$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af1fdb5c-4c87-3b03-9a1b-c2d3b634019b.roa File: af1fdb5c-4c87-3b03-9a1b-c2d3b634019b.roa (raw, json) Hash identifier: Zv0xx+6JBxaBwZpmPdwHCORGGY5R/Xe9WvLhxRKIaO8= Subject key identifier: 9F:FD:1B:46:2B:74:E4:E1:3C:A8:E1:00:57:C8:C0:74:8B:B1:63:8E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C371F8C353E24B0834D9180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af1fdb5c-4c87-3b03-9a1b-c2d3b634019b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1001:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:1f:8c:35:3e:24:b0:83:4d:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4f5873e6-42bc-4765-888c-b6cb98e6f091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:19:66:d0:6c:71:a1:69:06:16:6c:94:ec:3e: 1d:f0:28:a5:db:1b:ba:8e:ee:75:cf:8c:57:e3:ab: 6f:15:8b:08:89:9b:e8:48:90:36:4a:b6:62:7d:45: ef:bb:db:dd:55:c0:ab:46:af:92:21:d8:ba:67:83: bf:6e:e1:a0:87:aa:c2:8b:1a:79:bf:3f:80:88:9c: ae:13:f4:8d:75:91:4d:b8:72:7e:70:49:63:d1:0f: f1:6b:1b:64:d0:ab:ed:25:b1:96:c4:35:be:9e:ce: 0f:c1:c8:71:b6:dd:bf:24:04:ed:6c:26:d6:2a:a2: eb:27:ad:17:c2:30:d0:c4:36:a0:9e:ad:3d:dd:36: 77:4c:41:e5:59:33:49:e4:c8:b5:82:9e:65:02:35: 78:6c:96:5a:84:3f:49:c6:90:4c:2a:e2:3c:59:c8: af:ac:c7:2b:71:84:6b:e5:d7:11:a7:61:cd:40:d4: 4d:7d:77:b3:c7:6f:15:f7:2d:59:48:28:19:48:d8: bd:99:ba:d0:23:b1:5e:c5:43:82:b3:73:b8:e2:b0: 3f:0f:12:a6:f0:af:88:bf:82:90:1d:33:a7:30:13: 2b:5d:97:e9:95:93:d8:a2:be:33:4d:7a:34:a8:f9: 22:0f:8e:92:11:03:4a:7c:51:3f:77:3e:bd:f5:6a: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:1B:46:2B:74:E4:E1:3C:A8:E1:00:57:C8:C0:74:8B:B1:63:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af1fdb5c-4c87-3b03-9a1b-c2d3b634019b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1001:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ac:86:0a:a3:66:9d:12:57:a3:db:de:9d:7d:4a:93:85:21: 35:01:9c:ad:45:11:a9:ae:e5:49:6c:3c:5f:a7:c6:5f:c9:58: 43:5b:34:78:e8:c6:81:34:54:a7:89:96:02:39:1d:71:9d:60: e9:4d:45:49:46:ca:33:3a:46:d1:df:32:14:04:33:f6:65:f3: 44:72:54:f5:f0:44:d0:02:50:0d:e3:c0:de:8d:ff:55:17:fc: df:14:fa:06:eb:a1:36:a0:0b:90:77:5c:7f:5a:0b:2b:06:04: 90:1d:91:96:24:6f:39:6f:4b:f6:73:ca:de:dd:4c:ff:fb:52: ef:f1:c0:e8:21:6f:e3:c7:86:e4:3a:2d:92:62:a3:17:22:a9: 17:26:52:fc:37:5b:d1:1c:9d:6d:cc:8a:e8:69:0b:cd:c5:8d: 5c:72:17:a1:7f:a4:82:37:8f:54:b1:83:1f:c8:af:58:ac:7d: c0:c2:6d:14:bf:96:c1:80:2a:d4:9c:f4:38:7a:e6:28:5e:4b: 4f:8a:b9:c6:8d:a9:4d:96:17:ee:78:53:78:38:27:e6:af:35: 95:38:dd:2d:3f:d3:c8:23:9e:f8:0a:8e:d9:63:8a:9b:bc:28: 65:c0:44:13:0d:1f:86:ab:1e:f8:be:f2:b8:1d:85:d7:30:2b: 8e:6d:a2:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNx+MNT4ksINNkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGY1ODczZTYtNDJiYy00NzY1LTg4OGMtYjZjYjk4ZTZmMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xlm0GxxoWkGFmyU7D4d8Cil2xu6ju51z4xX 46tvFYsIiZvoSJA2SrZifUXvu9vdVcCrRq+SIdi6Z4O/buGgh6rCixp5vz+AiJyu E/SNdZFNuHJ+cElj0Q/xaxtk0KvtJbGWxDW+ns4Pwchxtt2/JATtbCbWKqLrJ60X wjDQxDagnq093TZ3TEHlWTNJ5Mi1gp5lAjV4bJZahD9JxpBMKuI8WcivrMcrcYRr 5dcRp2HNQNRNfXezx28V9y1ZSCgZSNi9mbrQI7FexUOCs3O44rA/DxKm8K+Iv4KQ HTOnMBMrXZfplZPYor4zTXo0qPkiD46SEQNKfFE/dz699WrxXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ/9G0YrdOThPKjhAFfIwHSLsWOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWYxZmRiNWMtNGM4Ny0z YjAzLTlhMWItYzJkM2I2MzQwMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAbAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAKshgqjZp0SV6Pb3p19SpOFITUBnK1FEamu5UlsPF+nxl/JWENb NHjoxoE0VKeJlgI5HXGdYOlNRUlGyjM6RtHfMhQEM/Zl80RyVPXwRNACUA3jwN6N /1UX/N8U+gbroTagC5B3XH9aCysGBJAdkZYkbzlvS/Zzyt7dTP/7Uu/xwOghb+PH huQ6LZJioxciqRcmUvw3W9EcnW3MiuhpC83FjVxyF6F/pII3j1Sxgx/Ir1isfcDC bRS/lsGAKtSc9Dh65iheS0+KucaNqU2WF+54U3g4J+avNZU43S0/08gjnvgKjtlj ipu8KGXARBMNH4arHvi+8rgdhdcwK45toqU= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:45 2025 by rpki-client