$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa File: 448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json) Hash identifier: R5ldad4O8o5pvAnO+xgTMY/se1RlpHFO5MYZNV5cjak= Subject key identifier: 2F:EB:5D:0F:9E:68:C4:E9:7A:FC:08:5D:E0:C6:7C:4C:F2:7D:EB:27 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584DBFD059F47C71694E2E687D00 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 394353 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:59:f4:7c:71:69:4e:2e:68:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=7dd19caf-0a5a-4119-bbfc-8b921fe29138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:49:e6:0e:49:9a:7a:c2:18:92:4a:03:70: 38:82:02:24:fe:96:7c:7f:d1:19:09:f6:dc:22:d3: 2a:b2:46:92:f1:29:d1:ae:ef:f6:50:a0:19:ea:09: 67:58:a9:5b:05:54:86:d0:e7:b0:4c:f0:cc:5d:8e: 7f:64:c2:55:8c:f1:15:b5:ff:29:01:ca:41:97:e8: 44:b2:dc:4f:b8:5b:66:29:f4:bc:09:0d:71:f7:ef: a7:f4:cb:ac:3c:83:44:0b:60:2c:86:75:93:1d:dc: 98:2d:dd:65:92:79:da:a2:ea:71:e7:33:23:eb:30: 6a:59:66:11:89:df:50:7f:53:7c:f6:88:b3:26:b0: bd:df:6b:ac:cf:9f:dd:33:26:93:48:eb:9b:d6:31: ad:fe:e9:61:41:ff:00:cc:db:26:62:e5:8b:aa:b5: 56:df:8a:26:e4:12:b9:0a:65:5e:11:db:45:09:cc: e6:39:b0:3e:49:c9:2e:39:73:7c:52:ee:11:94:91: 6d:1e:1f:f5:6f:7b:d4:ad:27:fe:1a:a3:0b:34:f3: 78:5c:a1:35:f6:2c:d6:98:52:ca:35:88:22:2f:ba: 77:12:ac:4f:08:94:4d:95:26:41:89:32:f9:c9:f2: e6:d0:48:f3:f1:6b:77:eb:c7:31:b7:8e:9f:e3:51: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:5D:0F:9E:68:C4:E9:7A:FC:08:5D:E0:C6:7C:4C:F2:7D:EB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f0:cf:94:69:8e:71:59:e7:37:dd:af:10:9c:bd:9e:2c:25: 69:18:01:56:c5:8d:e6:7a:81:91:71:28:ee:8b:d1:35:76:ac: 3a:a0:d5:5d:50:51:5a:d4:f9:88:18:a5:5b:b1:99:7e:61:7f: de:70:5e:ff:b6:7e:ba:45:e9:df:28:40:0d:ca:21:9d:24:30: 7a:b7:d9:da:00:ec:3d:55:f8:ee:cd:da:a7:b6:e1:19:05:b7: 33:83:94:c0:2b:44:c0:ca:b6:3c:e7:d0:48:2e:d3:aa:46:2f: 47:76:8e:d0:5b:37:fd:de:57:a0:a5:63:08:7e:14:37:fc:c7: 1d:aa:52:be:27:7b:5f:a4:a1:d9:24:ab:23:fa:c2:ff:b0:d7: e5:1a:5d:da:5a:4b:68:40:8f:5b:e5:37:2f:19:ff:00:c6:5d: 36:be:44:0a:18:32:cd:0e:63:9c:6c:78:bd:23:61:09:e2:0d: 4a:fa:e7:f6:b1:56:14:b6:b0:36:88:db:a0:91:ea:97:e9:b0: 7e:4f:c4:28:8b:6d:cf:9d:0a:2b:1e:8f:06:b2:24:63:4d:0f: 16:aa:b4:3e:ac:02:90:b0:d6:7c:28:d6:78:c7:7a:eb:83:77: 46:a6:46:fa:9f:79:37:83:86:a6:22:44:a5:b3:f4:80:59:cb: 4b:86:7b:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0Fn0fHFpTi5ofQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk N2RkMTljYWYtMGE1YS00MTE5LWJiZmMtOGI5MjFmZTI5MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FJ5g5JmnrCGJJKA3A4ggIk/pZ8f9EZCfbc ItMqskaS8SnRru/2UKAZ6glnWKlbBVSG0OewTPDMXY5/ZMJVjPEVtf8pAcpBl+hE stxPuFtmKfS8CQ1x9++n9MusPINEC2AshnWTHdyYLd1lknnaoupx5zMj6zBqWWYR id9Qf1N89oizJrC932usz5/dMyaTSOub1jGt/ulhQf8AzNsmYuWLqrVW34om5BK5 CmVeEdtFCczmObA+SckuOXN8Uu4RlJFtHh/1b3vUrSf+GqMLNPN4XKE19izWmFLK NYgiL7p3EqxPCJRNlSZBiTL5yfLm0Ejz8Wt368cxt46f41H9kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/rXQ+eaMTpevwIXeDGfEzyfesnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbwz5RpjnFZ5zfdrxCcvZ4sJWkYAVbFjeZ6gZFxKO6L0TV2rDqg 1V1QUVrU+YgYpVuxmX5hf95wXv+2frpF6d8oQA3KIZ0kMHq32doA7D1V+O7N2qe2 4RkFtzODlMArRMDKtjzn0Egu06pGL0d2jtBbN/3eV6ClYwh+FDf8xx2qUr4ne1+k odkkqyP6wv+w1+UaXdpaS2hAj1vlNy8Z/wDGXTa+RAoYMs0OY5xseL0jYQniDUr6 5/axVhS2sDaI26CR6pfpsH5PxCiLbc+dCisejwayJGNNDxaqtD6sApCw1nwo1njH euuDd0amRvqfeTeDhqYiRKWz9IBZy0uGeyY= -----END CERTIFICATE-----Generated at Wed May 13 12:57:54 2026 by rpki-client