$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa File: 1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json) Hash identifier: TtUCfriPvLDoBA3rB+Mfqhr/xxkj9Kc6k5IRg7v+wcg= Subject key identifier: 19:DF:EB:8B:6B:43:E2:39:50:01:41:A5:27:4E:93:4D:AD:45:40:E6 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D39CF8FDBC7150CAFACF38C00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 61317 IP address blocks: 2604:4500:1200::/40 maxlen: 40 2604:4500:1300::/40 maxlen: 40 2604:4500:1400::/40 maxlen: 40 2604:4500:1500::/40 maxlen: 40 2604:4500:1600::/40 maxlen: 40 2604:4500:1700::/40 maxlen: 40 2604:4500:1800::/40 maxlen: 40 2604:4500:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:8f:db:c7:15:0c:af:ac:f3:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=49e85d33-8de4-4963-b5e5-284539d08899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:ff:44:17:77:53:86:81:23:84:7d:2e:a6: b4:3b:a9:b7:db:ca:cc:6f:be:79:d7:27:2b:1d:78: 74:94:99:ff:07:d8:d4:6a:85:2a:11:c9:3f:37:09: df:35:5e:31:f1:53:e8:aa:d6:aa:02:4e:7b:c9:61: 9e:8f:ee:d6:18:89:05:2c:a8:f8:66:bd:91:7a:27: 13:b5:8e:01:f5:7b:de:9c:8e:ef:81:af:77:22:48: 05:3e:ea:2a:71:e3:97:7b:f9:04:54:d9:a9:d8:49: 2b:de:f6:0d:bd:e2:d8:64:ea:19:b9:44:65:b6:f6: 1d:8d:c5:9e:bb:3b:80:4a:59:30:ba:31:d9:e9:8d: c2:ea:ed:e6:f6:8c:c6:df:ef:5d:d8:54:ac:df:e2: b5:2a:bf:a3:8d:27:d1:2a:94:c3:ac:f4:e7:d9:cd: 45:b9:a5:54:41:ac:16:d9:e4:48:80:d8:54:f1:c6: c0:17:c5:59:bd:55:5b:8b:47:c7:ba:8d:ad:3b:4b: d7:a0:65:4d:90:e5:fc:d8:09:7a:a5:97:a7:82:62: 9e:a3:e2:89:4b:a0:80:8b:b1:e7:62:5e:b1:ea:f0: 21:07:51:e0:61:da:02:c4:e3:10:b6:71:77:13:62: d4:7e:e2:b6:7c:56:4b:03:fa:15:48:55:5d:9e:9a: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:EB:8B:6B:43:E2:39:50:01:41:A5:27:4E:93:4D:AD:45:40:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:29:92:94:b3:a1:ae:63:4d:e7:e2:32:68:ae:52:f3:8a:77: b9:d5:84:12:e4:3b:09:d4:c8:98:07:43:b3:90:61:99:1c:a0: e0:6e:92:79:6d:7f:e2:cd:b4:68:37:4e:9f:38:d2:bc:b7:02: 8f:79:e4:2c:e1:d3:24:a3:35:d5:13:4b:33:0f:14:59:15:bd: 8e:40:45:61:59:31:d0:23:8d:c2:b9:ab:2b:ed:b1:66:ae:19: 6d:f5:53:63:c4:55:fa:7f:4f:75:e4:02:80:01:89:4c:f8:12: 58:83:1b:07:13:6d:88:9a:c1:93:21:c9:00:7d:7d:63:2f:2f: 1d:a0:eb:67:92:d7:b1:54:19:13:d6:36:1f:07:2a:25:6f:82: d4:48:f6:f6:46:50:46:e6:bf:1d:a4:67:fd:67:a8:91:0d:b5: 1c:5e:9b:3d:7c:91:0b:be:fe:3b:e8:b1:2a:d3:15:d5:d7:d0: e2:03:e0:4b:8f:f4:81:92:d0:06:db:1c:b5:59:48:2d:98:69: e1:22:55:d3:8c:47:4a:2a:95:20:0e:27:1a:32:97:19:13:0c: e2:49:4c:47:0b:9d:05:03:4c:b4:59:eb:47:e5:f3:74:2f:b9: f8:e9:6c:47:73:3d:e4:6b:a8:6e:88:fd:49:08:21:b7:cf:0c: 90:01:e5:19 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE05z4/bxxUMr6zzjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NDllODVkMzMtOGRlNC00OTYzLWI1ZTUtMjg0NTM5ZDA4ODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUD/RBd3U4aBI4R9Lqa0O6m328rMb7551ycr HXh0lJn/B9jUaoUqEck/NwnfNV4x8VPoqtaqAk57yWGej+7WGIkFLKj4Zr2ReicT tY4B9XvenI7vga93IkgFPuoqceOXe/kEVNmp2Ekr3vYNveLYZOoZuURltvYdjcWe uzuASlkwujHZ6Y3C6u3m9ozG3+9d2FSs3+K1Kr+jjSfRKpTDrPTn2c1FuaVUQawW 2eRIgNhU8cbAF8VZvVVbi0fHuo2tO0vXoGVNkOX82Al6pZengmKeo+KJS6CAi7Hn Yl6x6vAhB1HgYdoCxOMQtnF3E2LUfuK2fFZLA/oVSFVdnpqqdQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBnf64trQ+I5UAFBpSdOk02tRUDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWVlYWY5ODMtOGQzYS0z MTE1LTliNmUtMzBkZmEwMjA3ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgEmBEUA EgMGASYERQAYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACkpkpSzoa5jTefiMmiuUvOKd7nVhBLkOwnUyJgH Q7OQYZkcoOBuknltf+LNtGg3Tp840ry3Ao955Czh0ySjNdUTSzMPFFkVvY5ARWFZ MdAjjcK5qyvtsWauGW31U2PEVfp/T3XkAoABiUz4EliDGwcTbYiawZMhyQB9fWMv Lx2g62eS17FUGRPWNh8HKiVvgtRI9vZGUEbmvx2kZ/1nqJENtRxemz18kQu+/jvo sSrTFdXX0OID4EuP9IGS0AbbHLVZSC2YaeEiVdOMR0oqlSAOJxoylxkTDOJJTEcL nQUDTLRZ60fl83QvufjpbEdzPeRrqG6I/UkIIbfPDJAB5Rk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:37 2026 by rpki-client