$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa File: c1f66afc-8447-30d4-b796-33e8827a84dd.roa (raw, json) Hash identifier: fh2BzYKwqHND9OjOvuGrNvXnX60dqEps7WLqZrPi41Q= Subject key identifier: A1:36:A4:40:46:0D:95:4A:4D:70:19:02:B5:4F:E2:C7:1A:E9:00:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B0A117F0F06EB7CC58A9DC3B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 6167 IP address blocks: 2600:1011:b0c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:7f:0f:06:eb:7c:c5:8a:9d:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=d1217bc6-4bf5-40ba-b092-97f6af74d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:f5:95:59:2d:ac:00:e9:3a:40:5c:09:fb: 39:9c:e5:8e:1b:5d:a7:f9:bb:23:66:5c:db:d2:32: 5d:66:5e:90:c5:9f:19:ec:51:c0:47:fa:7c:42:6f: 0c:f5:57:3a:3c:65:73:60:4c:11:c8:b3:63:d4:28: 41:1d:cf:e2:50:e5:c5:85:53:0d:20:c7:09:67:ad: cc:7a:d6:c3:96:03:b0:8e:67:79:93:59:11:f2:2b: bb:62:35:9c:50:9f:dd:1f:88:25:1d:a2:98:47:f2: 65:f3:ce:17:37:0b:90:1b:c6:70:a2:a1:97:74:6b: 69:8e:89:5c:5b:de:ad:98:92:4a:f5:53:ac:37:02: cf:8a:e1:af:a8:6b:70:cd:cd:73:ba:d3:96:4f:93: 7e:f1:42:08:36:97:27:16:a0:38:ec:e9:0f:12:e1: ce:2e:27:52:30:29:01:a2:fc:d7:9e:67:0b:26:41: 75:88:03:62:fd:c8:45:8e:cf:ed:ee:ef:05:82:5b: a1:8f:16:6b:96:ff:f9:f6:14:5e:ee:56:77:d1:b2: f9:77:1e:55:92:6d:0d:d8:77:7d:83:2a:72:5f:f4: 69:82:1c:70:b1:a9:bf:7b:ee:5e:34:21:c7:0f:1f: 58:86:09:c4:73:0f:dc:78:97:06:d7:72:ab:41:30: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:A4:40:46:0D:95:4A:4D:70:19:02:B5:4F:E2:C7:1A:E9:00:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1011:b0c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b8:11:1d:8e:f6:c3:4c:71:ff:89:cb:49:2c:82:8f:32:a2: c7:8f:ce:31:ce:cc:30:d5:76:51:4b:e9:4b:04:f4:d4:64:b5: b7:a7:5b:a4:0a:ab:4c:c3:38:9d:a4:71:b4:11:29:3f:d1:12: 75:61:60:10:22:c7:9d:d9:18:b7:49:2e:f7:9a:0a:57:fc:bb: 53:b9:f9:23:41:63:7d:cb:64:9e:63:3a:5e:f9:00:84:0a:50: c0:ae:70:c1:45:67:62:11:d0:89:ef:50:ff:0f:22:61:7e:ef: 14:cb:aa:66:56:26:1f:b4:71:58:f8:0d:3e:b4:b9:0f:40:38: ec:c3:62:39:df:ae:5e:e2:96:e6:46:80:51:50:72:2f:7e:f1: 50:1a:3e:07:2a:21:7c:bc:4e:3f:85:98:db:69:cc:77:6e:47: 60:ce:cc:67:8a:04:35:a1:7d:0f:f3:eb:50:df:bf:f0:40:e9: 4e:f9:f8:64:02:fe:fa:98:56:6e:e0:f0:3b:97:62:29:4b:3f: 20:6c:9a:6f:01:9b:b0:ce:3f:72:d8:cb:47:70:04:2b:98:7d: 5c:6b:59:f9:f5:d8:9b:75:db:66:34:90:4f:42:62:59:35:6f: bd:f3:26:5c:2b:b4:af:af:7c:8c:d3:20:6e:0d:11:c5:7a:64: b4:a3:5e:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEX8PBut8xYqdw7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZDEyMTdiYzYtNGJmNS00MGJhLWIwOTItOTdmNmFmNzRkMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+b1lVktrADpOkBcCfs5nOWOG12n+bsjZlzb 0jJdZl6QxZ8Z7FHAR/p8Qm8M9Vc6PGVzYEwRyLNj1ChBHc/iUOXFhVMNIMcJZ63M etbDlgOwjmd5k1kR8iu7YjWcUJ/dH4glHaKYR/Jl884XNwuQG8ZwoqGXdGtpjolc W96tmJJK9VOsNwLPiuGvqGtwzc1zutOWT5N+8UIINpcnFqA47OkPEuHOLidSMCkB ovzXnmcLJkF1iANi/chFjs/t7u8FgluhjxZrlv/59hRe7lZ30bL5dx5Vkm0N2Hd9 gypyX/Rpghxwsam/e+5eNCHHDx9YhgnEcw/ceJcG13KrQTBLiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKE2pEBGDZVKTXAZArVP4sca6QAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzFmNjZhZmMtODQ0Ny0z MGQ0LWI3OTYtMzNlODgyN2E4NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEbDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKi4ER2O9sNMcf+Jy0ksgo8yosePzjHOzDDVdlFL6UsE9NRktben W6QKq0zDOJ2kcbQRKT/REnVhYBAix53ZGLdJLveaClf8u1O5+SNBY33LZJ5jOl75 AIQKUMCucMFFZ2IR0InvUP8PImF+7xTLqmZWJh+0cVj4DT60uQ9AOOzDYjnfrl7i luZGgFFQci9+8VAaPgcqIXy8Tj+FmNtpzHduR2DOzGeKBDWhfQ/z61Dfv/BA6U75 +GQC/vqYVm7g8DuXYilLPyBsmm8Bm7DOP3LYy0dwBCuYfVxrWfn12Jt122Y0kE9C Ylk1b73zJlwrtK+vfIzTIG4NEcV6ZLSjXtg= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:30 2025 by rpki-client