$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa File: a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa (raw, json) Hash identifier: RYmlUz3GFy8HT+jGrWVNqxWuPPaOGM2mgxSY8Y8BdIQ= Subject key identifier: BB:40:26:CF:45:61:9B:32:22:5C:25:E3:39:49:75:42:1B:39:AA:E0 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584A46A5A710135E068459E23F00 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 4 IP address blocks: 2001:500:84::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a7:10:13:5e:06:84:59:e2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=e0f828b4-6072-45c1-bda1-bec30a795275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:4c:65:50:96:88:46:0e:f3:de:fe:59:dc: 68:dd:fb:c5:ac:68:43:59:f1:9c:6b:a8:66:12:99: 27:fe:00:bb:e8:10:31:80:81:b5:4c:fe:50:0a:e9: 63:49:f8:cf:9e:70:a1:c7:35:ff:d4:41:9e:c1:f0: 99:29:6b:dc:d7:da:bf:a0:fc:ab:b8:70:14:32:af: 10:16:8b:72:9a:14:68:78:3c:78:83:8b:47:5b:f0: f0:fb:ee:5d:be:33:8b:36:b8:c3:0f:40:6f:f3:83: b1:37:78:fb:ec:f1:c8:3a:fa:dc:f2:8f:0b:bf:4a: ff:c6:6a:d3:b2:05:68:2f:e6:0f:8c:8f:ce:5a:61: c4:a6:ec:27:c5:f4:ba:a0:46:38:67:ad:50:ec:87: 6f:f1:19:9a:01:43:05:ea:01:75:38:1f:3b:e0:1b: 4a:36:76:25:a5:2c:60:60:0f:fa:fe:6f:b5:db:25: 45:0c:3a:6c:57:86:59:85:63:7c:cb:75:61:f3:ab: 24:95:0e:b3:75:41:cc:6d:06:64:55:a0:02:e7:1c: 7a:69:1a:4e:42:28:88:5c:cc:f3:34:05:89:db:2f: 45:16:ab:06:c6:7a:97:92:a7:30:2a:72:f0:c4:7f: 28:5b:34:66:13:80:bd:59:5e:c4:10:3c:e8:68:e4: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:26:CF:45:61:9B:32:22:5C:25:E3:39:49:75:42:1B:39:AA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c6:bb:28:fe:d2:11:93:64:4e:66:4f:2d:84:32:c1:9c:c2: 88:4b:c0:0d:fb:2a:1a:3d:f6:b2:43:bf:e9:a0:18:a6:99:89: e1:04:02:c3:2a:72:3a:73:f7:e9:4e:f4:e9:66:5c:86:b7:09: aa:1b:91:18:80:da:72:d0:a8:bc:48:5b:43:08:be:f0:5f:d2: 57:fb:4e:ac:ed:37:dc:ec:b9:d3:68:d4:6a:4d:b3:1e:3a:76: b9:e8:29:ba:ba:3d:ef:bb:65:23:10:4f:01:97:eb:37:9b:8f: cb:ee:cd:86:36:ce:19:f5:5c:9b:ab:0b:3d:1b:36:c2:4a:78: d2:53:aa:ca:98:92:a8:11:46:1a:e7:a8:3b:15:29:c5:db:ef: 29:e3:cd:e9:c1:7e:ee:d7:8a:93:85:d7:ed:ce:af:a6:c1:b5: 9a:6e:7f:6e:93:2c:c1:e4:dd:a9:1d:ff:85:b2:fc:5c:ad:bb: f8:86:46:b8:38:3c:65:78:8f:39:8d:f9:fc:d8:92:5d:e1:4d: 3e:63:03:a0:2f:05:67:fa:94:44:5e:99:06:a2:f0:66:d8:a1: cd:bd:06:5e:51:3e:e8:c1:90:0a:68:a5:3c:38:6c:d9:7e:19: 18:27:e5:18:48:9d:15:e3:70:6e:11:62:74:8a:69:d9:6e:fb: fa:76:18:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpGpacQE14GhFniPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTBmODI4YjQtNjA3Mi00NWMxLWJkYTEtYmVjMzBhNzk1Mjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE1MZVCWiEYO897+Wdxo3fvFrGhDWfGca6hm Epkn/gC76BAxgIG1TP5QCuljSfjPnnChxzX/1EGewfCZKWvc19q/oPyruHAUMq8Q FotymhRoeDx4g4tHW/Dw++5dvjOLNrjDD0Bv84OxN3j77PHIOvrc8o8Lv0r/xmrT sgVoL+YPjI/OWmHEpuwnxfS6oEY4Z61Q7Idv8RmaAUMF6gF1OB874BtKNnYlpSxg YA/6/m+12yVFDDpsV4ZZhWN8y3Vh86sklQ6zdUHMbQZkVaAC5xx6aRpOQiiIXMzz NAWJ2y9FFqsGxnqXkqcwKnLwxH8oWzRmE4C9WV7EEDzoaOQwdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLtAJs9FYZsyIlwl4zlJdUIbOargMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvYTI2MDRhMzItNzhjMy0z YjQyLWE4NmUtYTM2YjllMmQ5YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPGuyj+0hGTZE5mTy2EMsGcwohLwA37Kho99rJDv+mgGKaZieEE AsMqcjpz9+lO9OlmXIa3CaobkRiA2nLQqLxIW0MIvvBf0lf7TqztN9zsudNo1GpN sx46drnoKbq6Pe+7ZSMQTwGX6zebj8vuzYY2zhn1XJurCz0bNsJKeNJTqsqYkqgR RhrnqDsVKcXb7ynjzenBfu7XipOF1+3Or6bBtZpuf26TLMHk3akd/4Wy/Fytu/iG Rrg4PGV4jzmN+fzYkl3hTT5jA6AvBWf6lERemQai8GbYoc29Bl5RPujBkApopTw4 bNl+GRgn5RhInRXjcG4RYnSKadlu+/p2GEY= -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:42 2025 by rpki-client