$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa File: 2659cabb-8358-3f3a-a793-2978e3142187.roa (raw, json) Hash identifier: 8tEBvd1rEYQyE+OTCaEE7aJYQsQtQooYunsALMpHqR0= Subject key identifier: 6A:54:CA:55:16:4E:87:77:23:4C:6E:BC:22:D3:99:B4:72:18:BC:69 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584F4973D85415AAB9918DCD8D00 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d8:54:15:aa:b9:91:8d:cd:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e84f9a92-4925-4b88-8392-2cc17b48781b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:b2:6e:f0:58:49:86:af:0f:27:aa:8c:c6: 9b:20:08:50:9e:81:ea:0e:c7:d4:8b:86:2d:0a:c3: 4c:bd:20:44:8a:32:ff:f7:9c:67:6e:4c:31:58:17: a8:18:b5:d4:de:06:36:87:4a:aa:84:67:3b:19:97: 25:ba:30:61:99:c3:b6:4e:9a:19:31:12:ea:9e:14: 67:61:6f:bf:02:76:28:15:06:5f:11:3d:88:e5:0c: 26:15:e7:25:ad:ac:64:91:bb:a2:a9:49:4f:36:47: df:13:e7:f3:b5:4f:f0:dd:e5:55:2d:8d:f8:bd:00: 8a:cd:f8:da:1a:78:1a:5d:8e:cb:30:3c:54:a6:5d: e6:56:d1:ff:e5:99:2c:4e:1a:ab:8e:2d:f2:b3:88: 93:0e:04:af:7e:7a:e7:3c:1a:4b:08:8a:1d:a8:fc: aa:15:8f:21:bc:b6:7d:0f:8d:6e:a0:f6:5b:2a:58: 69:88:60:5f:da:11:7e:d3:f0:33:0d:4a:48:c0:3e: 29:4c:16:f0:1a:20:2f:f0:26:09:ee:eb:a7:4a:d0: 53:d3:c3:72:b2:44:89:a8:de:d9:e5:87:c4:dd:cb: b1:cb:ba:db:53:a9:44:aa:6b:02:5b:83:fb:e0:0a: de:09:b1:cd:3d:b7:00:a9:ab:8a:04:9e:d8:ac:b4: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:CA:55:16:4E:87:77:23:4C:6E:BC:22:D3:99:B4:72:18:BC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d6:17:59:55:96:3d:08:27:aa:50:a1:b3:9b:61:c4:bf:4e: de:2b:f0:b6:c9:3e:37:a6:0e:3a:51:17:e1:b4:11:88:d1:43: 78:e6:ef:eb:98:ef:d7:e0:12:e7:fb:a0:f0:8a:69:ac:f9:92: 09:f6:86:c1:44:04:91:40:98:59:1d:c1:41:89:2f:44:18:42: c0:c6:aa:6f:d7:5b:de:3f:4b:45:26:e0:3a:ce:23:8b:41:e4: d6:b6:01:4f:9d:a9:9d:14:bb:f8:57:c4:c6:45:b3:74:b3:07: c9:a0:0d:68:5f:6c:bb:e7:53:b3:70:56:e3:c8:60:32:d4:d7: 36:99:03:ae:06:71:a3:4d:80:09:48:90:30:54:aa:02:d8:f3: a9:df:36:f1:1e:81:cd:c1:42:4f:db:ba:ee:21:d0:2c:de:48: 97:ec:4d:75:c4:8a:5f:a2:93:17:0c:fe:38:49:ec:59:12:97: 15:1f:a9:a6:51:b1:4b:59:51:0b:93:0d:20:6a:bb:a1:66:e1: 77:c7:2f:3c:f9:cc:a8:2f:8f:2d:70:15:d5:c1:1c:9f:e9:4c: a3:b8:d0:76:f0:96:bd:ff:75:67:3c:17:75:a5:6a:a8:a7:05: 95:05:04:4f:34:92:e9:24:e6:6d:0f:4b:62:db:e3:f4:dc:22: 79:29:cf:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc9hUFaq5kY3NjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTg0ZjlhOTItNDkyNS00Yjg4LTgzOTItMmNjMTdiNDg3ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd+ybvBYSYavDyeqjMabIAhQnoHqDsfUi4Yt CsNMvSBEijL/95xnbkwxWBeoGLXU3gY2h0qqhGc7GZclujBhmcO2TpoZMRLqnhRn YW+/AnYoFQZfET2I5QwmFeclraxkkbuiqUlPNkffE+fztU/w3eVVLY34vQCKzfja GngaXY7LMDxUpl3mVtH/5ZksThqrji3ys4iTDgSvfnrnPBpLCIodqPyqFY8hvLZ9 D41uoPZbKlhpiGBf2hF+0/AzDUpIwD4pTBbwGiAv8CYJ7uunStBT08NyskSJqN7Z 5YfE3cuxy7rbU6lEqmsCW4P74AreCbHNPbcAqauKBJ7YrLQ85wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpUylUWTod3I0xuvCLTmbRyGLxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMjY1OWNhYmItODM1OC0z ZjNhLWE3OTMtMjk3OGUzMTQyMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjWF1lVlj0IJ6pQobObYcS/Tt4r8LbJPjemDjpRF+G0EYjRQ3jm 7+uY79fgEuf7oPCKaaz5kgn2hsFEBJFAmFkdwUGJL0QYQsDGqm/XW94/S0Um4DrO I4tB5Na2AU+dqZ0Uu/hXxMZFs3SzB8mgDWhfbLvnU7NwVuPIYDLU1zaZA64GcaNN gAlIkDBUqgLY86nfNvEegc3BQk/buu4h0CzeSJfsTXXEil+ikxcM/jhJ7FkSlxUf qaZRsUtZUQuTDSBqu6Fm4XfHLzz5zKgvjy1wFdXBHJ/pTKO40Hbwlr3/dWc8F3Wl aqinBZUFBE80kukk5m0PS2Lb4/TcInkpz9s= -----END CERTIFICATE-----Generated at Sat Oct 3 08:04:50 2026 by rpki-client