$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa File: 448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json) Hash identifier: cJbnImVj5jT3+vsJ6NBwkQsLl+dk/rsE53TMtafTqr4= Subject key identifier: 50:D0:86:FC:0F:6B:DE:1B:88:A2:57:DB:4A:2D:38:76:0B:2C:15:7E Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584EA0152F33E65163E7897DA6E0 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 394353 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:2f:33:e6:51:63:e7:89:7d:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=d67f5801-0347-4cb1-9dfa-a94db11687e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:1b:43:38:33:3c:a6:4e:a3:df:fa:38:ac: 38:0d:5f:2c:75:b0:f2:60:ea:8d:82:a1:3f:50:c8: dc:8a:2b:50:96:49:1d:f1:2f:d7:58:cd:e6:a3:7d: e6:5d:3c:ac:10:25:42:c4:ab:5a:a9:f2:31:f3:9c: eb:2e:63:d0:f9:6b:f9:d3:17:30:c7:9d:49:81:a1: 64:75:65:72:bb:f2:99:f0:72:02:43:a9:4e:67:ef: 67:9b:d0:1f:6b:d2:41:db:63:88:51:d6:41:d1:65: 69:0a:9e:68:51:2d:1c:37:e1:fb:62:92:94:fd:92: 00:4e:18:d5:4e:91:8a:7e:81:51:a1:b6:f1:ca:d5: e8:06:50:b8:a0:a5:69:27:ab:89:ab:d1:15:c3:5a: 57:a8:e4:1b:09:e9:31:23:a3:0a:44:cb:ac:2a:6a: b8:f8:07:0e:97:31:1a:19:6c:7d:3e:45:f0:f7:85: 89:f6:7a:08:13:a8:44:89:a4:fd:66:cc:d0:e4:ce: d8:55:32:0e:1c:2e:62:ca:15:4e:41:c4:ed:54:70: dd:3e:d2:39:94:76:65:19:30:4c:8e:e7:0e:ee:ed: 68:29:fd:e2:33:a7:16:de:56:b5:06:29:fa:82:b1: e7:e4:ec:63:a9:f9:68:28:80:f3:95:1c:b2:fa:dd: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:86:FC:0F:6B:DE:1B:88:A2:57:DB:4A:2D:38:76:0B:2C:15:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:cb:7c:53:b2:33:bf:02:db:04:38:93:2c:57:f7:ba:38:5e: ab:68:c0:71:6b:b7:55:79:33:cb:da:0d:0a:9c:dd:01:c9:bd: d1:21:ed:23:ab:21:14:c8:32:f6:43:a5:de:b2:11:aa:f3:20: 15:da:68:0a:3c:92:2b:f3:f2:a0:df:4a:fe:81:f7:bc:4b:f3: 5d:11:d1:d5:a1:7f:2b:28:eb:66:f8:42:32:42:91:cb:fa:2e: 36:1b:8d:63:1d:79:dc:f5:23:26:b1:11:2e:01:93:23:ed:e0: dd:3e:f9:d8:61:a9:85:64:28:5f:4d:a3:cb:19:4c:3a:fc:e4: 0f:a2:47:cc:14:8f:7f:02:3d:45:d4:28:37:78:be:5f:52:5f: d1:a8:01:d3:99:02:c7:8d:80:a3:5e:91:3d:ab:9f:d4:6a:ad: ae:bb:0a:59:06:0f:91:dc:57:58:b4:83:8f:05:73:84:7f:b2: 98:c6:3f:44:f1:84:27:07:ae:ec:cc:34:84:4f:27:ba:84:cd: 3a:60:a7:37:8b:56:89:f8:c7:dc:0f:d4:32:cc:5f:59:5a:16: 8d:f8:41:d4:28:db:9e:6c:1c:87:64:86:bc:04:8b:e9:a3:28: a2:02:0e:64:52:d2:45:ba:a9:72:c9:7a:9b:dd:f1:9e:9b:1c: 2b:87:a6:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFS8z5lFj54l9puAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDY3ZjU4MDEtMDM0Ny00Y2IxLTlkZmEtYTk0ZGIxMTY4N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4kbQzgzPKZOo9/6OKw4DV8sdbDyYOqNgqE/ UMjciitQlkkd8S/XWM3mo33mXTysECVCxKtaqfIx85zrLmPQ+Wv50xcwx51JgaFk dWVyu/KZ8HICQ6lOZ+9nm9Afa9JB22OIUdZB0WVpCp5oUS0cN+H7YpKU/ZIAThjV TpGKfoFRobbxytXoBlC4oKVpJ6uJq9EVw1pXqOQbCekxI6MKRMusKmq4+AcOlzEa GWx9PkXw94WJ9noIE6hEiaT9ZszQ5M7YVTIOHC5iyhVOQcTtVHDdPtI5lHZlGTBM jucO7u1oKf3iM6cW3la1Bin6grHn5OxjqfloKIDzlRyy+t2LmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDQhvwPa94biKJX20otOHYLLBV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKPLfFOyM78C2wQ4kyxX97o4XqtowHFrt1V5M8vaDQqc3QHJvdEh 7SOrIRTIMvZDpd6yEarzIBXaaAo8kivz8qDfSv6B97xL810R0dWhfyso62b4QjJC kcv6LjYbjWMdedz1IyaxES4BkyPt4N0++dhhqYVkKF9No8sZTDr85A+iR8wUj38C PUXUKDd4vl9SX9GoAdOZAseNgKNekT2rn9Rqra67ClkGD5HcV1i0g48Fc4R/spjG P0TxhCcHruzMNIRPJ7qEzTpgpzeLVon4x9wP1DLMX1laFo34QdQo255sHIdkhrwE i+mjKKICDmRS0kW6qXLJepvd8Z6bHCuHpjg= -----END CERTIFICATE-----Generated at Wed Jul 29 12:28:09 2026 by rpki-client