
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
File: 1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa (raw, json)
Hash identifier: Q51gyY23aUGI5TVVQWhaS/8i9Zmpss9ufMDyCCBZuuM=
Subject key identifier: 79:98:E7:75:DF:F1:47:67:15:06:53:61:B9:E9:72:5F:9D:6C:53:96
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F4328584EED521CB151AEE78D776E71A0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 61317
IP address blocks: 2604:4500:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:1c:b1:51:ae:e7:8d:77:6e:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=ec1b9b53-60e3-4ce0-b5ea-c0e0bcaeb6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:32:6b:15:a3:70:f5:ca:77:34:1c:17:07:
f0:b2:94:dc:06:8e:09:7c:15:47:4f:a1:67:f9:9f:
df:b6:39:23:67:e4:ea:cf:ed:44:5f:a8:7c:02:4d:
42:53:88:53:84:6b:e2:1c:72:d7:04:19:d5:29:f5:
9b:52:b3:15:88:17:7f:21:55:3f:61:15:f1:bc:46:
9e:72:e9:8d:f1:b0:d3:3b:f3:16:90:07:d0:f3:80:
3b:f5:c0:06:fd:15:4f:b8:04:e5:83:56:1e:b0:57:
58:15:14:9a:3c:ab:b9:fe:f0:9e:60:e9:19:d9:23:
e4:2e:e4:81:79:bc:9d:02:66:75:5e:5e:51:30:bb:
79:38:05:c9:a9:20:f9:b1:bf:b2:be:c7:5b:0a:1f:
9e:e0:5d:cd:d8:18:01:a4:35:10:cb:e2:7c:20:a9:
6d:74:7c:36:b7:1e:76:7e:bd:4f:4e:df:9b:54:fd:
1a:52:ff:34:40:b9:68:95:dc:88:c5:14:f4:4f:52:
a9:a5:d6:e0:fb:29:09:9a:f5:bc:3f:69:1c:dc:3d:
54:c8:2e:fd:e2:a0:72:2d:60:b9:d8:6a:e6:a2:a6:
a7:13:99:f8:ad:5f:41:b2:65:56:93:d7:79:eb:af:
36:71:71:d1:f9:e4:f0:2d:3d:10:c6:c0:9a:52:50:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:E7:75:DF:F1:47:67:15:06:53:61:B9:E9:72:5F:9D:6C:53:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4500:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:cf:f1:19:72:05:dd:0d:b4:9d:8f:a5:e7:23:48:4a:c0:44:
7d:7f:01:be:46:04:1d:e8:18:b2:9d:0b:fb:7c:e6:a5:0b:5b:
07:cf:6e:93:25:c7:52:8b:12:ef:ba:06:84:4e:c4:6b:52:0a:
13:4a:b5:4d:42:35:f4:3e:af:13:f3:08:04:f9:50:03:00:19:
9d:52:d2:a2:45:e4:86:e7:a6:70:d4:0e:87:7a:d6:50:3c:df:
6c:d6:43:24:a2:9d:6c:24:3b:ef:27:d0:21:19:da:1a:78:d7:
cf:73:d7:2a:c9:db:c2:37:1a:27:50:8f:04:bd:28:a8:5e:73:
c3:ba:57:26:a9:eb:ed:f3:bf:9d:3b:d1:bb:5d:54:b1:30:46:
92:e0:2c:fe:8a:b7:28:68:23:85:68:c9:eb:3d:a3:de:a8:bf:
61:65:37:d4:e4:81:36:05:d6:05:75:41:e9:c8:4e:12:50:ef:
4f:dc:bf:38:e9:ba:b0:b4:4d:8e:e4:68:f1:68:88:0c:ec:15:
74:5d:47:e4:4f:9d:aa:8b:f7:ad:36:e2:55:a3:f9:43:91:ca:
87:9c:a1:64:c1:18:cb:5b:91:d2:6b:ae:9a:20:e2:88:90:95:
46:2d:75:51:df:d3:d8:89:94:10:fb:2a:86:49:95:01:d1:45:
47:a4:b3:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUhyxUa7njXducaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWMxYjliNTMtNjBlMy00Y2UwLWI1ZWEtYzBlMGJjYWViNmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QoyaxWjcPXKdzQcFwfwspTcBo4JfBVHT6Fn
+Z/ftjkjZ+Tqz+1EX6h8Ak1CU4hThGviHHLXBBnVKfWbUrMViBd/IVU/YRXxvEae
cumN8bDTO/MWkAfQ84A79cAG/RVPuATlg1YesFdYFRSaPKu5/vCeYOkZ2SPkLuSB
ebydAmZ1Xl5RMLt5OAXJqSD5sb+yvsdbCh+e4F3N2BgBpDUQy+J8IKltdHw2tx52
fr1PTt+bVP0aUv80QLloldyIxRT0T1Kppdbg+ykJmvW8P2kc3D1UyC794qByLWC5
2GrmoqanE5n4rV9BsmVWk9d56682cXHR+eTwLT0QxsCaUlA7QQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHmY53Xf8UdnFQZTYbnpcl+dbFOWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWJhNWU0ZGUtYzJjZi0z
MmZkLThkMDMtZjcwYzU5MjU3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAInP8RlyBd0NtJ2PpecjSErARH1/Ab5GBB3oGLKdC/t85qULWwfP
bpMlx1KLEu+6BoROxGtSChNKtU1CNfQ+rxPzCAT5UAMAGZ1S0qJF5IbnpnDUDod6
1lA832zWQySinWwkO+8n0CEZ2hp4189z1yrJ28I3GidQjwS9KKhec8O6Vyap6+3z
v5070btdVLEwRpLgLP6KtyhoI4Voyes9o96ov2FlN9TkgTYF1gV1QenIThJQ70/c
vzjpurC0TY7kaPFoiAzsFXRdR+RPnaqL96024lWj+UORyoecoWTBGMtbkdJrrpog
4oiQlUYtdVHf09iJlBD7KoZJlQHRRUeks2A=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:47:58 2026 by rpki-client