$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47c20852-ec7c-3bc0-b42a-8e48bb3c28d1.roa File: 47c20852-ec7c-3bc0-b42a-8e48bb3c28d1.roa (raw, json) Hash identifier: 8ErFJFTryZ5gYIzxWm+W/ReGS14NyPUAkQr2eoa3Tvg= Subject key identifier: 37:9E:B2:37:FD:F5:A6:14:66:25:9A:38:B3:82:F2:81:C9:A8:57:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B6631F91034529EC40E125C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47c20852-ec7c-3bc0-b42a-8e48bb3c28d1.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 6167 IP address blocks: 2600:1010:be04::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f9:10:34:52:9e:c4:0e:12:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=ce76fdb0-4079-4dae-b365-101d7977b640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:76:e5:1b:da:87:7f:da:58:6e:34:c7:a2: f5:28:a9:77:79:3f:5a:af:1e:12:e2:4c:31:1f:59: 28:fe:09:8d:97:92:dc:d5:1f:73:c6:86:99:97:2f: c6:70:9c:72:7a:6d:5e:31:fb:7b:85:f4:14:62:62: 9c:10:e1:f9:e5:02:f1:98:9a:26:08:11:46:34:16: 12:f8:b2:00:59:18:a3:e3:87:6b:58:5e:4c:e7:9f: c0:bb:23:f0:02:b2:8f:dc:f5:7e:77:f6:3c:87:74: 0c:c0:da:a5:ce:23:e6:ae:55:45:02:05:9a:a8:1a: 8c:1e:05:67:dc:d6:26:cc:51:9e:d1:03:77:a2:9e: 68:41:8c:97:f4:70:e1:8f:4f:59:85:70:10:6b:b9: 92:e4:0d:a8:96:b2:1e:46:46:39:ae:4e:90:07:22: 3c:9c:c8:8e:3b:88:ea:9d:49:e9:5a:ba:a7:73:33: aa:38:97:42:16:67:a7:5e:d9:c5:5f:aa:f1:7b:8a: 6e:b1:d9:90:bc:db:8c:30:1b:10:9c:61:0b:bb:06: b7:77:0f:55:2e:df:54:de:2e:3a:89:3c:25:6b:a3: e2:89:ed:ad:b3:be:a4:12:87:92:82:0d:32:37:ac: da:0a:5a:cf:ec:fb:57:36:71:a3:10:54:3a:e0:0a: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:B2:37:FD:F5:A6:14:66:25:9A:38:B3:82:F2:81:C9:A8:57:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47c20852-ec7c-3bc0-b42a-8e48bb3c28d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1010:be04::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:42:03:1a:37:46:dd:2c:43:2d:6c:57:79:82:c5:85:c7:7c: 2b:c4:da:60:25:fb:25:8b:62:cf:af:41:d1:b0:cf:e1:b4:1e: f2:bb:4b:1e:b9:c3:bc:2b:40:dd:3f:8d:18:b1:82:e2:8f:f5: 0d:a6:92:28:0e:2f:16:d2:54:15:d0:c0:82:a9:f6:71:9b:fa: 9d:e1:87:eb:94:55:7b:62:8b:75:83:d7:6f:ba:cf:4c:ed:0b: b8:6c:cd:84:4a:26:ee:9c:00:89:87:96:4d:3f:ae:ad:44:15: 84:e9:55:2e:2a:55:3e:df:45:24:1e:3b:e1:75:3b:16:9d:18: 70:90:1b:fe:04:95:c2:b0:2a:f2:9c:4c:ab:20:91:ee:6a:62: 68:c4:b2:56:f1:0f:6a:f1:15:5b:b2:a6:a9:1c:fd:65:9b:9a: 43:bf:b7:73:ca:3a:34:4a:9a:46:55:97:bc:1a:a0:0c:a2:d3: 0d:9a:94:33:69:bc:a2:69:15:6b:76:8c:e6:be:6e:0f:b4:eb: d0:0c:f1:d3:ed:b3:f9:8e:6d:fb:2d:1b:a5:c4:1c:4e:5d:01: de:d9:56:32:01:b2:f9:ec:8e:b2:45:d1:81:45:6b:bc:19:20: e3:a9:34:56:ce:03:91:d8:69:00:b2:53:54:33:41:8e:b5:5f: 6f:3a:67:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMfkQNFKexA4SXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2U3NmZkYjAtNDA3OS00ZGFlLWIzNjUtMTAxZDc5NzdiNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTV25Rvah3/aWG40x6L1KKl3eT9arx4S4kwx H1ko/gmNl5Lc1R9zxoaZly/GcJxyem1eMft7hfQUYmKcEOH55QLxmJomCBFGNBYS +LIAWRij44drWF5M55/AuyPwArKP3PV+d/Y8h3QMwNqlziPmrlVFAgWaqBqMHgVn 3NYmzFGe0QN3op5oQYyX9HDhj09ZhXAQa7mS5A2olrIeRkY5rk6QByI8nMiOO4jq nUnpWrqnczOqOJdCFmenXtnFX6rxe4pusdmQvNuMMBsQnGELuwa3dw9VLt9U3i46 iTwla6Piie2ts76kEoeSgg0yN6zaClrP7PtXNnGjEFQ64ApQNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDeesjf99aYUZiWaOLOC8oHJqFdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDdjMjA4NTItZWM3Yy0z YmMwLWI0MmEtOGU0OGJiM2MyOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQEL4E MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVCAxo3Rt0sQy1sV3mCxYXHfCvE2mAl+yWLYs+vQdGwz+G0HvK7 Sx65w7wrQN0/jRixguKP9Q2mkigOLxbSVBXQwIKp9nGb+p3hh+uUVXtii3WD12+6 z0ztC7hszYRKJu6cAImHlk0/rq1EFYTpVS4qVT7fRSQeO+F1OxadGHCQG/4ElcKw KvKcTKsgke5qYmjEslbxD2rxFVuypqkc/WWbmkO/t3PKOjRKmkZVl7waoAyi0w2a lDNpvKJpFWt2jOa+bg+069AM8dPts/mObfstG6XEHE5dAd7ZVjIBsvnsjrJF0YFF a7wZIOOpNFbOA5HYaQCyU1QzQY61X286Z80= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:44 2025 by rpki-client