$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa File: c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa (raw, json) Hash identifier: 8zhvocnNkLwkQtVY4iaZZ400jdjsiCWlLWVXFWRVNoI= Subject key identifier: F9:8A:1C:C3:3E:8A:C6:0F:70:21:69:6F:28:84:65:06:75:2A:34:7A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584BA9326DA6C161F4D9E2395510 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 61317 IP address blocks: 2604:4500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6d:a6:c1:61:f4:d9:e2:39:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=71b1c9a5-6e6b-4266-b0c5-8ce8c25b0c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:27:b4:35:72:69:f9:e2:96:b7:ab:84:7a: ab:80:d2:a8:b2:f0:c8:cf:0f:47:58:4a:72:d2:9e: e6:96:af:11:9a:92:7f:c2:ad:20:72:53:d4:a9:89: 91:b9:a9:ed:06:8f:72:0d:e3:a3:cb:90:76:d1:52: 2e:54:a1:93:49:14:86:6e:af:cf:1d:21:56:c8:38: df:d9:53:82:f3:c9:92:81:b8:1f:46:82:a9:7f:a4: d5:8f:b1:77:9c:b9:c0:69:11:61:9d:73:e4:14:7c: a0:3f:22:97:24:19:fe:34:19:3a:3e:b8:31:5c:a8: da:05:56:8a:6c:90:4a:39:82:14:9a:97:45:ce:7b: 10:0b:c2:2b:c5:19:18:ec:e8:17:dc:13:38:c1:4e: 98:37:bb:48:03:88:0a:7c:2c:89:f4:ac:2f:fd:97: 1d:5a:99:4d:f0:f2:de:2c:d6:37:3b:45:32:d3:b2: b1:47:3e:ba:67:a1:6a:d5:c8:84:33:a7:fa:9f:3d: 93:6f:99:97:1a:5d:07:77:c2:f7:df:1b:d2:01:18: ba:c6:18:dc:31:27:24:23:8e:3e:a0:42:1a:b9:29: b7:33:5c:0b:be:5d:5f:48:37:0f:79:3b:5e:3e:d8: 41:a0:b9:7a:e4:05:86:61:5a:9f:40:a3:8f:58:47: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8A:1C:C3:3E:8A:C6:0F:70:21:69:6F:28:84:65:06:75:2A:34:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:84:1f:7d:ff:28:8c:93:86:c4:46:80:01:51:76:1b:75:56: b5:65:ca:40:20:12:b9:c1:a5:2c:8f:59:88:71:e1:45:a3:a7: b5:25:c1:85:d5:04:bc:19:eb:c4:53:81:52:74:14:0d:e8:61: f3:88:79:3a:20:90:2b:42:12:5f:fc:03:e0:d7:ab:29:d4:38: aa:cb:b0:c2:a0:3b:9a:ea:1c:8a:0b:7a:2e:d7:6a:8c:0b:61: 9f:54:b4:41:a6:c7:c2:22:6a:c8:ea:1f:d6:60:6d:61:26:0b: 22:e5:e8:ea:b6:bc:ac:95:78:f9:6f:33:e4:fd:41:7c:de:76: dc:0b:3f:27:bb:21:0b:df:9d:2c:ee:32:f3:de:c9:b7:a5:fb: d8:52:71:16:4b:f9:66:b7:9f:a5:51:f2:5e:8e:52:b5:56:08: 50:d2:f7:d5:ed:7a:1a:4f:81:db:4c:88:bd:87:d8:fa:43:4a: 20:42:99:00:f9:d6:11:37:98:79:75:ac:6f:d4:ef:44:b3:99: d4:85:48:d1:14:bd:1d:8f:d1:cf:d0:e8:ed:fd:45:59:91:ff: 72:be:9b:72:83:33:d8:71:22:a8:62:ca:62:b8:3c:cf:30:7b: 26:f5:33:f6:db:28:47:48:14:aa:63:f9:a4:cb:b8:f0:e9:c8: 8f:47:1a:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMm2mwWH02eI5VRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NzFiMWM5YTUtNmU2Yi00MjY2LWIwYzUtOGNlOGMyNWIwYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMontDVyafnilrerhHqrgNKosvDIzw9HWEpy 0p7mlq8RmpJ/wq0gclPUqYmRuantBo9yDeOjy5B20VIuVKGTSRSGbq/PHSFWyDjf 2VOC88mSgbgfRoKpf6TVj7F3nLnAaRFhnXPkFHygPyKXJBn+NBk6PrgxXKjaBVaK bJBKOYIUmpdFznsQC8IrxRkY7OgX3BM4wU6YN7tIA4gKfCyJ9Kwv/ZcdWplN8PLe LNY3O0Uy07KxRz66Z6Fq1ciEM6f6nz2Tb5mXGl0Hd8L33xvSARi6xhjcMSckI44+ oEIauSm3M1wLvl1fSDcPeTtePthBoLl65AWGYVqfQKOPWEe9KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPmKHMM+isYPcCFpbyiEZQZ1KjR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzU4NTNiODMtMTJiZi0z Y2RjLTg3ZDEtMDdkZGY2OThkNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyEH33/KIyThsRGgAFRdht1VrVlykAgErnBpSyPWYhx4UWjp7Ul wYXVBLwZ68RTgVJ0FA3oYfOIeTogkCtCEl/8A+DXqynUOKrLsMKgO5rqHIoLei7X aowLYZ9UtEGmx8IiasjqH9ZgbWEmCyLl6Oq2vKyVePlvM+T9QXzedtwLPye7IQvf nSzuMvPeybel+9hScRZL+Wa3n6VR8l6OUrVWCFDS99XtehpPgdtMiL2H2PpDSiBC mQD51hE3mHl1rG/U70SzmdSFSNEUvR2P0c/Q6O39RVmR/3K+m3KDM9hxIqhiymK4 PM8weyb1M/bbKEdIFKpj+aTLuPDpyI9HGtY= -----END CERTIFICATE-----Generated at Mon Nov 3 02:47:19 2025 by rpki-client