$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa File: 952c7172-2e65-30f3-9af4-b9be330840a2.roa (raw, json) Hash identifier: Rjh61fxmBaLDEkZXU9jYCW/33vSWEBNoy1iB3KK7V1s= Subject key identifier: 31:14:F7:D2:62:77:8C:D9:20:21:45:86:51:BE:86:2A:8E:2D:46:50 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B5DD1E9A2DBE5C8430EE4F6C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6167 IP address blocks: 2600:1007:a038::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e9:a2:db:e5:c8:43:0e:e4:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=1f60a012-b933-4e9c-85f5-467f1ad9792d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:a1:d0:df:a9:4b:bd:46:79:ea:a3:44:03: dd:d3:4d:4e:38:d3:61:df:f5:70:c3:bb:65:cf:2b: ed:28:71:c0:9e:ed:7a:fe:a8:76:64:e5:12:ff:65: cd:84:76:f5:1e:b7:94:62:4d:f8:0f:3f:5b:6a:e3: 6c:71:3b:e5:b8:9f:db:c8:6f:18:3a:c7:98:19:86: 7f:5a:b5:3e:8d:bb:dc:39:d9:a9:67:d3:1b:b9:35: cd:8c:28:dc:be:06:36:93:73:52:ac:a8:77:bd:00: f0:23:b3:82:8a:a2:b2:3a:d5:1b:78:71:a8:02:f5: f8:35:93:3e:02:68:ab:88:76:92:b2:d1:33:bd:b9: 53:a5:f4:10:c8:66:2a:72:ff:24:1e:9b:2b:c4:f7: 69:0b:b8:92:5d:69:db:95:97:63:94:0d:ac:a8:93: de:12:02:47:52:77:7a:79:ed:eb:db:99:55:7c:49: 21:96:1f:05:65:50:1b:83:f6:99:7f:84:0e:77:0c: 63:31:38:c5:b6:43:f1:51:83:a5:62:f4:16:aa:66: af:af:8b:07:38:6e:a2:f9:fd:b5:8f:a0:b3:b6:14: 24:eb:7c:a1:21:e2:d3:ce:11:fd:14:5d:e6:5a:a4: 6f:89:47:62:c3:d9:49:5e:f9:08:66:d6:33:c4:e1: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:F7:D2:62:77:8C:D9:20:21:45:86:51:BE:86:2A:8E:2D:46:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1007:a038::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c0:b1:fd:9f:0a:42:a4:a3:a8:de:ce:10:6d:23:d8:0f:37: 14:92:b8:7e:ee:62:70:73:56:ba:46:db:4a:aa:34:5d:99:92: fb:7f:e6:3f:cf:8a:7b:08:03:a5:b9:16:22:66:d7:81:81:19: 2f:5e:65:0c:c9:8a:ae:6c:7a:9a:1a:40:10:52:13:6a:df:c9: 8c:6a:35:c5:64:59:f6:b6:98:74:f2:b3:e1:4c:bf:be:18:59: 27:75:de:44:ad:0d:1a:49:11:f3:b4:73:f2:10:0d:00:71:39: 91:a4:04:4b:60:2a:10:27:46:fc:a2:3a:75:b2:c2:e0:2d:85: 28:f7:b1:17:fd:99:60:bb:28:a9:db:e6:1b:97:7b:35:cf:4f: f1:20:69:cb:9e:de:bc:f5:7b:90:8e:05:fa:f3:d8:ff:45:62: 31:53:12:44:31:25:9d:6d:c2:a2:3c:9b:f4:06:fb:11:c3:af: 73:30:3e:2f:8c:fb:3f:15:c7:3f:90:6d:d0:7b:aa:4f:9f:62: 57:cb:0c:b8:2a:14:62:c0:0c:27:85:ec:34:b6:e1:6a:89:67: 6b:70:a2:5e:b8:9f:fb:de:9b:69:a6:33:8e:ee:88:63:ae:b5: c2:da:d5:2e:74:b2:40:5b:d0:c9:f6:09:60:24:7f:ff:3c:de: 4e:15:bb:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0emi2+XIQw7k9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MWY2MGEwMTItYjkzMy00ZTljLTg1ZjUtNDY3ZjFhZDk3OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZyh0N+pS71GeeqjRAPd001OONNh3/Vww7tl zyvtKHHAnu16/qh2ZOUS/2XNhHb1HreUYk34Dz9bauNscTvluJ/byG8YOseYGYZ/ WrU+jbvcOdmpZ9MbuTXNjCjcvgY2k3NSrKh3vQDwI7OCiqKyOtUbeHGoAvX4NZM+ AmiriHaSstEzvblTpfQQyGYqcv8kHpsrxPdpC7iSXWnblZdjlA2sqJPeEgJHUnd6 ee3r25lVfEkhlh8FZVAbg/aZf4QOdwxjMTjFtkPxUYOlYvQWqmavr4sHOG6i+f21 j6CzthQk63yhIeLTzhH9FF3mWqRviUdiw9lJXvkIZtYzxOFoiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDEU99Jid4zZICFFhlG+hiqOLUZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTUyYzcxNzItMmU2NS0z MGYzLTlhZjQtYjliZTMzMDg0MGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQB6A4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfAsf2fCkKko6jezhBtI9gPNxSSuH7uYnBzVrpG20qqNF2Zkvt/ 5j/PinsIA6W5FiJm14GBGS9eZQzJiq5sepoaQBBSE2rfyYxqNcVkWfa2mHTys+FM v74YWSd13kStDRpJEfO0c/IQDQBxOZGkBEtgKhAnRvyiOnWywuAthSj3sRf9mWC7 KKnb5huXezXPT/Egacue3rz1e5COBfrz2P9FYjFTEkQxJZ1twqI8m/QG+xHDr3Mw Pi+M+z8Vxz+QbdB7qk+fYlfLDLgqFGLADCeF7DS24WqJZ2twol64n/vem2mmM47u iGOutcLa1S50skBb0Mn2CWAkf/883k4Vu0c= -----END CERTIFICATE-----Generated at Sat Oct 11 00:19:26 2025 by rpki-client