$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa File: 499d94e6-2b93-3e9d-a331-08ecc036792f.roa (raw, json) Hash identifier: oGgKr0Om/ENnF0/8Tebq/uH4CnvYw3qVEpP9wYatmjo= Subject key identifier: 76:47:15:BD:EA:A5:9A:46:FF:A5:31:59:A6:CD:91:91:B3:61:E3:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36EA6E27F31566245369A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1005:a022::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ea:6e:27:f3:15:66:24:53:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=60f0c4c2-57c6-44f2-838f-94b842467f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:91:32:b8:af:6a:ba:c2:29:01:3a:70:b2: f5:3a:46:ad:98:0e:5c:2a:ec:83:b2:95:c5:d4:46: 93:c5:1a:19:a3:e4:13:53:35:46:2a:bb:01:95:94: 35:21:4f:d0:6e:1e:bd:42:06:c4:8d:23:3c:44:4f: 9e:b5:38:01:af:92:0c:e8:0e:7c:4c:d5:f3:22:56: 08:68:c0:54:eb:4c:aa:e1:e0:6b:a9:4a:61:ed:6c: a3:c6:db:a5:dc:f3:40:55:40:5c:90:19:fb:e1:5e: c6:7b:4b:e9:3d:d1:fe:9b:c6:f7:07:d0:c3:88:22: 42:a3:3f:b8:2c:64:dd:50:0c:65:7b:c0:59:76:28: 4b:32:2b:e3:77:2a:b2:49:40:49:b0:5c:83:81:80: 8d:7e:53:c2:e7:d3:36:73:ce:92:27:c6:ea:0b:7c: 65:fb:82:72:e2:30:55:d4:dd:89:f3:ec:5a:78:4e: 54:ee:3c:86:30:95:f4:f3:a9:e7:8b:67:9e:93:09: 59:89:fc:59:39:ed:22:a4:79:95:5d:ea:95:33:04: e9:b4:36:77:3c:9e:79:65:b9:9e:14:a0:62:94:73: 41:88:5e:75:8d:91:93:63:35:24:17:27:b0:a2:7e: ee:39:93:d3:07:98:b8:a2:74:a2:bd:61:63:59:19: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:47:15:BD:EA:A5:9A:46:FF:A5:31:59:A6:CD:91:91:B3:61:E3:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1005:a022::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8e:7c:b7:5d:8b:b4:99:75:b7:f0:38:81:b2:6e:dc:4a:0e: 16:15:7b:bf:9c:b3:7e:00:da:ac:06:5a:1f:15:6b:06:cc:b8: fe:3e:be:8d:e6:97:8b:c2:2f:4e:15:31:4a:74:a2:79:c2:fb: 27:de:97:4c:a2:5b:72:cf:4a:b0:19:e6:79:93:f8:d5:f3:37: e4:6f:e7:87:c3:67:a9:32:90:72:21:e0:31:08:ee:66:81:a8: ad:ef:25:70:dc:bd:ee:78:4f:77:7e:68:20:df:89:b6:2b:c0: ad:20:36:37:31:bd:d6:47:9e:0e:c0:0a:34:2c:7d:c6:0b:27: 0e:a9:95:be:dd:79:88:28:d5:97:fe:f8:37:ef:03:dc:be:56: 66:a8:8a:3b:00:de:5d:34:42:a2:0d:3a:b0:fe:c9:97:c9:67: 97:f9:89:35:41:72:6b:c3:7d:77:4f:50:d8:05:e6:72:d7:de: a2:44:da:f3:e8:6c:2b:24:0c:fd:4a:9b:ff:02:05:cd:b6:89: 33:69:a9:5c:14:96:72:1c:76:75:47:3e:a2:38:7b:3d:29:fa: 87:48:34:12:a0:51:b9:03:2a:11:f5:b4:f6:65:c3:27:19:92: 67:1f:27:f3:63:ed:56:f8:75:e0:9a:2b:b7:a6:4c:5d:c2:8d: 66:6c:8b:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNupuJ/MVZiRTaaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjBmMGM0YzItNTdjNi00NGYyLTgzOGYtOTRiODQyNDY3Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRSRMrivarrCKQE6cLL1OkatmA5cKuyDspXF 1EaTxRoZo+QTUzVGKrsBlZQ1IU/Qbh69QgbEjSM8RE+etTgBr5IM6A58TNXzIlYI aMBU60yq4eBrqUph7Wyjxtul3PNAVUBckBn74V7Ge0vpPdH+m8b3B9DDiCJCoz+4 LGTdUAxle8BZdihLMivjdyqySUBJsFyDgYCNflPC59M2c86SJ8bqC3xl+4Jy4jBV 1N2J8+xaeE5U7jyGMJX086nni2eekwlZifxZOe0ipHmVXeqVMwTptDZ3PJ55Zbme FKBilHNBiF51jZGTYzUkFyewon7uOZPTB5i4onSivWFjWRndKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZHFb3qpZpG/6UxWabNkZGzYeNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk5ZDk0ZTYtMmI5My0z ZTlkLWEzMzEtMDhlY2MwMzY3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBaAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOOfLddi7SZdbfwOIGybtxKDhYVe7+cs34A2qwGWh8VawbMuP4+ vo3ml4vCL04VMUp0onnC+yfel0yiW3LPSrAZ5nmT+NXzN+Rv54fDZ6kykHIh4DEI 7maBqK3vJXDcve54T3d+aCDfibYrwK0gNjcxvdZHng7ACjQsfcYLJw6plb7deYgo 1Zf++DfvA9y+VmaoijsA3l00QqINOrD+yZfJZ5f5iTVBcmvDfXdPUNgF5nLX3qJE 2vPobCskDP1Km/8CBc22iTNpqVwUlnIcdnVHPqI4ez0p+odINBKgUbkDKhH1tPZl wycZkmcfJ/Nj7Vb4deCaK7emTF3CjWZsi30= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:17 2025 by rpki-client