$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa File: dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa (raw, json) Hash identifier: 888wFtbZVZQTUt5L1fQwQz9ZuNFygpMGSmTD9DIwH0E= Subject key identifier: 35:E1:0C:89:48:96:DD:F9:AB:44:5A:F0:22:F8:D7:01:0B:D3:7D:FA Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B1AD17823C011E47D1F6C0E00 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 394353 IP address blocks: 2001:500:84::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:23:c0:11:e4:7d:1f:6c:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=85c1f365-2777-4941-9aaf-9ed857a976ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1a:0a:c1:48:56:cd:22:40:28:81:65:8e:a5: 52:5d:86:5a:59:6b:41:a2:bc:0d:46:1b:84:80:41: 21:b6:18:ac:a8:51:02:8e:6b:16:b5:ee:c2:4d:e8: fc:70:6e:60:34:a0:45:da:66:da:6a:3d:dc:3f:be: 47:1a:c6:c3:db:1d:67:07:84:f9:ea:1f:5e:83:21: 37:6c:74:5e:96:c3:cb:d7:91:f0:b3:fd:ba:e4:08: d8:ae:09:42:16:a6:fb:2e:3f:5f:84:0b:03:09:f7: 03:7f:12:3c:b0:db:73:48:76:d0:00:ce:63:7e:7f: 59:36:9e:f9:b3:07:9e:05:1d:60:b8:b6:f8:95:3d: fc:ab:83:97:6a:5c:5d:a5:50:69:22:70:db:f7:3f: 49:da:ee:17:7f:e9:8a:e9:1e:c3:64:68:eb:62:21: c2:73:7a:0a:c6:be:57:d1:ac:9a:84:3c:66:4f:e5: 04:ef:b9:85:af:d4:ec:ff:b1:49:98:18:a3:fa:ca: 04:de:9e:f2:53:a1:6f:9f:ac:6d:51:5d:1d:b1:c0: b1:e6:23:66:dc:a2:dc:19:8f:13:80:6c:06:94:da: ae:bc:bb:a7:d8:93:93:26:16:71:c2:a1:75:90:f5: 7d:bf:e9:da:80:88:b4:c9:04:1f:2c:15:92:1d:b5: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:0C:89:48:96:DD:F9:AB:44:5A:F0:22:F8:D7:01:0B:D3:7D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:85:d2:9d:f0:1d:3e:d9:f1:7f:c3:38:aa:a2:02:9e:ad:a5: 57:95:1d:dd:03:87:4a:32:ce:71:b4:84:1d:db:72:77:eb:81: 2b:7d:aa:b0:43:a9:83:d1:2b:56:54:e8:0a:63:37:5c:f2:3a: 30:32:56:e8:cc:99:41:75:98:52:61:63:8d:3b:cd:91:25:31: 4e:b4:5a:40:af:58:ff:e1:b1:a1:e7:7c:05:c7:ac:d7:ce:5f: 3c:87:b4:69:a0:c7:3b:eb:96:5f:b4:eb:37:4e:27:68:41:3d: ea:af:dc:f9:ab:eb:10:7d:27:f9:ee:2a:52:4b:20:49:5b:f4: 42:2c:55:12:7e:90:3b:7a:21:be:50:0b:e6:de:ce:9d:43:3c: 15:2a:a6:b1:6a:e4:bf:9e:36:b7:01:6a:5f:29:e9:e2:62:bf: 95:7c:1f:13:8a:0c:70:30:44:4e:e2:d2:ba:08:3e:6d:72:94: 77:60:88:46:4d:c9:1b:5b:b6:ab:2b:4a:30:8a:79:b6:6f:80: 8e:1f:1f:b7:15:a4:67:d8:48:ec:e8:e9:7f:3a:c1:ec:12:cf: 7c:6b:e8:1e:a8:99:f9:46:4b:70:3e:f0:0c:f2:fe:94:fb:e3: 00:e7:a7:b9:62:53:68:f0:ff:95:80:62:f6:64:93:9c:ed:c0: db:ec:6c:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0XgjwBHkfR9sDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODVjMWYzNjUtMjc3Ny00OTQxLTlhYWYtOWVkODU3YTk3NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRoKwUhWzSJAKIFljqVSXYZaWWtBorwNRhuE gEEhthisqFECjmsWte7CTej8cG5gNKBF2mbaaj3cP75HGsbD2x1nB4T56h9egyE3 bHRelsPL15Hws/265AjYrglCFqb7Lj9fhAsDCfcDfxI8sNtzSHbQAM5jfn9ZNp75 sweeBR1guLb4lT38q4OXalxdpVBpInDb9z9J2u4Xf+mK6R7DZGjrYiHCc3oKxr5X 0ayahDxmT+UE77mFr9Ts/7FJmBij+soE3p7yU6Fvn6xtUV0dscCx5iNm3KLcGY8T gGwGlNquvLun2JOTJhZxwqF1kPV9v+nagIi0yQQfLBWSHbUe1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXhDIlIlt35q0Ra8CL41wEL0336MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZGM2MDZmNzUtODNhNC0z ZjY0LWFlN2UtNWMxZjdjMGQzNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqF0p3wHT7Z8X/DOKqiAp6tpVeVHd0Dh0oyznG0hB3bcnfrgSt9 qrBDqYPRK1ZU6ApjN1zyOjAyVujMmUF1mFJhY407zZElMU60WkCvWP/hsaHnfAXH rNfOXzyHtGmgxzvrll+06zdOJ2hBPeqv3Pmr6xB9J/nuKlJLIElb9EIsVRJ+kDt6 Ib5QC+bezp1DPBUqprFq5L+eNrcBal8p6eJiv5V8HxOKDHAwRE7i0roIPm1ylHdg iEZNyRtbtqsrSjCKebZvgI4fH7cVpGfYSOzo6X86wewSz3xr6B6omflGS3A+8Azy /pT74wDnp7liU2jw/5WAYvZkk5ztwNvsbPE= -----END CERTIFICATE-----Generated at Tue Oct 28 23:41:50 2025 by rpki-client