$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb4b2c6-2c42-3734-b3b9-cc48b1a5316e.roa File: 8fb4b2c6-2c42-3734-b3b9-cc48b1a5316e.roa (raw, json) Hash identifier: Z0KbFBkHRYnV5VZVPJNqeSFzt9nxwGbz27bvpnTRRaU= Subject key identifier: 29:09:BD:11:B4:0E:E0:3B:94:C1:0E:73:97:8C:6B:2E:D1:4D:E0:F6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B434C82B824E4022744C4D410 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb4b2c6-2c42-3734-b3b9-cc48b1a5316e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 6167 IP address blocks: 2600:100f:b1a0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:82:b8:24:e4:02:27:44:c4:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=4dd66c52-99c3-463e-80a7-1563480eb88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:ea:1a:1b:6d:ee:50:1e:f5:9a:6c:a1:ee: 7f:57:d1:2e:7e:df:cd:a4:d9:b0:d8:e3:b1:5f:b2: d0:08:e8:d4:17:29:4a:40:43:15:30:e9:ec:6f:e5: 94:9e:06:b1:06:d2:b8:f3:df:55:e5:3e:00:cf:ed: db:13:56:42:cb:9b:83:f8:94:b7:71:0c:d3:52:14: 11:f4:77:b0:65:4d:a4:ca:3e:54:ed:d0:b6:31:17: 3a:d1:4b:75:96:73:40:7c:84:8b:7d:ab:42:4d:42: f9:a8:d0:8d:d6:58:39:28:a8:ae:b7:ea:1b:17:04: 85:93:b2:1c:dd:73:50:72:6d:88:dd:3d:d6:06:47: b3:8b:d1:05:bc:37:c2:fb:c0:c9:3d:0b:85:3e:02: f7:76:dd:4f:e9:a3:da:56:be:5d:52:52:c1:6a:af: 65:bf:b0:a5:20:01:e5:73:53:ad:cd:eb:2a:b9:c5: a3:7a:82:c8:41:96:60:23:a3:09:4a:39:0a:d6:0d: f6:a2:61:e2:c3:c1:dd:5a:4f:20:87:4b:96:16:b2: 0a:6d:26:b3:7a:a8:a2:13:9f:88:df:e3:ec:55:20: 0a:7f:81:15:be:3b:6a:f7:c1:0e:8c:6b:94:f5:c4: 6c:76:03:03:b6:50:9d:5a:af:de:b0:1a:1f:46:c2: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:BD:11:B4:0E:E0:3B:94:C1:0E:73:97:8C:6B:2E:D1:4D:E0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb4b2c6-2c42-3734-b3b9-cc48b1a5316e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100f:b1a0::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:54:d2:a4:8f:c3:c3:57:aa:8f:88:3e:fb:71:08:9b:8a:cc: c1:79:46:43:5e:55:23:fb:0f:fb:2a:6f:dd:e1:79:f1:e6:e8: 55:9a:a1:9d:41:00:27:cf:c8:2b:41:6f:ee:6d:f7:a8:dd:cb: fe:0e:8d:ab:06:4c:62:23:db:57:5e:66:77:b1:8a:62:de:6d: fe:48:e4:02:65:40:e5:1f:03:81:be:62:dc:c2:79:e7:de:b8: 21:19:d6:27:48:bf:17:48:a0:e6:6c:34:98:29:f4:33:27:9f: aa:c4:12:31:c3:85:06:e2:d5:44:8d:a1:b4:0f:83:91:6f:a9: 2c:8c:37:ce:07:28:8f:1c:79:65:ff:49:68:c6:d9:62:9a:6e: b4:44:87:bd:a6:d7:ea:4d:39:85:7f:ca:2f:0e:e1:34:4e:6c: 47:e4:62:20:3f:36:4b:20:98:02:9a:d0:d3:3f:5e:48:20:a5: 65:1b:48:fc:17:f0:fb:48:c9:b3:90:a5:0b:d9:d6:08:01:28: e5:92:b7:b8:ac:0e:30:6d:2f:d0:f2:0d:6b:16:0d:6e:0c:ed: 33:4b:0b:9e:bb:06:a8:74:7d:e0:b0:46:c9:5c:9a:0c:6d:5f: dd:42:cc:49:51:01:be:32:25:bd:55:7b:9b:ad:64:f5:58:92: cb:58:d9:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTIK4JOQCJ0TE1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NGRkNjZjNTItOTljMy00NjNlLTgwYTctMTU2MzQ4MGViODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsnqGhtt7lAe9Zpsoe5/V9Euft/NpNmw2OOx X7LQCOjUFylKQEMVMOnsb+WUngaxBtK4899V5T4Az+3bE1ZCy5uD+JS3cQzTUhQR 9HewZU2kyj5U7dC2MRc60Ut1lnNAfISLfatCTUL5qNCN1lg5KKiut+obFwSFk7Ic 3XNQcm2I3T3WBkezi9EFvDfC+8DJPQuFPgL3dt1P6aPaVr5dUlLBaq9lv7ClIAHl c1OtzesqucWjeoLIQZZgI6MJSjkK1g32omHiw8HdWk8gh0uWFrIKbSazeqiiE5+I 3+PsVSAKf4EVvjtq98EOjGuU9cRsdgMDtlCdWq/esBofRsLmSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkJvRG0DuA7lMEOc5eMay7RTeD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZiNGIyYzYtMmM0Mi0z NzM0LWIzYjktY2M0OGIxYTUzMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQD7Gg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpU0qSPw8NXqo+IPvtxCJuKzMF5RkNeVSP7D/sqb93hefHm6FWa oZ1BACfPyCtBb+5t96jdy/4OjasGTGIj21deZneximLebf5I5AJlQOUfA4G+YtzC eefeuCEZ1idIvxdIoOZsNJgp9DMnn6rEEjHDhQbi1USNobQPg5FvqSyMN84HKI8c eWX/SWjG2WKabrREh72m1+pNOYV/yi8O4TRObEfkYiA/NksgmAKa0NM/XkggpWUb SPwX8PtIybOQpQvZ1ggBKOWSt7isDjBtL9DyDWsWDW4M7TNLC567Bqh0feCwRslc mgxtX91CzElRAb4yJb1Ve5utZPVYkstY2QY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:26 2025 by rpki-client