$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa File: e2967edf-17a9-32bb-8570-be2bca3444ee.roa (raw, json) Hash identifier: C9xdBeSiYVMRciKQve8eVmnhweZ3VaWi7gWVIm8FuZ8= Subject key identifier: 4B:30:30:C2:73:34:9D:7C:A4:5A:06:91:B6:84:2E:8D:4E:53:B4:80 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B0FA6BD5FA71C0556092EA800 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 394353 IP address blocks: 2001:500:205:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bd:5f:a7:1c:05:56:09:2e:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=f09c3be0-1f7f-4a97-aa89-e6887b77fb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:e5:9c:9a:77:b5:d9:5b:05:4f:19:4b:86: 25:a3:c7:79:8b:ca:9c:48:fe:6d:88:c1:26:db:85: 0f:8d:cf:31:57:e9:5e:19:5d:4c:e8:69:15:ac:55: 57:49:14:10:4a:ae:75:8f:c3:c0:e0:08:8d:a4:34: 07:46:07:e6:2a:a2:a6:32:de:3c:d4:ff:0e:4a:16: 1a:b0:d8:97:d3:8c:32:e1:b0:53:64:29:8d:c2:c6: da:27:bb:e5:14:c1:45:8c:d9:d9:81:b7:f4:18:59: c6:4c:eb:a6:5a:24:d8:84:f7:2e:0d:ec:57:97:91: 5f:94:1f:95:32:34:76:08:00:1d:e2:23:c4:0e:9a: e6:28:cc:0a:0d:c1:68:70:51:56:0e:fe:20:76:e7: 71:af:a4:00:98:b0:b4:f6:1c:09:f1:20:a5:e8:d3: 81:7b:39:db:5b:5e:c4:fa:3d:11:e1:64:77:42:6b: 13:9a:4e:1d:c8:3b:b2:af:e1:ac:78:e8:3d:55:b5: 0a:ef:69:57:d4:ea:15:92:4e:a2:33:03:db:bf:76: eb:45:75:be:97:39:97:35:85:44:5e:dc:2b:1c:92: 91:0a:83:d2:e5:b9:87:cd:f4:3b:04:90:8c:90:fa: 5c:55:ac:68:a1:71:66:b9:ba:9d:5f:b3:c4:97:63: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:30:30:C2:73:34:9D:7C:A4:5A:06:91:B6:84:2E:8D:4E:53:B4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:205:8000::/49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a1:88:a4:54:22:cf:72:45:dd:b1:3b:26:80:1d:22:5a:35: aa:f0:ac:c8:3e:78:a0:f2:85:b7:15:88:d2:aa:83:f5:73:5c: b3:fe:94:6c:31:14:0e:8a:db:ce:20:a5:92:6d:07:99:1a:27: 04:57:36:e9:22:b8:18:e5:7d:b1:83:6b:01:4a:d4:99:0b:95: ef:c1:76:91:6b:2d:49:ab:2f:b8:eb:6c:98:f0:2c:c4:1f:4c: 05:00:5b:2f:3f:70:ff:47:79:1a:d8:f2:3e:03:c2:b4:2f:4c: 27:01:d6:a4:05:c2:24:a2:14:4b:7b:95:a9:7a:e5:3a:c3:1c: c0:54:a1:34:79:c0:ac:f8:41:dc:2a:aa:46:6c:4e:16:d7:d9: 0e:f4:73:70:2f:c9:67:ab:a8:62:a6:de:9f:61:ab:31:c5:32: fe:e4:e1:50:d7:9e:3b:33:be:16:ae:3b:87:95:9c:eb:fe:4b: 35:18:f7:36:ed:f4:2d:7a:af:7a:2f:58:34:02:8c:ae:c5:6f: 03:a8:57:6c:87:3d:aa:c7:e0:fc:7f:e5:47:9a:e6:72:fa:24: 84:04:ed:84:e7:02:dd:25:9c:4c:b1:37:dc:72:5f:88:37:41: 84:a0:53:25:4c:61:a4:6e:15:47:11:88:c9:fc:63:50:e5:18: ef:0e:b3:ef -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEsPpr1fpxwFVgkuqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk ZjA5YzNiZTAtMWY3Zi00YTk3LWFhODktZTY4ODdiNzdmYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMblnJp3tdlbBU8ZS4Ylo8d5i8qcSP5tiMEm 24UPjc8xV+leGV1M6GkVrFVXSRQQSq51j8PA4AiNpDQHRgfmKqKmMt481P8OShYa sNiX04wy4bBTZCmNwsbaJ7vlFMFFjNnZgbf0GFnGTOumWiTYhPcuDexXl5FflB+V MjR2CAAd4iPEDprmKMwKDcFocFFWDv4gdudxr6QAmLC09hwJ8SCl6NOBeznbW17E +j0R4WR3QmsTmk4dyDuyr+GseOg9VbUK72lX1OoVkk6iMwPbv3brRXW+lzmXNYVE XtwrHJKRCoPS5bmHzfQ7BJCMkPpcVaxooXFmubqdX7PEl2MaHwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFEswMMJzNJ18pFoGkbaELo1OU7SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZTI5NjdlZGYtMTdhOS0z MmJiLTg1NzAtYmUyYmNhMzQ0NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgHIAEFAAIF gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAcoYikVCLPckXdsTsmgB0iWjWq8KzIPnig8oW3FYjSqoP1c1yz /pRsMRQOitvOIKWSbQeZGicEVzbpIrgY5X2xg2sBStSZC5XvwXaRay1Jqy+462yY 8CzEH0wFAFsvP3D/R3ka2PI+A8K0L0wnAdakBcIkohRLe5WpeuU6wxzAVKE0ecCs +EHcKqpGbE4W19kO9HNwL8lnq6hipt6fYasxxTL+5OFQ1547M74WrjuHlZzr/ks1 GPc27fQteq96L1g0AoyuxW8DqFdshz2qx+D8f+VHmuZy+iSEBO2E5wLdJZxMsTfc cl+IN0GEoFMlTGGkbhVHEYjJ/GNQ5RjvDrPv -----END CERTIFICATE-----Generated at Tue Oct 28 23:41:48 2025 by rpki-client