$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa File: fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json) Hash identifier: FihQVko0c3MjXuA3ETxaz+LGl9c0g3z7RofAfXgyh5E= Subject key identifier: BC:B0:67:D1:28:96:C1:AC:EA:D2:92:0C:87:0F:E8:22:90:DB:2C:F9 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B0CDC06B27BEE0B9C4DF83150 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 29802 IP address blocks: 2604:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:06:b2:7b:ee:0b:9c:4d:f8:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=bfdce881-b861-4414-889e-86e9d8e53391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:80:3d:5a:61:eb:21:d4:13:7b:35:cc:24: b6:66:ac:88:35:3c:f9:8f:4d:6b:14:70:f9:1c:7c: 41:8a:92:c2:dd:f9:99:ac:1a:1c:a6:dd:20:47:82: c2:c0:a0:aa:28:f5:e7:84:9d:5c:7f:64:54:3d:63: 80:65:f3:f4:5e:70:4a:f3:40:16:e7:e2:7e:c2:c4: 5d:e4:67:e9:94:3b:25:6f:cd:ad:ce:44:20:d0:d1: bd:9e:82:ed:bf:f2:b2:62:78:26:d7:50:97:fa:4b: ad:5d:37:dd:98:8f:e6:5d:b1:1c:2a:9f:15:2d:e0: 3b:4c:10:cf:06:fb:fe:d9:c1:77:b4:79:27:dd:bd: 1f:5d:f9:fd:b6:5c:a2:d7:18:fc:d0:e3:c3:ee:54: 7f:1f:cb:fb:39:13:a6:83:3f:5f:c4:c6:81:1a:9e: 19:20:54:44:01:9d:61:f6:5b:99:0b:7e:d3:3c:57: a6:29:7a:81:f6:f5:f0:b5:c5:6f:bd:5d:82:06:67: d3:58:c3:81:98:2b:0f:10:33:29:07:54:e7:f8:3a: f0:25:90:f6:46:d7:16:17:d7:da:2e:f7:5d:a8:36: 75:5e:79:6c:32:5e:24:3f:70:8f:47:89:4f:b0:b9: 36:f9:40:83:51:7b:b9:a1:d5:1a:24:6c:81:23:ab: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:67:D1:28:96:C1:AC:EA:D2:92:0C:87:0F:E8:22:90:DB:2C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:39:8f:42:bd:26:74:d7:c2:1c:22:0b:2c:bf:28:4a:94:6b: 78:36:f9:45:31:03:84:c3:33:c7:2f:b1:c8:47:ef:ee:80:e3: af:ba:ea:b4:62:f2:f4:4a:de:c6:4e:11:f8:bd:18:40:3e:1d: cf:40:42:bf:a1:e9:2f:b5:17:b9:93:29:8b:8e:82:28:1a:6c: a2:5a:b8:25:cc:99:33:39:59:94:51:ac:9b:ef:d2:c2:62:35: f4:63:8b:1e:7a:e8:aa:20:0f:8d:a0:58:07:e5:dd:9f:41:fd: e1:fd:df:d2:36:7b:23:c4:5a:20:bb:e0:ac:33:88:5b:8e:de: 19:f1:b4:31:1d:ce:d5:24:c2:52:4f:ff:2d:40:a1:0f:37:7f: bb:64:54:8f:52:dd:1d:94:0c:b0:a9:96:7b:57:6c:02:15:24: e4:61:b8:2a:a8:38:8a:4b:ff:89:08:5e:30:a5:fd:fd:71:bc: 55:b8:ca:d9:a3:f4:9b:f5:27:5d:e9:f1:a9:f4:b5:2f:24:0c: 22:7f:eb:e6:c1:ac:ea:b7:01:5d:e8:60:5c:f6:5b:94:f0:d5: b6:29:3d:06:2a:d3:d5:42:fb:dc:4f:3f:7f:ea:26:7e:be:b6: be:55:20:7a:04:08:eb:ad:62:2b:cf:e8:78:04:49:75:af:67: 8a:64:8b:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3Aaye+4LnE34MVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YmZkY2U4ODEtYjg2MS00NDE0LTg4OWUtODZlOWQ4ZTUzMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio6APVph6yHUE3s1zCS2ZqyINTz5j01rFHD5 HHxBipLC3fmZrBocpt0gR4LCwKCqKPXnhJ1cf2RUPWOAZfP0XnBK80AW5+J+wsRd 5GfplDslb82tzkQg0NG9noLtv/KyYngm11CX+kutXTfdmI/mXbEcKp8VLeA7TBDP Bvv+2cF3tHkn3b0fXfn9tlyi1xj80OPD7lR/H8v7OROmgz9fxMaBGp4ZIFREAZ1h 9luZC37TPFemKXqB9vXwtcVvvV2CBmfTWMOBmCsPEDMpB1Tn+DrwJZD2RtcWF9fa LvddqDZ1XnlsMl4kP3CPR4lPsLk2+UCDUXu5odUaJGyBI6tTBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLywZ9EolsGs6tKSDIcP6CKQ2yz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmRlMzg2YTAtYTBhMy0z M2Y5LWFkMTEtODEzNzc4Y2Q2OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAOY9CvSZ018IcIgssvyhKlGt4NvlFMQOEwzPHL7HIR+/ugOOvuuq0 YvL0St7GThH4vRhAPh3PQEK/oekvtRe5kymLjoIoGmyiWrglzJkzOVmUUayb79LC YjX0Y4seeuiqIA+NoFgH5d2fQf3h/d/SNnsjxFogu+CsM4hbjt4Z8bQxHc7VJMJS T/8tQKEPN3+7ZFSPUt0dlAywqZZ7V2wCFSTkYbgqqDiKS/+JCF4wpf39cbxVuMrZ o/Sb9Sdd6fGp9LUvJAwif+vmwazqtwFd6GBc9luU8NW2KT0GKtPVQvvcTz9/6iZ+ vra+VSB6BAjrrWIrz+h4BEl1r2eKZIub -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:31 2025 by rpki-client