$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa File: 216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json) Hash identifier: s/kEubdUmdfEli3K2e8lF9NbonVZ8rxCodThCxMl+Ik= Subject key identifier: C8:9B:ED:46:84:34:59:F0:F6:67:9C:8D:EF:75:34:7F:D1:86:D1:94 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F3052701337C353E6290F5FC0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 396881 IP address blocks: 2604:880:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:70:13:37:c3:53:e6:29:0f:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=880efba2-41fc-42f7-b795-cccdf6ff1f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:12:08:ed:96:a2:9d:41:ae:c7:42:1a:41: 25:b3:bf:31:53:9b:12:27:af:9f:1f:98:41:6e:11: 85:1c:98:14:46:c5:a2:ee:22:ae:25:03:b5:3c:1b: 74:a2:62:18:0b:75:1b:02:19:95:95:f4:9e:69:a6: 14:c3:37:f3:c5:38:40:43:55:4c:18:ad:6e:3c:f5: 81:96:67:f3:21:c8:fb:c9:1f:f2:40:b0:87:08:4a: 3d:7f:a8:c4:9e:29:d7:80:cb:a1:cc:5f:88:59:a2: b6:ce:fa:ec:05:3e:a1:d8:90:6b:7b:db:de:da:66: e1:eb:38:4c:36:ae:81:4a:e6:7d:37:31:f1:12:25: 1e:2a:39:68:21:e1:4b:58:9b:d9:b0:eb:9e:75:8f: 63:b6:cf:a4:00:b0:22:be:a6:09:1b:e6:f7:a2:86: bf:43:be:be:14:a0:2f:4a:2f:56:9c:03:88:3d:78: 13:e3:15:d6:7d:c2:8c:74:44:58:de:53:10:ef:ae: 53:63:a7:8b:80:32:76:03:c6:9f:ed:ae:98:ae:71: d9:bf:28:bb:e2:1d:90:45:b1:91:c4:3c:2f:ff:25: a8:6d:44:a4:c2:c5:2d:d6:9a:f1:c2:3f:87:12:08: 3d:78:0f:1d:8e:21:9a:c5:b3:03:5a:79:7d:1d:23: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:ED:46:84:34:59:F0:F6:67:9C:8D:EF:75:34:7F:D1:86:D1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:29:8e:13:4f:e7:96:17:c4:fb:7a:40:83:55:3d:07:6b:d9: 97:2e:38:fb:a7:d3:9a:b0:64:36:78:d8:5a:7f:23:11:2b:ed: 92:d2:ca:c7:a6:b2:75:f5:45:58:12:ac:15:ea:49:35:25:80: 78:8b:55:4a:40:21:7a:33:d6:5c:ad:d2:d4:c8:33:ac:10:a8: 74:be:54:5d:8d:68:ba:49:f3:b4:cc:08:e1:7f:53:73:ed:c0: 75:1a:46:1a:be:c3:f7:0f:24:fb:4e:9d:6f:d8:23:7f:d6:ee: 06:c2:8c:56:f1:63:6a:92:cd:06:45:a9:bd:52:f2:2f:f9:62: 71:6a:21:8e:52:17:eb:12:ec:9e:61:67:e7:63:6b:bc:aa:0d: a8:f5:f8:db:d2:d8:55:69:48:05:72:57:68:b2:ec:6c:46:91: 80:d8:61:a4:bd:93:30:2e:f7:b8:97:87:9f:43:36:a6:a2:df: 5a:c9:bd:78:a0:16:ed:30:1a:25:b8:f8:e4:32:83:55:79:d6: 20:4a:6d:4c:fe:89:0f:28:57:04:60:2b:fd:72:be:a5:0f:91: 31:3b:99:0c:df:9a:5f:e5:81:b9:a4:73:03:06:70:94:0b:3c: 4f:d4:98:d6:ca:95:c4:15:a5:98:96:56:78:c2:da:fc:83:82: 4b:37:8b:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUnATN8NT5ikPX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ODgwZWZiYTItNDFmYy00MmY3LWI3OTUtY2NjZGY2ZmYxZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSwSCO2Wop1BrsdCGkEls78xU5sSJ6+fH5hB bhGFHJgURsWi7iKuJQO1PBt0omIYC3UbAhmVlfSeaaYUwzfzxThAQ1VMGK1uPPWB lmfzIcj7yR/yQLCHCEo9f6jEninXgMuhzF+IWaK2zvrsBT6h2JBre9ve2mbh6zhM Nq6BSuZ9NzHxEiUeKjloIeFLWJvZsOuedY9jts+kALAivqYJG+b3ooa/Q76+FKAv Si9WnAOIPXgT4xXWfcKMdERY3lMQ765TY6eLgDJ2A8af7a6YrnHZvyi74h2QRbGR xDwv/yWobUSkwsUt1prxwj+HEgg9eA8djiGaxbMDWnl9HSOdIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMib7UaENFnw9mecje91NH/RhtGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjE2ZDFiMDEtNWE4OS0z ODcyLWFlOGUtNDE2MTM1OTY1Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGopjhNP55YXxPt6QINVPQdr2ZcuOPun05qwZDZ42Fp/IxEr7ZLS ysemsnX1RVgSrBXqSTUlgHiLVUpAIXoz1lyt0tTIM6wQqHS+VF2NaLpJ87TMCOF/ U3PtwHUaRhq+w/cPJPtOnW/YI3/W7gbCjFbxY2qSzQZFqb1S8i/5YnFqIY5SF+sS 7J5hZ+dja7yqDaj1+NvS2FVpSAVyV2iy7GxGkYDYYaS9kzAu97iXh59DNqai31rJ vXigFu0wGiW4+OQyg1V51iBKbUz+iQ8oVwRgK/1yvqUPkTE7mQzfml/lgbmkcwMG cJQLPE/UmNbKlcQVpZiWVnjC2vyDgks3i6U= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:28 2026 by rpki-client