$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa File: 029c442e-e959-34cb-a8ae-055f58dbc2d5.roa (raw, json) Hash identifier: kBEMxyOvRMge1BV14CGNPPL5jEv/vBQOGBzim3RfE3w= Subject key identifier: F0:05:22:B9:8D:F0:B4:0E:9B:F1:AB:A1:24:4A:D2:78:8A:BC:BD:CF Certificate issuer: /CN=50dd3001-8039-47e8-a642-92a97c54da3b Certificate serial: 010D0C9F4328584B1C36BCC6FC3C1C800CC600CF Authority key identifier: 1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 400771 IP address blocks: 2620:b0:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:bc:c6:fc:3c:1c:80:0c:c6:00:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50dd3001-8039-47e8-a642-92a97c54da3b Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=84e0229a-7290-4d7e-b659-96a4305bef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:2d:fe:72:72:e7:93:62:78:a9:ff:f3:da: fb:e4:52:d6:48:b9:60:52:10:4a:03:5c:0b:dc:0c: dc:44:14:6f:6f:51:4b:ed:78:fc:a9:33:99:65:98: 42:2f:0c:36:c8:64:a1:fa:8b:7b:d1:9b:66:92:08: b9:44:d3:07:52:a3:f0:ae:9e:21:43:05:de:91:01: f2:85:c2:65:fd:f1:e1:e7:4e:87:c8:95:1e:d2:69: d4:bb:07:d3:e9:2e:83:02:b5:59:c2:d3:c3:96:65: 74:e5:36:fc:a6:20:03:bf:0e:4a:f0:f6:1b:89:6d: 5f:15:85:da:01:da:76:a8:49:98:d6:91:81:fd:20: 68:06:6f:0d:9e:02:00:16:42:62:fd:bf:df:70:d5: c0:ed:a1:f2:86:18:37:90:d3:fc:e5:1c:7f:12:f0: db:3c:97:7f:a4:e8:5c:66:39:7a:67:d3:ec:d9:ec: 71:ce:de:74:20:94:2f:9d:a6:b7:40:80:34:3e:4d: eb:92:50:1c:7a:f0:f7:5e:78:4a:9d:10:7e:fa:db: 77:be:4d:31:b8:50:7d:4c:4c:15:ec:a8:dc:ce:16: 01:97:30:a3:43:9d:a4:38:27:d9:b5:fc:88:b0:ee: 5b:74:de:6e:f4:3d:1b:57:5b:1a:16:e4:23:f9:77: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:22:B9:8D:F0:B4:0E:9B:F1:AB:A1:24:4A:D2:78:8A:BC:BD:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl X509v3 Authority Key Identifier: keyid:1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer sbgp-ipAddrBlock: critical IPv6: 2620:b0:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:61:98:58:38:58:0c:ed:2a:33:2b:62:13:39:14:34:5c:bf: 70:da:1f:e1:17:55:ce:cb:61:18:c3:86:06:02:7a:86:8a:16: dc:40:28:70:77:f2:5a:b7:d3:9d:47:ca:45:aa:ee:1c:10:5c: 91:56:56:f9:3b:9e:40:90:c8:83:d6:09:09:5c:14:78:dc:8e: b9:c2:3a:88:0a:a8:d3:7b:0c:a4:0c:1f:e6:d0:ce:ec:a8:b2: b9:c7:b8:05:13:3d:5c:8c:85:a8:0a:6d:db:d8:db:75:96:0a: 44:9b:37:7c:81:05:d7:09:d8:7b:5f:1a:eb:14:ed:cb:fd:e3: bb:fa:6c:64:d8:d1:60:13:52:ce:3d:fd:16:d3:37:32:3a:2c: 58:08:be:45:24:64:ad:61:a5:9f:1f:c5:c0:62:a5:0e:82:c6: 39:98:4e:df:09:82:bb:31:f6:9e:96:17:b5:e4:4b:22:c7:d8: bf:0d:33:66:37:9f:a0:41:a0:64:3c:1d:d9:62:51:6c:c0:89: ed:90:4d:de:4c:3c:06:57:db:61:f8:86:32:65:49:e2:ae:70: 9d:e6:e4:c4:75:b7:f6:2f:6b:97:d1:89:e3:58:cb:4d:57:d1: d1:3e:22:aa:31:f5:15:ae:28:e5:50:43:03:00:51:ef:4b:bd: e4:2e:49:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNrzG/DwcgAzGAM8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkZDMwMDEtODAzOS00N2U4LWE2NDItOTJhOTdjNTRk YTNiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODRlMDIyOWEtNzI5MC00ZDdlLWI2NTktOTZhNDMwNWJlZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNct/nJy55NieKn/89r75FLWSLlgUhBKA1wL 3AzcRBRvb1FL7Xj8qTOZZZhCLww2yGSh+ot70Ztmkgi5RNMHUqPwrp4hQwXekQHy hcJl/fHh506HyJUe0mnUuwfT6S6DArVZwtPDlmV05Tb8piADvw5K8PYbiW1fFYXa Adp2qEmY1pGB/SBoBm8NngIAFkJi/b/fcNXA7aHyhhg3kNP85Rx/EvDbPJd/pOhc Zjl6Z9Ps2exxzt50IJQvnaa3QIA0Pk3rklAcevD3XnhKnRB++tt3vk0xuFB9TEwV 7KjczhYBlzCjQ52kOCfZtfyIsO5bdN5u9D0bV1saFuQj+XcNnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPAFIrmN8LQOm/GroSRK0niKvL3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MGRk MzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5N2M1NGRhM2IvMDI5YzQ0MmUtZTk1OS0z NGNiLWE4YWUtMDU1ZjU4ZGJjMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTBkZDMwMDEtODAzOS00N2U4LWE2 NDItOTJhOTdjNTRkYTNiLzUwZGQzMDAxLTgwMzktNDdlOC1hNjQyLTkyYTk3YzU0 ZGEzYi5jcmwwHwYDVR0jBBgwFoAUH4q+G06hvlsXErRFBNC/5BVwPAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MGRkMzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5 N2M1NGRhM2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAsCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFthmFg4WAztKjMrYhM5FDRcv3DaH+EXVc7LYRjDhgYCeoaKFtxA KHB38lq3051HykWq7hwQXJFWVvk7nkCQyIPWCQlcFHjcjrnCOogKqNN7DKQMH+bQ zuyosrnHuAUTPVyMhagKbdvY23WWCkSbN3yBBdcJ2HtfGusU7cv947v6bGTY0WAT Us49/RbTNzI6LFgIvkUkZK1hpZ8fxcBipQ6CxjmYTt8Jgrsx9p6WF7XkSyLH2L8N M2Y3n6BBoGQ8HdliUWzAie2QTd5MPAZX22H4hjJlSeKucJ3m5MR1t/Yva5fRieNY y01X0dE+Iqox9RWuKOVQQwMAUe9LveQuSWI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:36:06 2025 by rpki-client