$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa File: 25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa (raw, json) Hash identifier: 2nPJk0d9FA/MiZQaBPTQgseJeHAU6Mv05vqRSpDERn8= Subject key identifier: 35:08:6A:18:B2:64:CF:9F:D7:9A:D9:63:74:56:FD:DF:8C:66:0D:59 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9E500B3D6F4C8CC30E383F40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29802 IP address blocks: 2604:8380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0b:3d:6f:4c:8c:c3:0e:38:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=4a6d8d05-8f48-49b2-b91f-2d3a5fa473fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:1d:29:6b:fa:c3:2a:ae:09:80:86:26:b9: 69:56:61:4c:41:f9:80:e1:66:51:ba:00:25:6c:99: bf:fb:b4:f3:a7:03:0c:28:79:0b:ea:28:9f:9c:c7: 32:fd:02:46:5e:16:1b:7a:74:8d:44:f0:ff:4e:fc: c8:bf:db:2d:13:91:9f:57:8c:3a:6e:06:5f:90:19: ee:e8:10:d1:57:1b:c5:74:ab:0a:f8:3f:18:94:5d: 3c:b5:71:be:50:c8:52:79:3a:c2:79:6d:be:dd:b8: a5:c5:91:86:46:6b:d3:05:2d:f0:71:06:f5:c3:4d: 8c:8c:19:86:b6:ba:db:36:d5:75:76:95:58:56:84: c9:0b:37:e8:48:38:5c:b4:e8:a8:08:07:e8:18:48: cd:ca:4e:30:79:ff:ac:36:0c:c4:da:4f:b2:0d:ea: 41:56:34:e7:ce:4f:01:5a:20:3d:12:ad:d8:77:9c: d1:04:a7:0b:da:9c:41:30:5e:c7:94:79:5d:58:80: aa:dd:e7:d8:79:93:d4:f2:aa:d6:a0:b8:b1:a7:9f: fa:9e:89:a4:f3:79:51:7e:7e:1f:4d:9b:4d:77:70: 66:f1:40:30:4c:b2:62:da:ab:ef:0c:83:b8:d7:14: 77:eb:1b:c2:f7:0a:c1:27:32:ec:41:88:60:44:09: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:08:6A:18:B2:64:CF:9F:D7:9A:D9:63:74:56:FD:DF:8C:66:0D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:38:a3:f5:e0:c1:fb:3b:87:d4:3a:56:3c:f4:1d:d1:d3:9f: b5:72:43:37:90:f0:01:bc:f2:f8:98:0d:54:26:bf:8a:35:38: 2f:ed:7c:24:c9:fe:f9:fb:d4:1f:a8:1d:59:62:46:86:ff:8c: 92:87:79:f3:f9:67:7e:bf:40:51:23:9e:7f:c3:e0:ae:7f:41: 50:a3:4b:af:4c:44:cc:33:93:b8:99:b7:0c:46:7f:c8:7d:e1: f2:64:62:f8:2d:ed:dc:2e:7c:e2:79:d0:d2:05:0c:50:63:b2: 19:55:08:a5:77:75:bc:d6:f1:4a:1c:2f:6e:ee:41:e4:9f:41: b5:0f:3d:39:5c:ba:30:db:6d:fc:74:8c:f9:fb:cb:bd:d3:2d: a2:0c:b8:17:3d:70:3f:8a:b9:ae:a7:77:83:90:73:0a:41:96: a6:29:19:3b:7f:c7:3e:ca:ef:b3:68:ba:3e:9a:ab:3b:1b:e5: 60:6d:79:d8:b0:80:58:8f:3c:d0:e6:a7:c1:b9:65:7a:01:14: 7b:e2:2f:0b:58:77:be:85:0a:0b:b1:86:f8:83:e8:2b:61:dc: ce:ca:8a:0f:b2:ec:42:90:de:20:0c:9a:8e:9a:38:b7:fc:fe: 36:06:be:16:0b:16:0c:40:3a:10:7a:94:52:f9:32:7c:d3:d3: f5:17:f1:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2eUAs9b0yMww44P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NGE2ZDhkMDUtOGY0OC00OWIyLWI5MWYtMmQzYTVmYTQ3M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEcdKWv6wyquCYCGJrlpVmFMQfmA4WZRugAl bJm/+7TzpwMMKHkL6iifnMcy/QJGXhYbenSNRPD/TvzIv9stE5GfV4w6bgZfkBnu 6BDRVxvFdKsK+D8YlF08tXG+UMhSeTrCeW2+3bilxZGGRmvTBS3wcQb1w02MjBmG trrbNtV1dpVYVoTJCzfoSDhctOioCAfoGEjNyk4wef+sNgzE2k+yDepBVjTnzk8B WiA9Eq3Yd5zRBKcL2pxBMF7HlHldWICq3efYeZPU8qrWoLixp5/6nomk83lRfn4f TZtNd3Bm8UAwTLJi2qvvDIO41xR36xvC9wrBJzLsQYhgRAl8DwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDUIahiyZM+f15rZY3RW/d+MZg1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjVlNWI5ODYtODFlMi0z ZWViLTkyZTUtZWQyMTUyNGNmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYOKP14MH7O4fUOlY89B3R05+1ckM3kPABvPL4mA1UJr+KNTgv7Xwk yf75+9QfqB1ZYkaG/4ySh3nz+Wd+v0BRI55/w+Cuf0FQo0uvTETMM5O4mbcMRn/I feHyZGL4Le3cLnziedDSBQxQY7IZVQild3W81vFKHC9u7kHkn0G1Dz05XLow2238 dIz5+8u90y2iDLgXPXA/irmup3eDkHMKQZamKRk7f8c+yu+zaLo+mqs7G+VgbXnY sIBYjzzQ5qfBuWV6ARR74i8LWHe+hQoLsYb4g+grYdzOyooPsuxCkN4gDJqOmji3 /P42Br4WCxYMQDoQepRS+TJ809P1F/Hh -----END CERTIFICATE-----Generated at Wed May 13 08:44:02 2026 by rpki-client