$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa File: 2659cabb-8358-3f3a-a793-2978e3142187.roa (raw, json) Hash identifier: O6UEc5TfT7jGggiS32oc7oCpAsW3lTHYM98lNNRrIf8= Subject key identifier: 15:1F:3B:4B:B3:78:2C:81:5D:BE:70:B6:0E:4D:1E:CA:13:2A:C3:EC Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584DC8304329FD31BDCD9F540300 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 4 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:43:29:fd:31:bd:cd:9f:54:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=1da5e7c8-aaca-4c6f-8858-fbdfe0d18967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:6e:29:7f:bc:46:61:5e:46:d9:ab:31:54: 62:30:9b:e6:34:ee:5c:c2:21:99:7c:14:aa:53:6c: b5:87:02:38:20:ec:91:27:a0:07:2b:89:98:07:5d: f8:74:b8:12:5f:61:a0:63:d7:32:ed:a5:27:c9:1e: 76:69:cd:27:04:7d:0b:2c:cc:91:e3:3a:b2:22:df: fc:4b:be:92:97:b4:84:f1:a7:af:55:6b:a0:c5:71: 33:df:9e:21:cc:12:33:de:4b:63:27:4e:59:d3:5a: 4e:9a:b7:4d:84:c6:97:4f:75:c8:8a:c0:71:0a:2a: 15:e6:5c:eb:0a:5c:ee:69:ab:1b:63:e8:01:b7:e1: 1a:8c:77:9f:5f:d8:9d:7d:d3:55:ac:1b:3f:18:65: 00:a7:c3:53:b0:b4:ff:ed:6b:81:d0:11:a3:0d:4e: c9:8f:b2:b3:20:99:2c:2c:31:77:53:8f:ac:24:02: b3:c2:15:2b:87:72:d0:6d:b8:55:59:b8:bf:93:a3: 0c:fa:fb:de:1c:8a:dc:f3:12:eb:f3:88:4a:bc:4e: 12:39:b9:43:a1:22:56:26:16:f9:2d:e1:70:bf:bb: c3:be:38:17:78:07:06:46:ee:6c:63:91:1a:3e:7b: 06:ac:6f:e6:4e:f2:b1:da:11:8e:79:a1:2f:d0:91: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:3B:4B:B3:78:2C:81:5D:BE:70:B6:0E:4D:1E:CA:13:2A:C3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:45:c6:43:b1:3f:37:d7:7a:a6:1d:5a:31:07:4f:db:1f:44: 0b:ea:08:a0:64:6c:00:65:7b:38:b4:0e:dc:29:84:75:98:9b: 65:6d:61:0e:14:56:c5:fd:6f:a1:b0:8a:89:0e:4b:19:00:df: 81:33:37:46:3e:1b:df:56:be:ba:6e:12:a9:19:35:ac:93:ad: cf:08:30:b8:d6:59:cb:72:2c:2c:f3:ae:1e:46:e2:90:9a:4f: 9b:9d:12:2d:e9:44:f5:ca:f9:6a:ae:ba:af:22:bb:7e:f3:a9: a9:8a:c6:df:23:99:6e:e3:90:f3:06:55:61:7c:e2:7e:ce:c7: 5e:62:75:bc:c6:73:49:a3:54:ba:e2:ec:d3:38:7f:7b:77:ae: 69:99:90:41:04:4f:fc:b0:f6:ec:23:6f:98:a1:8e:15:b4:bf: 03:e9:54:7c:9d:b1:c7:7b:fb:17:1a:1c:e2:24:c2:06:11:d5: 91:f7:bc:ba:2d:13:be:6d:be:2f:43:c4:70:e7:4a:c3:b8:18: 9f:f6:de:52:3d:80:d4:51:da:d3:9f:d8:20:0f:80:00:af:c6: 20:66:71:e4:2e:32:4e:6c:51:6c:82:b3:2c:55:56:bb:7d:db: 56:04:b7:8e:35:6f:99:ac:fa:1a:d5:07:e8:0a:15:a8:7e:0f: 26:a0:f0:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3IMEMp/TG9zZ9UAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk MWRhNWU3YzgtYWFjYS00YzZmLTg4NTgtZmJkZmUwZDE4OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3tuKX+8RmFeRtmrMVRiMJvmNO5cwiGZfBSq U2y1hwI4IOyRJ6AHK4mYB134dLgSX2GgY9cy7aUnyR52ac0nBH0LLMyR4zqyIt/8 S76Sl7SE8aevVWugxXEz354hzBIz3ktjJ05Z01pOmrdNhMaXT3XIisBxCioV5lzr ClzuaasbY+gBt+EajHefX9idfdNVrBs/GGUAp8NTsLT/7WuB0BGjDU7Jj7KzIJks LDF3U4+sJAKzwhUrh3LQbbhVWbi/k6MM+vveHIrc8xLr84hKvE4SOblDoSJWJhb5 LeFwv7vDvjgXeAcGRu5sY5EaPnsGrG/mTvKx2hGOeaEv0JH+0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUfO0uzeCyBXb5wtg5NHsoTKsPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMjY1OWNhYmItODM1OC0z ZjNhLWE3OTMtMjk3OGUzMTQyMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItFxkOxPzfXeqYdWjEHT9sfRAvqCKBkbABlezi0DtwphHWYm2Vt YQ4UVsX9b6GwiokOSxkA34EzN0Y+G99WvrpuEqkZNayTrc8IMLjWWctyLCzzrh5G 4pCaT5udEi3pRPXK+Wquuq8iu37zqamKxt8jmW7jkPMGVWF84n7Ox15idbzGc0mj VLri7NM4f3t3rmmZkEEET/yw9uwjb5ihjhW0vwPpVHydscd7+xcaHOIkwgYR1ZH3 vLotE75tvi9DxHDnSsO4GJ/23lI9gNRR2tOf2CAPgACvxiBmceQuMk5sUWyCsyxV Vrt921YEt441b5ms+hrVB+gKFah+Dyag8P4= -----END CERTIFICATE-----Generated at Wed May 13 14:49:15 2026 by rpki-client