$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa File: a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa (raw, json) Hash identifier: +sfYJe11y0EIgq9Vff7O3k39XMy6746XOI9cT6Qvc9c= Subject key identifier: 0F:63:8C:ED:AF:00:FF:6D:C1:AF:4F:8F:B3:B3:EA:D8:3D:6A:31:83 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584F49739F8409710A509C7F8480 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4 IP address blocks: 2001:500:84::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9f:84:09:71:0a:50:9c:7f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcc4bb42-634d-4614-bc87-bcdc4956bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:96:0b:17:ba:c4:72:48:84:fa:35:31:09: c9:70:31:d0:02:a8:29:16:de:c8:7b:5f:8d:d2:74: d4:e7:86:4d:4e:b1:90:c8:52:e7:dd:14:61:4c:da: a9:69:d4:b0:1f:c4:61:d4:a3:33:67:35:23:25:23: 74:97:a8:ab:db:78:23:86:82:67:18:58:00:4d:30: b6:dd:fb:07:c6:a6:e3:2d:e6:5b:74:62:42:d4:13: ec:71:dd:30:e9:ee:ee:e1:6c:65:aa:b8:15:6d:62: d8:22:77:f5:f8:7f:96:0b:5d:b9:c9:76:e2:eb:58: f9:9b:5b:3b:d5:bc:eb:d5:db:51:b7:91:7d:11:8a: bc:38:0e:c9:db:a0:69:f9:08:c6:77:52:f2:a5:3c: a2:96:cf:7e:c5:95:1b:12:c7:26:01:2e:e0:08:fd: 6a:1a:f3:2c:6a:cb:b0:d3:bf:d5:53:32:96:3d:c8: a6:48:39:00:41:3a:bb:a7:c8:38:7a:ce:db:92:7e: 6c:58:c8:06:ff:ac:93:bb:15:c7:f1:fe:fe:c4:10: 0b:57:24:2b:cc:75:59:70:8a:0e:bb:b1:73:8f:d7: b5:70:41:7f:bb:33:4e:12:54:84:a2:ab:2b:18:d4: b8:f6:cc:9c:24:e7:f4:24:2d:85:42:5e:42:e6:71: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:63:8C:ED:AF:00:FF:6D:C1:AF:4F:8F:B3:B3:EA:D8:3D:6A:31:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:8a:c7:e3:90:2c:f7:29:76:3b:9a:0a:39:ac:ad:11:fb:86: 85:2e:2a:78:35:50:4b:32:6d:5b:f3:f6:5e:bc:12:56:5f:fe: de:28:d9:48:98:7d:3d:5c:69:e4:92:d4:1c:34:77:ac:e5:0f: 05:1e:e1:b1:1d:35:10:7f:83:a3:6d:76:58:20:b5:65:ab:0c: bc:63:6f:e0:36:4d:6e:59:3f:c4:93:73:60:27:d7:91:7b:c0: df:51:de:bd:32:d0:e7:16:d9:0f:a3:80:2a:cb:51:b7:93:f5: 02:23:80:af:07:96:72:ad:bd:67:82:ba:1e:51:42:df:4e:12: d9:70:c1:19:b6:97:dd:6b:5c:c0:ab:76:9b:45:71:43:70:b5: b5:d4:0e:83:22:a5:39:b0:fc:9c:fe:9e:2a:74:5d:1d:2c:c0: 46:63:c3:e9:e1:bc:99:ab:64:54:a2:3d:99:19:8d:79:8f:a8: 80:31:49:2c:eb:c3:c2:43:30:6b:d2:b6:cf:93:45:a0:7c:88: 32:07:41:16:98:db:37:67:b3:ee:67:0b:54:4e:42:ff:ff:ac: b2:72:8c:0d:8f:68:d6:ad:b7:fd:59:65:4f:06:d7:4d:3a:fa: 89:4c:14:58:b3:d5:c3:9f:16:b6:e8:76:bd:73:84:71:0c:8d: 0b:fc:13:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5+ECXEKUJx/hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNjNGJiNDItNjM0ZC00NjE0LWJjODctYmNkYzQ5NTZiYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxmWCxe6xHJIhPo1MQnJcDHQAqgpFt7Ie1+N 0nTU54ZNTrGQyFLn3RRhTNqpadSwH8Rh1KMzZzUjJSN0l6ir23gjhoJnGFgATTC2 3fsHxqbjLeZbdGJC1BPscd0w6e7u4WxlqrgVbWLYInf1+H+WC125yXbi61j5m1s7 1bzr1dtRt5F9EYq8OA7J26Bp+QjGd1LypTyils9+xZUbEscmAS7gCP1qGvMsasuw 07/VUzKWPcimSDkAQTq7p8g4es7bkn5sWMgG/6yTuxXH8f7+xBALVyQrzHVZcIoO u7Fzj9e1cEF/uzNOElSEoqsrGNS49sycJOf0JC2FQl5C5nFoKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9jjO2vAP9twa9Pj7Oz6tg9ajGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvYTI2MDRhMzItNzhjMy0z YjQyLWE4NmUtYTM2YjllMmQ5YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKSKx+OQLPcpdjuaCjmsrRH7hoUuKng1UEsybVvz9l68ElZf/t4o 2UiYfT1caeSS1Bw0d6zlDwUe4bEdNRB/g6NtdlggtWWrDLxjb+A2TW5ZP8STc2An 15F7wN9R3r0y0OcW2Q+jgCrLUbeT9QIjgK8HlnKtvWeCuh5RQt9OEtlwwRm2l91r XMCrdptFcUNwtbXUDoMipTmw/Jz+nip0XR0swEZjw+nhvJmrZFSiPZkZjXmPqIAx SSzrw8JDMGvSts+TRaB8iDIHQRaY2zdns+5nC1ROQv//rLJyjA2PaNatt/1ZZU8G 1006+olMFFiz1cOfFrbodr1zhHEMjQv8Ewc= -----END CERTIFICATE-----Generated at Sun Sep 27 16:44:10 2026 by rpki-client