$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa File: cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa (raw, json) Hash identifier: sBVH/gT6HTgB8vidNMaNm2YFJt/XyR1KvWV/+ir5bjA= Subject key identifier: 31:05:A4:A1:06:38:50:0B:2B:E2:58:DC:DD:2D:61:BC:06:93:A4:9A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36F4DAED5EBED566D16000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1008:a020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f4:da:ed:5e:be:d5:66:d1:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1fa470ba-0a64-49ef-bd35-5fedb069553e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:2f:55:03:2a:a7:b7:b4:c3:89:a2:ee:86: c9:df:fa:f6:ee:ff:aa:07:e8:db:fc:4d:16:30:d0: 80:a7:b9:05:0e:57:72:c7:ff:ed:13:db:44:61:c8: 32:27:3b:1b:d0:d9:84:03:2b:0d:35:90:66:62:78: f7:de:7a:69:d0:6b:76:6a:2c:58:10:ac:ea:34:a3: c8:5d:72:21:47:02:97:bc:bd:54:70:d7:55:05:2b: 22:86:72:cf:51:f6:ca:a3:4d:74:6d:3d:6a:a8:69: c8:04:b2:a7:c0:9c:d5:ab:c3:ab:4c:4f:31:3f:8a: 4e:3b:39:17:16:1b:c3:8d:0b:2c:ed:6f:84:82:c7: 1e:29:4c:67:9e:f5:e6:41:fe:23:08:cd:46:64:5a: 29:b5:eb:7f:89:33:82:de:62:e6:63:1c:04:7b:80: 26:15:54:c5:1a:06:19:8d:6b:de:49:0a:81:48:47: 40:02:53:4b:16:eb:81:2c:b6:14:d8:47:64:c1:4d: 6d:c7:47:93:8d:64:fa:d3:34:e7:28:33:6e:4a:7d: 13:3a:63:b9:d5:8e:9e:12:f5:db:fb:21:09:12:ca: af:1f:33:dd:9f:a5:34:ff:b1:4a:9b:ba:6f:b8:b2: 6b:2c:39:64:53:6d:82:24:43:84:32:6f:bc:fe:5c: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:A4:A1:06:38:50:0B:2B:E2:58:DC:DD:2D:61:BC:06:93:A4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:a020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:38:34:da:65:28:20:95:a9:99:7e:4f:58:ef:25:fc:c3:95: 0c:3e:c9:41:15:9a:6d:df:d6:59:c4:e8:c2:38:93:17:61:39: 75:61:d4:6d:b0:47:3d:b5:39:de:c3:2a:de:c6:52:2a:3c:58: b5:50:a0:63:62:27:60:79:26:d7:40:91:5a:ae:14:71:72:c0: ee:15:fa:ac:c3:5e:41:a5:a6:34:d0:fe:eb:1d:43:7d:e2:f7: 09:33:dc:cc:03:fc:1f:9c:a8:e9:97:08:74:d6:1b:b9:0d:f7: cd:80:d4:9c:3e:b5:11:08:21:ae:ed:0e:9d:51:2b:0c:63:5e: ce:4e:29:39:3d:a5:65:db:0e:e7:57:3e:0e:3d:68:aa:f8:70: 72:92:23:9e:2f:4b:1c:1f:09:d1:94:43:64:26:f6:a8:a6:0d: ca:60:bd:ed:cd:ea:9d:eb:b3:57:ee:59:1b:d1:a9:21:cc:a6: ae:26:30:73:b0:ed:de:ac:46:8f:d2:b6:34:e4:8e:e8:b0:c3: 9f:fd:55:62:69:c8:66:46:19:1a:d4:e4:f9:a9:46:83:e3:69: 0f:56:07:5c:09:11:cb:c8:01:a9:f6:42:aa:d7:bb:96:85:aa: 6f:cc:70:86:b7:77:12:3b:01:40:e2:e5:87:c7:b4:13:2e:65: 69:e5:d0:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNvTa7V6+1WbRYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWZhNDcwYmEtMGE2NC00OWVmLWJkMzUtNWZlZGIwNjk1NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQwvVQMqp7e0w4mi7obJ3/r27v+qB+jb/E0W MNCAp7kFDldyx//tE9tEYcgyJzsb0NmEAysNNZBmYnj33npp0Gt2aixYEKzqNKPI XXIhRwKXvL1UcNdVBSsihnLPUfbKo010bT1qqGnIBLKnwJzVq8OrTE8xP4pOOzkX FhvDjQss7W+EgsceKUxnnvXmQf4jCM1GZFoptet/iTOC3mLmYxwEe4AmFVTFGgYZ jWveSQqBSEdAAlNLFuuBLLYU2EdkwU1tx0eTjWT60zTnKDNuSn0TOmO51Y6eEvXb +yEJEsqvHzPdn6U0/7FKm7pvuLJrLDlkU22CJEOEMm+8/lx38QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDEFpKEGOFALK+JY3N0tYbwGk6SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZhNmViNmItZjIzNC0z ZDY4LWFkNWMtMDFhZDkxMzcwNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCKAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFM4NNplKCCVqZl+T1jvJfzDlQw+yUEVmm3f1lnE6MI4kxdhOXVh 1G2wRz21Od7DKt7GUio8WLVQoGNiJ2B5JtdAkVquFHFywO4V+qzDXkGlpjTQ/usd Q33i9wkz3MwD/B+cqOmXCHTWG7kN982A1Jw+tREIIa7tDp1RKwxjXs5OKTk9pWXb DudXPg49aKr4cHKSI54vSxwfCdGUQ2Qm9qimDcpgve3N6p3rs1fuWRvRqSHMpq4m MHOw7d6sRo/StjTkjuiww5/9VWJpyGZGGRrU5PmpRoPjaQ9WB1wJEcvIAan2QqrX u5aFqm/McIa3dxI7AUDi5YfHtBMuZWnl0N8= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:41 2025 by rpki-client