$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa File: 448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json) Hash identifier: N84GcL1TMUZyflfVePbefgHAEc7vP2tZ1uz1LRpEfQM= Subject key identifier: 3F:6C:9D:C8:2F:B1:56:12:DA:08:D2:5D:C8:09:2D:3B:6F:BC:C9:5C Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B1F016E74CB9BC2DCC2AB36C0 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 394353 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6e:74:cb:9b:c2:dc:c2:ab:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ac7c548c-45ac-447d-b9a7-0329171b81a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:75:20:67:e0:63:6c:b8:f5:99:ff:c0:ad: c9:50:2c:8e:b8:61:b6:ae:af:9c:72:3e:55:43:88: 28:d6:e3:b7:7d:ed:21:bc:41:39:6c:94:6b:ad:21: cb:85:f9:7f:8e:48:7b:d4:38:9c:d6:49:22:05:30: fc:20:b2:f9:bc:df:b5:38:44:c6:32:48:2e:df:71: 44:bb:e6:a2:19:1b:86:5b:bf:f6:74:64:71:ba:35: 08:b1:a2:ba:bf:08:b8:b1:ef:97:66:a1:56:a7:f9: 69:52:f7:95:36:97:c8:c1:9b:fe:91:10:24:2c:6d: cf:d6:a1:23:dc:10:95:3f:87:05:08:83:71:db:36: 8f:7e:7e:b6:c8:25:a3:a0:14:c5:cb:42:fd:43:d1: 22:30:20:26:8f:53:ac:e2:ad:ea:92:96:52:87:8d: d4:e4:0e:a0:97:16:aa:bb:cb:50:4c:07:05:86:f8: b9:79:b7:08:be:d6:55:1f:0d:ea:0f:99:ed:0c:9a: 30:70:c6:95:df:73:a7:b0:78:05:d7:c0:53:05:23: 9b:33:e9:e5:71:4e:e3:0d:ec:b8:4d:19:c5:f5:d2: e9:7e:8d:5d:8b:81:44:92:fa:9d:b4:87:b3:00:b3: 7d:ee:f4:fc:39:14:dc:66:dc:0b:1f:e1:72:39:4c: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:9D:C8:2F:B1:56:12:DA:08:D2:5D:C8:09:2D:3B:6F:BC:C9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:85:56:47:a4:8c:26:8a:07:dc:2a:50:67:1e:fb:85:e9:99: a8:b8:7a:cd:d2:4f:e3:43:bf:f1:9c:30:b3:82:bf:0a:a3:7b: 4f:bd:e7:3c:47:a6:0d:21:21:fd:7e:a4:2b:00:60:d0:e8:12: 8e:dc:cd:db:94:4f:2c:ae:f7:f1:e3:08:22:08:c7:c0:c9:93: d5:04:76:3b:f7:93:86:58:29:6a:53:e8:bb:80:60:a0:f4:38: 12:1f:51:ec:19:fe:0f:de:9e:64:b2:1d:b7:35:29:ec:70:3b: 08:20:c3:6e:4b:49:5c:b9:6c:6b:27:8a:e0:2a:81:5b:57:48: 81:59:05:67:bc:a4:62:ae:d6:c0:6b:02:2a:64:e9:60:c2:c2: b2:82:34:a8:df:0d:b5:d4:bf:db:ab:2b:17:80:e5:ca:3d:bc: 9e:1e:48:3e:6f:68:38:ef:0f:9d:9d:a8:c5:1f:43:9e:f7:91: 6a:d7:df:9b:4a:29:62:e7:a8:2c:57:40:c9:e6:02:c1:ea:de: 83:d3:12:bd:3f:32:50:d0:00:90:8f:2a:c4:6f:9c:98:6a:1d: 23:7b:8c:45:f6:af:bb:ee:61:d8:0e:91:f6:ca:ad:1f:e5:c2: 12:14:95:74:cd:50:a9:68:d8:22:65:d6:02:57:73:d4:5f:da: 61:d2:b2:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAW50y5vC3MKrNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWM3YzU0OGMtNDVhYy00NDdkLWI5YTctMDMyOTE3MWI4MWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu591IGfgY2y49Zn/wK3JUCyOuGG2rq+ccj5V Q4go1uO3fe0hvEE5bJRrrSHLhfl/jkh71Dic1kkiBTD8ILL5vN+1OETGMkgu33FE u+aiGRuGW7/2dGRxujUIsaK6vwi4se+XZqFWp/lpUveVNpfIwZv+kRAkLG3P1qEj 3BCVP4cFCINx2zaPfn62yCWjoBTFy0L9Q9EiMCAmj1Os4q3qkpZSh43U5A6glxaq u8tQTAcFhvi5ebcIvtZVHw3qD5ntDJowcMaV33OnsHgF18BTBSObM+nlcU7jDey4 TRnF9dLpfo1di4FEkvqdtIezALN97vT8ORTcZtwLH+FyOUxusQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9sncgvsVYS2gjSXcgJLTtvvMlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSFVkekjCaKB9wqUGce+4Xpmai4es3ST+NDv/GcMLOCvwqje0+9 5zxHpg0hIf1+pCsAYNDoEo7czduUTyyu9/HjCCIIx8DJk9UEdjv3k4ZYKWpT6LuA YKD0OBIfUewZ/g/enmSyHbc1KexwOwggw25LSVy5bGsniuAqgVtXSIFZBWe8pGKu 1sBrAipk6WDCwrKCNKjfDbXUv9urKxeA5co9vJ4eSD5vaDjvD52dqMUfQ573kWrX 35tKKWLnqCxXQMnmAsHq3oPTEr0/MlDQAJCPKsRvnJhqHSN7jEX2r7vuYdgOkfbK rR/lwhIUlXTNUKlo2CJl1gJXc9Rf2mHSsn0= -----END CERTIFICATE-----Generated at Wed Sep 10 17:42:48 2025 by rpki-client