$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa File: c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa (raw, json) Hash identifier: 5WsX1/NGNIaa4BNKNEzckU425EuvRatDog/cf7Fd+hE= Subject key identifier: 10:6C:6D:77:07:E5:67:CC:9B:4A:AA:05:0B:1F:9B:3B:E9:0B:D1:44 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AC87653F0C9461F0C7A027790 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 61317 IP address blocks: 2604:4500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:53:f0:c9:46:1f:0c:7a:02:77:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=41cc1d95-4e82-43ff-b54f-ccc5d4fdecf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:04:28:d3:76:2c:01:49:d0:26:3c:79:52: ae:84:03:14:48:70:0b:2f:e9:88:aa:24:fb:eb:7d: 2a:94:6c:d5:60:04:f3:8e:ac:33:7a:c9:d0:59:d4: 6d:3b:f6:3a:bf:b1:2b:02:e9:c2:e2:d4:e6:9b:d8: 85:3b:d3:d5:ce:82:de:7b:5a:6b:d9:80:ee:a8:60: b6:93:d8:f3:15:23:82:e7:70:c4:9e:c4:e8:ef:e9: b3:8c:e9:23:c9:19:60:33:a4:b4:08:97:bc:fd:9c: ed:57:c7:c9:b5:9e:07:03:33:68:2f:43:26:b7:16: e2:2e:fb:c7:52:bd:d6:fd:b6:df:11:cd:d3:f6:1b: c2:56:07:be:e9:7e:f0:76:c8:2c:9e:f6:6c:67:09: 46:5f:be:c3:c9:2c:b9:20:26:91:3e:fc:81:58:41: 8e:64:64:51:0d:c1:f8:4b:92:ba:cb:71:6b:d8:55: 17:54:0f:d7:3e:9a:e1:b6:5f:36:1c:e0:91:52:83: e6:04:43:d7:ea:b5:0f:2a:ab:da:b3:0c:a2:5e:5f: 47:f1:46:e4:78:24:62:95:1e:0f:7a:9d:19:13:e0: b6:db:e3:ed:49:6b:c7:74:97:31:38:7e:f7:51:06: a6:05:44:9e:72:17:70:ff:a6:9a:26:b2:90:c9:05: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:6D:77:07:E5:67:CC:9B:4A:AA:05:0B:1F:9B:3B:E9:0B:D1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:df:91:20:5e:1c:d1:87:e6:0b:c2:b6:53:ac:87:a6:1e:68: d6:94:5d:9b:c8:41:3b:af:65:7d:02:2d:30:54:26:d0:a8:09: b9:f3:e3:9f:00:25:1c:a7:be:c9:0d:b2:aa:8e:d9:e5:56:6d: 11:54:6a:b5:47:f6:40:e1:c2:21:d8:08:ef:1c:f7:51:3f:f5: 4d:fd:ea:67:e2:a9:66:ab:73:ec:4c:52:16:92:ed:96:2f:48: 37:97:ac:63:84:7f:a4:ba:ca:e4:2c:af:a3:72:7f:06:54:44: e5:57:5c:5b:65:d0:d4:4f:f3:e6:05:d8:e2:b6:43:15:ac:82: 15:0c:82:60:94:ae:49:48:a5:9e:f1:05:6f:06:71:84:4e:21: 48:f0:aa:f6:07:58:57:2e:27:3e:6a:f9:a8:51:c4:40:31:28: ef:e4:54:29:a1:14:bf:4d:a6:de:3e:5f:24:56:12:1e:33:ce: 72:7e:78:58:34:a7:22:91:89:8b:6c:69:e2:6d:fa:58:46:5a: 53:48:7c:3c:e2:f9:82:f2:55:ab:d3:da:19:43:b6:ef:4a:52: 69:c6:63:fd:cf:a0:78:f0:b2:bc:8b:85:ff:c9:b0:56:a7:60: c8:2b:a5:27:f0:06:6c:df:ab:ae:de:20:50:99:6e:46:ec:cd: 52:c4:a0:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdlPwyUYfDHoCd5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDFjYzFkOTUtNGU4Mi00M2ZmLWI1NGYtY2NjNWQ0ZmRlY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqsEKNN2LAFJ0CY8eVKuhAMUSHALL+mIqiT7 630qlGzVYATzjqwzesnQWdRtO/Y6v7ErAunC4tTmm9iFO9PVzoLee1pr2YDuqGC2 k9jzFSOC53DEnsTo7+mzjOkjyRlgM6S0CJe8/ZztV8fJtZ4HAzNoL0MmtxbiLvvH Ur3W/bbfEc3T9hvCVge+6X7wdsgsnvZsZwlGX77DySy5ICaRPvyBWEGOZGRRDcH4 S5K6y3Fr2FUXVA/XPprhtl82HOCRUoPmBEPX6rUPKqvaswyiXl9H8UbkeCRilR4P ep0ZE+C22+PtSWvHdJcxOH73UQamBUSechdw/6aaJrKQyQUQnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBBsbXcH5WfMm0qqBQsfmzvpC9FEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzU4NTNiODMtMTJiZi0z Y2RjLTg3ZDEtMDdkZGY2OThkNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHfkSBeHNGH5gvCtlOsh6YeaNaUXZvIQTuvZX0CLTBUJtCoCbnz 458AJRynvskNsqqO2eVWbRFUarVH9kDhwiHYCO8c91E/9U396mfiqWarc+xMUhaS 7ZYvSDeXrGOEf6S6yuQsr6NyfwZUROVXXFtl0NRP8+YF2OK2QxWsghUMgmCUrklI pZ7xBW8GcYROIUjwqvYHWFcuJz5q+ahRxEAxKO/kVCmhFL9Npt4+XyRWEh4zznJ+ eFg0pyKRiYtsaeJt+lhGWlNIfDzi+YLyVavT2hlDtu9KUmnGY/3PoHjwsryLhf/J sFanYMgrpSfwBmzfq67eIFCZbkbszVLEoJM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:10 2025 by rpki-client