$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa File: 2659cabb-8358-3f3a-a793-2978e3142187.roa (raw, json) Hash identifier: gZm2UNAfWo7NCxvE0j2wJvpEOTsKLtp0CmZUSvRZaoo= Subject key identifier: 4E:EB:65:E0:E5:54:3E:67:BC:E4:65:76:11:0C:76:C1:7A:76:0A:77 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B2761774B1E59CB5762FE3818 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 4 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:77:4b:1e:59:cb:57:62:fe:38:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=3d215adb-32b8-4b7f-af99-e04709fb08c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:3d:65:8e:61:c2:32:ac:1e:bf:03:35:f2: b4:96:2b:c3:86:f1:d5:ee:21:67:e8:80:7c:24:f2: ea:79:7d:c9:31:81:0b:b6:88:bc:56:f1:55:01:e0: 3f:63:3d:f6:01:c0:62:76:68:01:2a:b9:95:23:e3: 18:d1:cf:3c:69:b7:e3:1d:0d:c8:7f:07:30:7e:a7: f0:47:d5:73:56:72:0c:9a:b7:1a:2d:98:a4:71:fa: 16:76:52:07:cd:b8:63:c9:cb:31:eb:fd:a3:51:92: 91:95:55:16:ba:e9:4d:91:e8:d5:c8:b6:3f:86:4b: d5:bb:a4:ec:4a:3f:7f:26:16:a9:31:9b:f7:dc:8a: 49:91:f8:ac:05:73:74:53:6b:80:b0:68:29:22:eb: b4:49:d5:f8:c9:f7:3f:ec:d0:3a:80:76:27:1a:8e: 0b:8c:b0:b7:ea:88:05:86:65:de:57:3b:37:db:1c: 70:cf:40:7d:00:f3:2c:71:47:0b:0d:6f:84:f5:19: d9:0f:e9:0b:f2:c9:9f:cb:98:4c:36:90:38:f5:a4: ed:ef:b9:e4:d1:2a:b1:e2:e6:7f:f5:8f:29:db:3e: da:04:79:e8:11:43:4d:01:a9:51:11:69:91:94:b9: 74:e6:d2:ad:d0:9d:6e:57:ab:4e:0f:4b:b2:d8:bd: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:65:E0:E5:54:3E:67:BC:E4:65:76:11:0C:76:C1:7A:76:0A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bb:d7:2e:78:8a:8f:d9:89:88:7c:30:bf:4a:22:6a:12:ec: 68:bc:8d:bf:a9:ea:76:71:6d:ee:01:87:ad:9d:5e:cf:05:9e: b0:1f:63:19:2b:cc:bc:39:99:63:41:ef:cf:9d:eb:11:05:67: 40:4a:2d:d1:cb:0e:2d:e5:38:59:d9:ab:29:80:b9:db:36:87: 99:c2:51:46:61:88:00:e9:09:46:6d:3a:ce:e0:7d:48:8e:57: 05:aa:e5:f7:44:10:69:47:aa:66:fe:ae:ad:3e:cc:c1:95:5c: 0a:f2:37:65:36:6c:ee:b5:2f:8a:a8:bf:70:6c:f9:d2:7b:32: b7:da:48:b3:8a:d1:66:06:ab:d4:fa:68:b5:4a:2d:5d:92:28: b7:59:25:2b:a1:78:94:b0:34:42:2a:b4:1d:9e:3f:3e:71:05: 6a:fd:51:92:57:ac:d5:22:d1:41:08:03:82:75:20:b6:7d:10: 8e:77:e4:b6:df:2d:6c:82:36:40:e5:ce:18:26:4c:94:f5:36: 75:ff:f7:bb:21:1f:c5:ae:fb:17:dc:51:06:32:9c:09:57:51: 6b:8c:c4:d2:d1:bd:5e:be:2e:88:92:ab:05:f8:a9:a7:6b:f2: 12:89:da:09:78:26:9f:54:15:51:d6:50:68:3e:dc:08:98:6e: 2c:a5:57:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsnYXdLHlnLV2L+OBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk M2QyMTVhZGItMzJiOC00YjdmLWFmOTktZTA0NzA5ZmIwOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHc9ZY5hwjKsHr8DNfK0livDhvHV7iFn6IB8 JPLqeX3JMYELtoi8VvFVAeA/Yz32AcBidmgBKrmVI+MY0c88abfjHQ3Ifwcwfqfw R9VzVnIMmrcaLZikcfoWdlIHzbhjycsx6/2jUZKRlVUWuulNkejVyLY/hkvVu6Ts Sj9/JhapMZv33IpJkfisBXN0U2uAsGgpIuu0SdX4yfc/7NA6gHYnGo4LjLC36ogF hmXeVzs32xxwz0B9APMscUcLDW+E9RnZD+kL8smfy5hMNpA49aTt77nk0Sqx4uZ/ 9Y8p2z7aBHnoEUNNAalREWmRlLl05tKt0J1uV6tOD0uy2L1u5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE7rZeDlVD5nvORldhEMdsF6dgp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMjY1OWNhYmItODM1OC0z ZjNhLWE3OTMtMjk3OGUzMTQyMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHO71y54io/ZiYh8ML9KImoS7Gi8jb+p6nZxbe4Bh62dXs8FnrAf YxkrzLw5mWNB78+d6xEFZ0BKLdHLDi3lOFnZqymAuds2h5nCUUZhiADpCUZtOs7g fUiOVwWq5fdEEGlHqmb+rq0+zMGVXAryN2U2bO61L4qov3Bs+dJ7MrfaSLOK0WYG q9T6aLVKLV2SKLdZJSuheJSwNEIqtB2ePz5xBWr9UZJXrNUi0UEIA4J1ILZ9EI53 5LbfLWyCNkDlzhgmTJT1NnX/97shH8Wu+xfcUQYynAlXUWuMxNLRvV6+LoiSqwX4 qadr8hKJ2gl4Jp9UFVHWUGg+3AiYbiylV04= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:53 2025 by rpki-client