$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa File: 1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json) Hash identifier: qpvu+6z9ksmNeheQtPQ5avnhm10A5EGxHOSs5iePlSY= Subject key identifier: A3:07:86:31:C4:E7:F0:B5:07:F2:A3:35:41:DA:FE:95:FA:D9:36:09 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B7B21F9DC6D6E170DFD4BA200 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 61317 IP address blocks: 2604:4500:1200::/40 maxlen: 40 2604:4500:1300::/40 maxlen: 40 2604:4500:1400::/40 maxlen: 40 2604:4500:1500::/40 maxlen: 40 2604:4500:1600::/40 maxlen: 40 2604:4500:1700::/40 maxlen: 40 2604:4500:1800::/40 maxlen: 40 2604:4500:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f9:dc:6d:6e:17:0d:fd:4b:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=3e116d34-e92f-4afa-aa78-6ac3f1a67536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:d0:5c:29:56:5f:a4:ac:6d:81:0f:f0:be: 6a:22:0d:aa:a8:4a:3a:84:05:57:4a:48:1d:3c:63: c0:c8:d7:b0:3d:03:82:2b:7d:d5:f2:e8:a4:1c:9b: f9:17:b5:6b:71:59:31:23:6b:2f:cf:d6:24:3b:83: 49:7e:fc:91:b8:e1:74:a2:2d:85:99:3e:fe:0e:9a: 8b:2e:c5:b4:c3:97:4e:90:e0:b1:55:99:5a:ff:c4: 30:e4:d1:1d:f1:3d:5d:5d:3f:d3:4a:ef:d2:e2:e2: 78:d3:1b:89:08:89:0a:24:31:af:e2:b2:ad:d7:84: 07:d0:9a:a5:fb:29:ba:be:54:6f:4a:e3:42:22:7b: a4:dc:a8:62:51:48:73:c7:85:64:c9:f7:b5:1f:ac: 33:73:fa:90:30:87:51:cf:5d:fd:23:4f:82:6c:45: d3:2c:46:23:0e:60:4a:29:b2:9b:ec:8d:02:d0:37: d8:7d:e4:ac:6d:89:d2:b7:04:de:12:3a:49:65:a5: 4e:2c:46:7f:c8:10:c0:b4:b0:ed:9b:a7:f5:7c:84: 87:47:0e:e6:f0:92:16:3d:a1:73:d9:01:35:ca:b6: b9:6d:07:6d:4f:17:ee:99:84:e5:26:31:47:3d:36: 39:3d:96:8f:e4:ad:7b:33:fb:cf:3f:bf:a5:f4:77: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:07:86:31:C4:E7:F0:B5:07:F2:A3:35:41:DA:FE:95:FA:D9:36:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d9:96:70:e8:f2:76:5e:48:c6:3e:0f:f1:43:0c:53:f6:3f: 8b:8b:e5:f9:8c:33:2f:92:08:24:4f:10:89:5c:4d:d9:cf:76: 7a:22:ef:73:ef:8a:81:1a:8e:61:0a:29:71:b6:e6:47:42:7b: 66:0f:84:e4:a2:71:e5:e3:05:9b:71:04:a9:f1:9f:61:9a:01: ef:a2:f5:f0:a3:34:2d:80:84:61:04:d7:95:83:37:42:06:3e: 68:4c:44:68:af:06:05:79:08:0f:10:11:13:2e:d4:32:79:b6: 8d:80:a1:c2:95:57:df:cf:17:b0:a9:30:40:90:b9:e9:d1:e9: 72:10:33:b4:29:2c:bf:dd:93:98:d1:de:58:23:51:16:0c:ae: 90:37:e4:de:19:78:81:6c:9d:fd:6b:1d:c7:9f:1e:31:0b:56: 82:65:5f:79:b9:03:ff:25:25:13:5a:36:6d:26:12:ff:f6:6c: bf:1a:80:25:ec:a8:95:22:b0:3b:d1:e2:60:b5:34:49:6c:19: f8:02:8e:b7:9d:e7:1c:e5:1c:8d:84:82:ea:00:43:72:09:20: 4e:f7:c8:11:b7:7c:22:42:91:e9:98:aa:b2:73:71:fe:9e:ea: 9c:39:1a:ac:0e:04:c8:70:10:a8:f3:08:c7:6d:6b:cf:63:7e: f3:78:87:f1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEt7IfncbW4XDf1LogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk M2UxMTZkMzQtZTkyZi00YWZhLWFhNzgtNmFjM2YxYTY3NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT/QXClWX6SsbYEP8L5qIg2qqEo6hAVXSkgd PGPAyNewPQOCK33V8uikHJv5F7VrcVkxI2svz9YkO4NJfvyRuOF0oi2FmT7+DpqL LsW0w5dOkOCxVZla/8Qw5NEd8T1dXT/TSu/S4uJ40xuJCIkKJDGv4rKt14QH0Jql +ym6vlRvSuNCInuk3KhiUUhzx4Vkyfe1H6wzc/qQMIdRz139I0+CbEXTLEYjDmBK KbKb7I0C0DfYfeSsbYnStwTeEjpJZaVOLEZ/yBDAtLDtm6f1fISHRw7m8JIWPaFz 2QE1yra5bQdtTxfumYTlJjFHPTY5PZaP5K17M/vPP7+l9Hd9EQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKMHhjHE5/C1B/KjNUHa/pX62TYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWVlYWY5ODMtOGQzYS0z MTE1LTliNmUtMzBkZmEwMjA3ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgEmBEUA EgMGASYERQAYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGjZlnDo8nZeSMY+D/FDDFP2P4uL5fmMMy+SCCRP EIlcTdnPdnoi73PvioEajmEKKXG25kdCe2YPhOSiceXjBZtxBKnxn2GaAe+i9fCj NC2AhGEE15WDN0IGPmhMRGivBgV5CA8QERMu1DJ5to2AocKVV9/PF7CpMECQuenR 6XIQM7QpLL/dk5jR3lgjURYMrpA35N4ZeIFsnf1rHcefHjELVoJlX3m5A/8lJRNa Nm0mEv/2bL8agCXsqJUisDvR4mC1NElsGfgCjred5xzlHI2EguoAQ3IJIE73yBG3 fCJCkemYqrJzcf6e6pw5GqwOBMhwEKjzCMdta89jfvN4h/E= -----END CERTIFICATE-----Generated at Sun Oct 19 21:00:58 2025 by rpki-client