d:11:53:65:ee:f1:81:fc: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1B:6C:64:51:41:4E:52:AE:67:65:B0:64:AC:D6:E5:F7:D7:E8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b4:fc:c4:f0:43:a0:70:ba:57:32:9d:3f:6c:c9:43:e7:66: 20:ae:47:82:6f:9e:5d:fe:de:10:d7:da:d1:11:f6:3c:d6:ef: 83:49:a0:f2:8e:0d:1b:dc:b3:02:42:f7:3c:b2:58:3f:a7:25: cb:18:ec:53:cf:2b:7b:b0:c2:ce:a7:23:46:0d:8b:c4:02:79: 55:18:7f:e3:55:1e:c8:2c:a9:09:01:37:31:99:3f:c9:19:49: cb:a0:12:59:18:5a:c0:ba:1a:52:3a:66:22:fa:b2:2f:de:ef: 59:89:7c:df:34:1f:66:b1:0c:d8:dc:00:99:85:14:f2:bd:85: 6e:03:27:c4:8b:68:95:c9:54:cb:c5:51:03:b4:ed:3c:ac:e6: 34:89:7b:87:03:78:c7:a1:6f:a7:c0:c4:78:de:07:63:1b:2b: 75:74:f8:f4:3b:d5:fb:17:74:66:c4:79:05:55:1a:15:5d:94: 6a:02:0a:f2:9a:ee:62:41:d7:d2:55:1f:be:23:0d:7e:1d:e4: 29:09:3e:2f:af:8d:67:52:d7:c3:b6:22:3d:dc:0e:88:54:0f: 17:5c:3b:67:93:69:d8:d1:f3:39:c9:42:f3:26:1a:b2:55:4a: 24:80:4f:8d:21:16:a8:40:af:68:57:4d:44:84:82:bf:67:9a: 1c:e9:fc:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr8G/qNyDVc5EkiMCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MWE0MDkzY2MtODVlMi00YTY3LWJkMmMtMmYxZjdlNzRmN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmadg8pq9Z94dIcBPz6G2oN+rZHrGK3Ji65Ue vm+I7HluJEsahVWAsUU3ZxaJtNeZsTEznAg/RjeHTycfSXwitfjdiku39G2psBWt wj3d+Iu+0+u2mScd7DnNleO9ZwTfLqVpIaBvWltazJQNTjqhh2/XjhWx3dgz8nQN VCoRy+kAFdAtWUHfZ/dqGWtzH9WCDdQgGVChwZxrRBdqohdiHbzShhPtXXVxoLdy 2gBFAGVr2IN+TgwYBEQ5SGoZ7/1W8YW9U0yiIc38Zd2dbMYPHvOtWfzXtD4n4Uop r0ydNJOCvqArfvG/SxnS7VBjPzEhMiEDgMnMXRFTZe7xgfxQpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIcbbGRRQU5SrmdlsGSs1uX31+gqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjVlNWI5ODYtODFlMi0z ZWViLTkyZTUtZWQyMTUyNGNmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBptPzE8EOgcLpXMp0/bMlD52YgrkeCb55d/t4Q19rREfY81u+DSaDy jg0b3LMCQvc8slg/pyXLGOxTzyt7sMLOpyNGDYvEAnlVGH/jVR7ILKkJATcxmT/J GUnLoBJZGFrAuhpSOmYi+rIv3u9ZiXzfNB9msQzY3ACZhRTyvYVuAyfEi2iVyVTL xVEDtO08rOY0iXuHA3jHoW+nwMR43gdjGyt1dPj0O9X7F3RmxHkFVRoVXZRqAgry mu5iQdfSVR++Iw1+HeQpCT4vr41nUtfDtiI93A6IVA8XXDtnk2nY0fM5yULzJhqy VUokgE+NIRaoQK9oV01EhIK/Z5oc6fw9 -----END CERTIFICATE-----Generated at Sun Sep 14 13:55:12 2025 by rpki-client