$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/571ce384-5a68-30f4-bd30-3690a73f8794.roa File: 571ce384-5a68-30f4-bd30-3690a73f8794.roa (raw, json) Hash identifier: w2q56pwCUsfexhL/mIMSxTJRdU3TEfN1jt21W+7sRCI= Subject key identifier: 95:71:A1:64:FA:50:E6:C5:55:AD:0B:6D:28:DC:AB:D2:83:7D:C3:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B76F28AFB0D5EBBFD267D96E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/571ce384-5a68-30f4-bd30-3690a73f8794.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 2600:1008:b238::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8a:fb:0d:5e:bb:fd:26:7d:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3cb2cd63-cb02-47c6-91e6-726dcc95fd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:db:b3:8e:37:e0:3b:c7:f8:12:11:ca:7f: 09:55:ec:c0:33:c6:8a:e5:ee:ad:a7:af:5f:27:d0: ef:d6:b3:43:b4:7c:35:61:3b:e7:c0:f1:19:4e:15: 1b:6d:66:82:2c:89:91:30:d9:46:65:ea:ea:c8:4b: 30:4b:e0:ad:56:b0:97:b3:70:bc:aa:ed:88:f2:a0: a4:92:22:40:a6:39:b1:b2:e9:7d:e6:54:96:e0:c3: 95:18:10:c1:40:74:6b:b2:f2:f6:6f:58:dc:eb:19: 49:ab:9d:bb:0b:c7:a3:06:fe:e4:a7:d6:d3:cc:19: 05:7c:c7:9e:16:84:01:10:6d:51:1e:e0:ad:d4:fb: fb:e4:97:a3:1a:11:d5:79:32:e1:69:ba:1a:1a:c6: 60:22:a5:5c:c1:fc:d7:04:38:46:68:51:5c:d2:bb: 4c:da:e0:05:bc:3b:98:9a:38:2a:ad:e2:de:8f:d2: bb:7f:c9:12:36:b5:bc:7a:ca:a1:33:4e:c8:52:76: 57:e1:f7:4d:5f:28:89:63:c4:bc:d9:64:e0:81:ad: ca:d6:26:21:94:60:18:84:e1:97:55:af:1f:ca:ef: 82:d7:c5:68:19:17:99:18:92:91:99:3e:91:18:f0: 32:53:76:38:f1:04:b3:a7:e8:f5:46:4e:9a:32:7b: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:71:A1:64:FA:50:E6:C5:55:AD:0B:6D:28:DC:AB:D2:83:7D:C3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/571ce384-5a68-30f4-bd30-3690a73f8794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b238::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1b:7b:65:c9:b4:2f:23:bc:47:34:79:d5:70:09:0e:fc:10: 82:be:64:e0:a5:97:22:44:7e:48:9e:86:94:48:50:3f:a9:2f: d2:2f:bd:4c:36:8a:31:88:5e:a4:ed:6c:6f:0b:60:9f:6c:ed: 17:28:d6:28:cc:b4:99:7e:78:cc:e4:37:36:73:10:b7:30:5f: 92:7c:79:12:e7:4e:e2:ba:d7:75:2a:6d:eb:be:14:c9:7d:29: 43:56:34:ae:ce:18:69:26:0e:b4:26:62:6e:a6:c7:13:78:da: 87:31:7f:0b:80:37:3a:06:23:1d:c4:fb:58:f0:45:06:7e:89: b0:ee:c5:09:74:0b:85:54:ae:19:b3:b6:c6:89:f7:72:70:b0: fb:3d:2e:f6:ac:50:67:0c:4d:c7:a6:91:86:b0:0e:4f:1f:62: b5:b7:65:dd:b8:b7:fa:be:4e:71:bf:b9:e6:0c:3f:6c:6e:5d: 0f:de:dd:91:8b:65:6a:22:ad:41:c4:5b:a8:34:6f:aa:b6:a4: 4c:98:4f:67:2a:fe:ef:01:0d:ca:0e:42:bb:cd:a7:ac:b8:c9: 89:58:2d:54:ce:b7:50:4e:b2:c7:0c:56:e4:37:43:05:df:a9: e7:29:b4:40:9d:cc:11:7a:44:cb:32:f6:c2:92:85:ce:21:dd: 78:6e:9d:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28or7DV67/SZ9luAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2NiMmNkNjMtY2IwMi00N2M2LTkxZTYtNzI2ZGNjOTVmZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSPbs4434DvH+BIRyn8JVezAM8aK5e6tp69f J9Dv1rNDtHw1YTvnwPEZThUbbWaCLImRMNlGZerqyEswS+CtVrCXs3C8qu2I8qCk kiJApjmxsul95lSW4MOVGBDBQHRrsvL2b1jc6xlJq527C8ejBv7kp9bTzBkFfMee FoQBEG1RHuCt1Pv75JejGhHVeTLhaboaGsZgIqVcwfzXBDhGaFFc0rtM2uAFvDuY mjgqreLej9K7f8kSNrW8esqhM07IUnZX4fdNXyiJY8S82WTgga3K1iYhlGAYhOGX Va8fyu+C18VoGReZGJKRmT6RGPAyU3Y48QSzp+j1Rk6aMnuDAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVxoWT6UObFVa0LbSjcq9KDfcOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTcxY2UzODQtNWE2OC0z MGY0LWJkMzAtMzY5MGE3M2Y4Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCLI4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEbe2XJtC8jvEc0edVwCQ78EIK+ZOCllyJEfkiehpRIUD+pL9Iv vUw2ijGIXqTtbG8LYJ9s7Rco1ijMtJl+eMzkNzZzELcwX5J8eRLnTuK613Uqbeu+ FMl9KUNWNK7OGGkmDrQmYm6mxxN42ocxfwuANzoGIx3E+1jwRQZ+ibDuxQl0C4VU rhmztsaJ93JwsPs9LvasUGcMTcemkYawDk8fYrW3Zd24t/q+TnG/ueYMP2xuXQ/e 3ZGLZWoirUHEW6g0b6q2pEyYT2cq/u8BDcoOQrvNp6y4yYlYLVTOt1BOsscMVuQ3 QwXfqecptECdzBF6RMsy9sKShc4h3XhunbE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:10:00 2025 by rpki-client