$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa File: 25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa (raw, json) Hash identifier: yUEXXIpZZwhDATweZUZbNxCYQnYDvv7uEzsCys8GSl4= Subject key identifier: 1E:5F:2F:66:DB:F5:52:C4:0D:85:52:63:24:5D:9D:51:57:58:DF:CB Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584E7E94E93C511FAE901BE02A80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 29802 IP address blocks: 2604:8380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e9:3c:51:1f:ae:90:1b:e0:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=dc5a7fc6-e3e3-4f18-89cb-ccfb2b7b32fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:dc:15:27:d5:f1:c8:60:d4:90:d9:40:b9: 40:c3:39:2b:0e:87:c9:ad:13:8a:67:0b:93:45:ac: 08:54:48:85:f4:f1:d0:b5:53:18:96:fe:bc:40:4d: 16:b1:7a:91:0b:4c:7a:56:68:a8:9c:19:0b:79:2a: 51:20:fe:fe:ed:a0:63:dd:98:55:73:a5:39:64:d2: 04:66:66:7d:8f:f2:75:77:b6:8b:d0:b0:0b:f6:e6: 65:b5:4e:8f:20:e0:61:40:7e:85:36:b9:d1:71:29: 0d:9a:4a:e6:b4:69:4e:c7:fd:89:6c:a5:ba:96:a6: 60:13:7e:29:80:89:6c:91:0e:9b:dc:02:20:ee:1d: 81:89:59:72:b2:44:68:38:68:4e:1f:7e:cc:c2:25: d1:f6:75:9d:8a:2d:fc:20:e5:ba:12:bb:0e:1e:99: 89:da:77:f9:cf:37:eb:ee:97:d5:fb:c9:99:ca:8a: 5a:50:d6:b8:93:4b:e7:e4:82:ec:ba:00:6e:08:b8: e6:c4:eb:9d:ba:ee:2b:fd:c2:34:88:27:2d:10:dc: 1a:70:dd:d5:a2:bd:da:cf:49:3d:d8:87:40:76:82: 01:3b:79:ad:fc:79:e2:37:72:49:69:74:4d:c9:72: ed:19:cb:c4:6e:b9:24:fa:87:3d:e6:22:7c:1b:46: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:2F:66:DB:F5:52:C4:0D:85:52:63:24:5D:9D:51:57:58:DF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cc:52:29:1d:96:f7:10:6d:a9:3a:dc:11:a3:3c:e4:80:5e: f6:7d:b1:47:8d:fb:98:bd:de:41:6c:16:75:c1:88:68:7c:b5: d1:f4:d7:ec:81:c9:00:08:03:3e:e2:ec:e8:71:32:1e:77:8e: 04:0c:44:73:04:cc:3f:ca:e9:12:0c:65:dc:d7:70:50:c5:06: a8:1b:a8:89:1f:39:e3:6f:84:26:87:d8:f7:0c:1f:bb:40:f3: d4:32:20:51:ed:2f:da:1f:4b:49:3d:42:76:f6:98:91:e3:f0: b5:19:36:5c:2e:e3:c5:d0:56:ee:1e:0a:98:23:f4:27:ae:cf: 20:c7:96:73:78:84:bc:33:3c:81:46:67:2b:da:ba:a9:90:02: d5:1a:2c:7c:b8:6e:ed:a9:c7:b0:77:25:37:bc:a0:bc:76:c6: b6:fb:d6:59:27:7a:7b:57:20:b6:07:60:46:df:1e:86:65:9a: 81:a4:78:3f:e7:8c:ec:7f:5d:f5:f9:b7:a1:d9:91:61:de:b8: e2:a4:56:c4:84:44:74:42:4d:2c:1d:a4:35:13:8f:88:b2:c6: 2d:59:30:88:e0:95:4a:9a:96:5c:64:56:18:d5:c8:0a:b6:aa: e8:2d:97:1d:0b:e6:5c:5f:98:2b:c0:5d:0b:a0:88:36:6d:a6: c8:82:4e:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5+lOk8UR+ukBvgKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGM1YTdmYzYtZTNlMy00ZjE4LTg5Y2ItY2NmYjJiN2IzMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVncFSfV8chg1JDZQLlAwzkrDofJrROKZwuT RawIVEiF9PHQtVMYlv68QE0WsXqRC0x6VmionBkLeSpRIP7+7aBj3ZhVc6U5ZNIE ZmZ9j/J1d7aL0LAL9uZltU6PIOBhQH6FNrnRcSkNmkrmtGlOx/2JbKW6lqZgE34p gIlskQ6b3AIg7h2BiVlyskRoOGhOH37MwiXR9nWdii38IOW6ErsOHpmJ2nf5zzfr 7pfV+8mZyopaUNa4k0vn5ILsugBuCLjmxOuduu4r/cI0iCctENwacN3Vor3az0k9 2IdAdoIBO3mt/HniN3JJaXRNyXLtGcvEbrkk+oc95iJ8G0aoZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB5fL2bb9VLEDYVSYyRdnVFXWN/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjVlNWI5ODYtODFlMi0z ZWViLTkyZTUtZWQyMTUyNGNmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALzFIpHZb3EG2pOtwRozzkgF72fbFHjfuYvd5BbBZ1wYhofLXR9Nfs gckACAM+4uzocTIed44EDERzBMw/yukSDGXc13BQxQaoG6iJHznjb4Qmh9j3DB+7 QPPUMiBR7S/aH0tJPUJ29piR4/C1GTZcLuPF0FbuHgqYI/Qnrs8gx5ZzeIS8MzyB Rmcr2rqpkALVGix8uG7tqcewdyU3vKC8dsa2+9ZZJ3p7VyC2B2BG3x6GZZqBpHg/ 54zsf131+beh2ZFh3rjipFbEhER0Qk0sHaQ1E4+IssYtWTCI4JVKmpZcZFYY1cgK tqroLZcdC+ZcX5grwF0LoIg2babIgk4R -----END CERTIFICATE-----Generated at Fri Jul 24 11:28:33 2026 by rpki-client