$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa File: a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa (raw, json) Hash identifier: 8YWl1lTWTfPxSk78WDyUovmA1Nd8EcI9fMnMohzq92I= Subject key identifier: 89:A3:BA:53:13:B9:62:8D:7B:32:B2:ED:5E:B0:DE:FE:2A:1A:EC:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B76F28468EEAD37855BE64540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 2600:1004:a120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:84:68:ee:ad:37:85:5b:e6:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=99289f89-9a64-46b5-b44e-d7847b45d78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1c:d5:7d:22:ac:9f:31:1a:54:5d:81:37:34: 00:da:e1:3c:77:f4:5f:c7:32:7a:31:5a:f0:66:39: 9c:5b:ec:25:a8:f0:62:1a:5b:de:26:7f:06:9e:b0: 28:0f:7b:f6:6a:94:99:50:72:1b:3d:7f:2b:b9:c3: ac:07:11:32:1a:13:f6:34:ba:98:d6:77:20:1f:4a: 88:f8:d4:b3:a1:e6:ad:0c:bb:40:17:df:63:b1:07: 0b:c1:a5:4a:48:6b:06:e8:5c:8b:32:38:d0:a5:d4: 3e:ac:b6:15:41:41:15:9f:6e:8f:4c:2d:ff:76:78: 4e:23:50:3a:2d:fe:f5:b8:a3:a5:59:37:22:6a:04: 7d:14:bd:2b:3b:16:58:65:e3:49:21:cd:dc:38:f4: aa:18:78:59:bf:e8:88:5c:39:65:e4:ce:f8:9e:d8: 9f:7e:0b:dd:8b:f6:27:66:a3:25:5b:e4:b3:3c:30: bc:09:a8:b7:00:b0:18:84:46:1b:d4:21:10:28:eb: 21:0b:c2:ec:2a:74:20:69:ee:c6:ba:28:76:30:57: de:1f:e2:af:e1:3d:44:2b:b9:d5:f8:98:39:69:55: 8c:ad:14:bb:26:57:15:96:47:61:1b:9c:b4:7a:17: 3d:eb:c4:ed:80:e5:d1:e2:96:8d:d5:3c:20:5d:b7: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:BA:53:13:B9:62:8D:7B:32:B2:ED:5E:B0:DE:FE:2A:1A:EC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:a120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:64:76:a6:ba:43:94:ed:1a:45:62:2c:8e:2c:eb:62:2a:ba: cb:73:91:f0:0a:ea:b7:c3:e2:be:4a:bc:e7:5a:ac:5c:e0:61: 51:f4:77:e1:a3:02:f2:be:e4:77:9a:59:b9:bc:3f:70:1a:b2: b6:95:e3:8b:63:c1:80:6c:fb:42:63:c1:6d:c8:d9:28:f8:78: 85:30:d4:32:36:25:41:e7:ec:26:f0:bc:7e:65:ef:32:82:01: fe:ba:e1:16:db:df:fb:07:9a:d4:0e:9a:6c:d2:c0:a6:a9:59: 58:2d:36:ae:b1:90:58:b1:c6:60:e1:98:a6:49:7a:7b:45:52: fa:ad:d7:0d:73:e7:c4:2c:10:db:83:d9:99:82:46:9c:74:cc: cc:32:54:31:25:c6:fa:1c:d8:13:a7:61:55:13:2d:e2:61:f8: ef:2e:a7:b7:5c:2a:47:a0:70:ca:4a:f5:98:e0:c7:f3:f0:27: a3:f5:52:a6:82:88:62:52:55:a8:4b:d6:24:4c:82:0d:55:41: 48:1a:0b:9c:e7:50:63:84:a6:cb:d6:f3:ca:07:bf:c8:61:11: a6:dc:36:79:2f:65:a4:d9:74:b4:2e:44:72:53:71:88:79:3e: 80:7a:01:9e:b4:26:61:d2:23:aa:1f:d7:ec:c3:c5:f4:b6:cd: 8e:53:90:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28oRo7q03hVvmRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTkyODlmODktOWE2NC00NmI1LWI0NGUtZDc4NDdiNDVkNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hzVfSKsnzEaVF2BNzQA2uE8d/RfxzJ6MVrw ZjmcW+wlqPBiGlveJn8GnrAoD3v2apSZUHIbPX8rucOsBxEyGhP2NLqY1ncgH0qI +NSzoeatDLtAF99jsQcLwaVKSGsG6FyLMjjQpdQ+rLYVQUEVn26PTC3/dnhOI1A6 Lf71uKOlWTciagR9FL0rOxZYZeNJIc3cOPSqGHhZv+iIXDll5M74ntiffgvdi/Yn ZqMlW+SzPDC8Cai3ALAYhEYb1CEQKOshC8LsKnQgae7Guih2MFfeH+Kv4T1EK7nV +Jg5aVWMrRS7JlcVlkdhG5y0ehc968TtgOXR4paN1TwgXbd76wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImjulMTuWKNezKy7V6w3v4qGuwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTNiOTg3ZjMtYzYxYi0z ZDZlLWFiZDktZGIxZWMzNmRmZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBKEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhkdqa6Q5TtGkViLI4s62IqustzkfAK6rfD4r5KvOdarFzgYVH0 d+GjAvK+5HeaWbm8P3AasraV44tjwYBs+0JjwW3I2Sj4eIUw1DI2JUHn7CbwvH5l 7zKCAf664Rbb3/sHmtQOmmzSwKapWVgtNq6xkFixxmDhmKZJentFUvqt1w1z58Qs ENuD2ZmCRpx0zMwyVDElxvoc2BOnYVUTLeJh+O8up7dcKkegcMpK9Zjgx/PwJ6P1 UqaCiGJSVahL1iRMgg1VQUgaC5znUGOEpsvW88oHv8hhEabcNnkvZaTZdLQuRHJT cYh5PoB6AZ60JmHSI6of1+zDxfS2zY5TkGw= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:06 2025 by rpki-client