$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa File: e2967edf-17a9-32bb-8570-be2bca3444ee.roa (raw, json) Hash identifier: 6RbIxhq05ch3VtIV7yuoGioI12EwxGvkiPmDQZp+QgM= Subject key identifier: 29:6E:D4:43:AB:6D:D6:34:35:C5:4D:EF:18:CA:C0:16:59:8C:B4:CC Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584DB07586BF5AC683A350D79B00 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 394353 IP address blocks: 2001:500:205:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:86:bf:5a:c6:83:a3:50:d7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=a13558dd-6af6-4f37-8827-22cda666a7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:3c:da:e6:4f:13:fc:dc:df:30:ad:41:68: 1d:2b:54:1f:97:eb:7c:35:60:75:6d:e9:15:f1:66: ca:6b:0e:b0:8a:90:7f:4f:d1:c5:e5:33:7d:08:4f: 0d:63:01:78:78:23:71:9d:05:c0:77:df:83:dc:87: 8c:7c:36:65:88:93:66:95:3a:bd:0f:1e:09:8c:e5: 3a:9e:e6:df:43:d6:2a:4b:e8:3b:5f:3a:7c:41:ce: fd:2e:35:df:ba:87:95:0f:2f:e3:95:7f:cf:7a:19: 55:53:65:b8:38:b6:05:91:c4:04:de:8f:e1:f6:4c: 3f:e8:56:dc:55:4d:eb:23:f4:48:08:c2:e9:7a:fa: 1f:73:12:34:65:a5:c5:c5:82:77:cd:b9:78:f8:15: e7:d4:68:cb:e5:fa:ad:41:1e:14:17:1e:f7:8e:f4: c8:f2:6e:6f:be:27:cb:d7:68:09:e4:22:77:71:d8: 4b:ba:33:69:e1:de:be:66:d1:7d:50:b5:01:81:76: 8e:cd:76:9d:5b:89:d3:fc:92:8e:d9:64:a1:4a:b2: c3:b5:de:9e:2e:d3:76:c2:86:8e:39:28:ab:ee:ae: bf:15:d4:0f:fc:61:c6:5d:b8:eb:b3:29:da:9b:aa: cb:bd:ad:c3:cb:d4:f0:27:2b:f0:0e:e8:af:4f:55: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:D4:43:AB:6D:D6:34:35:C5:4D:EF:18:CA:C0:16:59:8C:B4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:205:8000::/49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:81:07:ce:cb:dc:02:c8:02:b2:af:7d:c7:13:74:f7:57:f0: 66:7f:f5:c8:68:ec:de:12:21:ea:e3:05:f2:f2:44:5b:ec:35: b0:16:20:be:ba:c5:e4:49:dd:35:d7:0a:22:a0:19:d8:49:27: 20:a2:52:37:d3:8f:54:a3:ea:0a:dc:76:3d:32:f5:c4:d7:67: 6c:cd:23:6f:e9:1d:84:b8:bc:43:d0:f8:a2:39:60:2d:c2:c3: a1:74:39:ec:fa:d6:f8:3a:09:c2:f1:b2:72:c2:9d:7a:29:93: 5b:b9:cf:f8:17:47:69:9e:a2:a9:39:b9:9b:0e:a2:75:ce:0f: c8:a0:b4:c7:93:74:72:2f:a9:82:07:c8:dc:86:bb:f5:9c:62: 8b:04:e6:ac:a6:eb:aa:92:92:ea:bc:ce:72:f4:0b:6c:a2:d5: e0:91:83:01:8e:f4:61:61:6e:84:40:ca:37:ff:88:32:75:4c: af:a5:80:f9:c9:ee:9d:14:94:4e:2a:00:8d:4a:a9:69:e4:38: 91:ac:04:d8:3c:35:bc:8c:c1:35:0a:ec:89:0b:34:30:fc:5d: a4:fe:e5:f3:85:46:5f:de:dc:31:46:25:ea:ef:81:b4:3b:27: 0f:59:42:3f:a5:f7:b1:29:f2:70:3f:3f:b3:b9:6b:42:fd:df: e5:eb:ab:27 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE2wdYa/WsaDo1DXmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk YTEzNTU4ZGQtNmFmNi00ZjM3LTg4MjctMjJjZGE2NjZhN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBE82uZPE/zc3zCtQWgdK1Qfl+t8NWB1bekV 8WbKaw6wipB/T9HF5TN9CE8NYwF4eCNxnQXAd9+D3IeMfDZliJNmlTq9Dx4JjOU6 nubfQ9YqS+g7Xzp8Qc79LjXfuoeVDy/jlX/PehlVU2W4OLYFkcQE3o/h9kw/6Fbc VU3rI/RICMLpevofcxI0ZaXFxYJ3zbl4+BXn1GjL5fqtQR4UFx73jvTI8m5vvifL 12gJ5CJ3cdhLujNp4d6+ZtF9ULUBgXaOzXadW4nT/JKO2WShSrLDtd6eLtN2woaO OSir7q6/FdQP/GHGXbjrsynam6rLva3Dy9TwJyvwDuivT1XZ8QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFClu1EOrbdY0NcVN7xjKwBZZjLTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZTI5NjdlZGYtMTdhOS0z MmJiLTg1NzAtYmUyYmNhMzQ0NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgHIAEFAAIF gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCdgQfOy9wCyAKyr33HE3T3V/Bmf/XIaOzeEiHq4wXy8kRb7DWw FiC+usXkSd011woioBnYSScgolI3049Uo+oK3HY9MvXE12dszSNv6R2EuLxD0Pii OWAtwsOhdDns+tb4OgnC8bJywp16KZNbuc/4F0dpnqKpObmbDqJ1zg/IoLTHk3Ry L6mCB8jchrv1nGKLBOaspuuqkpLqvM5y9AtsotXgkYMBjvRhYW6EQMo3/4gydUyv pYD5ye6dFJROKgCNSqlp5DiRrATYPDW8jME1CuyJCzQw/F2k/uXzhUZf3twxRiXq 74G0OycPWUI/pfexKfJwPz+zuWtC/d/l66sn -----END CERTIFICATE-----Generated at Wed May 13 13:11:53 2026 by rpki-client