$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa File: 216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json) Hash identifier: Uoa7r5VSWtdVqVGxHVOLgV2a98piMVuSTYB7js9J57A= Subject key identifier: 2F:60:A6:E0:3D:4B:98:31:C0:B7:25:A9:14:CA:BA:9A:B2:69:3B:84 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A2C201055D2262FDCF8413440 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 396881 IP address blocks: 2604:880:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:10:55:d2:26:2f:dc:f8:41:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=53a8f510-2b29-48a5-a95f-3f5d3a243dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:ff:cc:4a:03:5d:b1:dc:8a:a1:5c:c8:6c: 3e:0e:09:84:b5:a3:a8:ae:76:24:9a:3b:01:5e:4c: ca:77:37:14:52:74:9e:11:b6:47:19:0e:53:e2:69: d5:a7:a9:85:ec:98:7d:4d:be:c9:8a:1f:20:15:20: 1f:d7:de:02:c9:46:3c:bc:34:89:49:47:fa:14:de: 64:1d:54:66:5d:aa:1a:2f:47:02:1b:1e:06:4a:0a: 24:6f:ee:fe:dc:6a:d5:1a:75:bd:fc:af:6f:1b:f3: 02:4f:6e:82:74:f4:81:94:40:97:27:e1:85:e7:2e: 8c:24:3f:05:25:09:72:00:47:5b:e2:50:2a:eb:4c: 30:bd:06:07:20:94:ef:13:c0:33:9b:ef:3b:4f:ea: 79:16:95:67:55:42:99:c9:70:62:b4:f1:1f:26:34: 7c:e2:ca:b2:b0:45:2c:6c:11:b8:78:b4:af:4f:b8: 08:a1:ec:33:13:f4:08:fd:35:f7:5f:71:7e:7e:ae: a8:97:32:62:c4:3b:9a:c0:00:a5:e1:3f:1f:60:94: 16:d6:46:ab:41:6c:bf:3c:35:e1:9a:6d:ba:d8:0c: 0a:47:e2:14:c1:1c:a1:9b:42:13:18:a4:04:40:84: 5a:ec:1f:d5:2f:39:e0:8c:a1:2c:6a:f9:95:ef:a6: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:A6:E0:3D:4B:98:31:C0:B7:25:A9:14:CA:BA:9A:B2:69:3B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:de:66:8d:cf:08:76:94:4a:10:7d:aa:ee:c2:9b:20:d8:fb: 26:76:6c:51:f8:08:e0:7e:bd:fc:5c:77:69:8d:75:6d:52:b9: c2:c3:46:c0:c6:bc:a8:29:0b:74:37:15:16:55:79:44:01:d7: c7:0e:e2:35:09:1d:eb:58:3f:e5:f7:67:20:bc:d4:86:15:49: 55:20:52:3d:b1:a7:62:01:1f:ff:0f:c7:43:67:ee:62:25:61: 9b:ce:cd:21:bd:87:1c:58:1b:84:da:00:6f:ba:75:08:f9:b7: e0:dd:28:ed:95:87:54:40:0a:d5:77:03:c2:fd:0f:3e:cb:c9: 0b:15:2e:a1:89:2b:24:bb:3b:f9:58:cf:50:0a:84:fb:4c:8a: 68:9c:1d:0b:2b:c9:1c:a7:73:7e:15:d0:de:ad:ac:4e:ed:33: b6:8d:e0:7b:77:fa:30:c6:e7:a8:f6:06:09:ff:95:e4:a1:28: 1b:1d:7c:9e:23:8d:c8:99:46:09:31:5f:04:a1:d4:13:d7:3e: 65:03:32:e1:54:43:4e:a9:b2:0e:4d:b2:3c:f6:78:e9:9d:26: 56:dc:cd:e0:6b:b4:a6:6a:06:f1:79:fc:26:69:76:51:e3:3f: ba:81:39:de:38:5d:38:02:8e:0b:21:fb:a3:6b:2d:e9:54:97: ab:20:a4:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIBBV0iYv3PhBNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NTNhOGY1MTAtMmIyOS00OGE1LWE5NWYtM2Y1ZDNhMjQzZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE7/zEoDXbHciqFcyGw+DgmEtaOornYkmjsB XkzKdzcUUnSeEbZHGQ5T4mnVp6mF7Jh9Tb7Jih8gFSAf194CyUY8vDSJSUf6FN5k HVRmXaoaL0cCGx4GSgokb+7+3GrVGnW9/K9vG/MCT26CdPSBlECXJ+GF5y6MJD8F JQlyAEdb4lAq60wwvQYHIJTvE8Azm+87T+p5FpVnVUKZyXBitPEfJjR84sqysEUs bBG4eLSvT7gIoewzE/QI/TX3X3F+fq6olzJixDuawACl4T8fYJQW1karQWy/PDXh mm262AwKR+IUwRyhm0ITGKQEQIRa7B/VLzngjKEsavmV76YkJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9gpuA9S5gxwLclqRTKupqyaTuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjE2ZDFiMDEtNWE4OS0z ODcyLWFlOGUtNDE2MTM1OTY1Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbeZo3PCHaUShB9qu7CmyDY+yZ2bFH4COB+vfxcd2mNdW1SucLD RsDGvKgpC3Q3FRZVeUQB18cO4jUJHetYP+X3ZyC81IYVSVUgUj2xp2IBH/8Px0Nn 7mIlYZvOzSG9hxxYG4TaAG+6dQj5t+DdKO2Vh1RACtV3A8L9Dz7LyQsVLqGJKyS7 O/lYz1AKhPtMimicHQsryRync34V0N6trE7tM7aN4Ht3+jDG56j2Bgn/leShKBsd fJ4jjciZRgkxXwSh1BPXPmUDMuFUQ06psg5Nsjz2eOmdJlbczeBrtKZqBvF5/CZp dlHjP7qBOd44XTgCjgsh+6NrLelUl6sgpBc= -----END CERTIFICATE-----Generated at Tue Jun 17 22:05:40 2025 by rpki-client