$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa File: 5b7d3556-28e1-360c-9a9e-a01bb7111857.roa (raw, json) Hash identifier: l9zgOQYvzOXPp7xU4fZrMt/aiV4Q65n1ZQpznKYoWOg= Subject key identifier: 7B:8B:31:7A:69:9F:3F:44:FB:71:52:2D:00:75:5F:83:71:14:C1:72 Certificate issuer: /CN=50f21827-6d64-4880-9e46-c3d13313c975 Certificate serial: 010D0C9F4328584B540C67CB1FAC4DE1777B2280 Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 23347 IP address blocks: 2602:f921::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:67:cb:1f:ac:4d:e1:77:7b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=6686beb1-5018-49b7-9d26-07bf21185491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:4c:6a:14:d7:e8:78:94:61:af:cc:78:91: bc:62:07:3d:cf:b8:b0:bb:18:a1:c3:8a:00:ee:64: 63:ff:24:f1:7e:b3:37:31:21:b0:bb:28:76:ab:e2: c8:42:30:a9:65:3c:c6:04:71:a9:53:e5:d3:3b:79: 84:a5:e4:87:c3:65:07:d9:f6:db:a5:4f:fc:6b:3b: 4b:b9:80:34:18:a1:b1:21:ef:45:69:9c:fb:d7:10: 78:6c:78:81:b8:ec:c0:9f:31:2a:a0:50:b4:a1:f1: 40:be:18:5b:e3:d0:6f:37:d2:57:84:31:9c:32:00: a8:2d:06:bc:df:ca:ec:4c:73:df:8b:06:fd:d3:78: 98:f4:4c:d8:ae:96:02:23:e4:53:68:e3:d8:32:ed: 0b:6b:81:ad:74:31:78:54:3e:8b:57:f3:b6:57:92: bc:9c:75:02:35:b5:a6:f0:0e:e7:42:d2:da:53:4f: 72:4b:7c:ef:27:4d:14:52:11:33:99:97:35:73:62: 6c:22:55:3a:b0:d5:b7:16:2b:2d:8d:10:84:60:a3: b7:6c:32:ec:f1:9c:f0:24:69:43:a4:75:31:69:7f: 0d:23:f2:3a:3e:e9:91:94:88:c4:5f:f7:2a:f1:82: 98:5d:42:9a:35:1a:1b:0c:b3:27:94:50:1e:98:86: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:31:7A:69:9F:3F:44:FB:71:52:2D:00:75:5F:83:71:14:C1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl X509v3 Authority Key Identifier: keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer sbgp-ipAddrBlock: critical IPv6: 2602:f921::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4c:ff:47:76:c7:08:1e:e5:d7:9b:fd:ee:67:2a:d3:15:19: aa:70:d5:d9:47:04:62:75:42:db:c4:62:22:64:e8:e9:a2:18: e1:d8:b9:28:14:41:32:2e:ae:58:73:a3:b4:d4:23:54:60:73: d6:25:c9:d2:8e:a4:bb:52:0b:15:a5:13:8c:a7:a0:1d:f7:26: db:ad:d2:cf:97:26:8f:6d:8c:e2:23:85:94:67:ae:03:59:cf: 58:0f:47:b5:81:a6:b6:1e:66:dd:82:5c:de:e2:3a:62:74:f2: 02:6f:88:d2:fb:44:43:7f:65:ef:01:e8:12:a8:84:15:91:b0: 92:cd:26:5b:d6:cd:96:bd:e4:e8:f3:20:a2:96:28:6e:92:cd: 11:3e:88:9b:34:e3:7b:53:91:6d:54:c9:80:12:9f:52:22:64: 32:e3:93:92:f3:ae:3c:c6:55:4a:14:76:c7:e5:ef:f9:18:a0: 57:2c:36:a5:0d:1a:96:a9:06:6b:b9:27:ed:70:49:90:95:34: 7b:d1:e5:29:4a:1b:bc:ff:b8:1f:8c:ad:f7:0a:a4:42:e9:06: df:82:d3:47:1b:a9:b6:ae:f1:ae:f1:5a:f3:e9:37:ce:6b:90: 21:d6:bf:47:10:e4:bf:2b:51:3c:41:79:af:bd:9e:b2:d9:ab: 74:5d:95:35 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtUDGfLH6xN4Xd7IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBmMjE4MjctNmQ2NC00ODgwLTllNDYtYzNkMTMzMTNj OTc1MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjY4NmJlYjEtNTAxOC00OWI3LTlkMjYtMDdiZjIxMTg1NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnJMahTX6HiUYa/MeJG8Ygc9z7iwuxihw4oA 7mRj/yTxfrM3MSGwuyh2q+LIQjCpZTzGBHGpU+XTO3mEpeSHw2UH2fbbpU/8aztL uYA0GKGxIe9FaZz71xB4bHiBuOzAnzEqoFC0ofFAvhhb49BvN9JXhDGcMgCoLQa8 38rsTHPfiwb903iY9EzYrpYCI+RTaOPYMu0La4GtdDF4VD6LV/O2V5K8nHUCNbWm 8A7nQtLaU09yS3zvJ00UUhEzmZc1c2JsIlU6sNW3FistjRCEYKO3bDLs8ZzwJGlD pHUxaX8NI/I6PumRlIjEX/cq8YKYXUKaNRobDLMnlFAemIbuJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHuLMXppnz9E+3FSLQB1X4NxFMFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MGYy MTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2QxMzMxM2M5NzUvNWI3ZDM1NTYtMjhlMS0z NjBjLTlhOWUtYTAxYmI3MTExODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTBmMjE4MjctNmQ2NC00ODgwLTll NDYtYzNkMTMzMTNjOTc1LzUwZjIxODI3LTZkNjQtNDg4MC05ZTQ2LWMzZDEzMzEz Yzk3NS5jcmwwHwYDVR0jBBgwFoAU6x5xukiPrqQmrp9PrnGCEkf7LG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MGYyMTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2Qx MzMxM2M5NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5IQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASUz/R3bHCB7l15v97mcq0xUZqnDV2UcEYnVC28RiImTo6aIY4di5 KBRBMi6uWHOjtNQjVGBz1iXJ0o6ku1ILFaUTjKegHfcm263Sz5cmj22M4iOFlGeu A1nPWA9HtYGmth5m3YJc3uI6YnTyAm+I0vtEQ39l7wHoEqiEFZGwks0mW9bNlr3k 6PMgopYobpLNET6ImzTje1ORbVTJgBKfUiJkMuOTkvOuPMZVShR2x+Xv+RigVyw2 pQ0alqkGa7kn7XBJkJU0e9HlKUobvP+4H4yt9wqkQukG34LTRxuptq7xrvFa8+k3 zmuQIda/RxDkvytRPEF5r72estmrdF2VNQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:06:07 2025 by rpki-client