$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa File: 31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa (raw, json) Hash identifier: HMPOVMTFiZyoIOJZAHT0GKwsMtxmfkA6EOmHV8f7cxU= Subject key identifier: 1E:2E:2F:F3:FB:4F:86:98:7F:B9:07:05:B4:88:24:1D:42:90:FF:68 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290C51B42A3C82348579500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100d:9e00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c5:1b:42:a3:c8:23:48:57:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=cdef1b6f-8ade-4c7e-9b9d-aeb86337efd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:9b:af:90:66:00:2b:e5:36:52:7a:33:44: b2:24:56:91:a4:6a:c9:10:4e:db:1f:c2:4f:dd:5f: 7b:f2:c9:d7:b7:cc:38:da:b6:d2:4d:58:15:84:4f: 24:f8:61:f2:8e:ba:63:0a:ff:fd:92:27:ce:40:36: 35:f7:43:33:13:ba:f6:73:5f:78:f3:dc:5a:ed:cf: d1:ba:1f:9a:74:3b:0e:12:ee:a5:61:35:a9:d8:02: 99:5b:bd:e6:2a:9c:b8:95:5c:12:55:7d:73:36:57: c4:d2:f5:d1:60:51:55:cc:b3:f3:f1:9f:c8:df:a2: a7:c0:9d:5c:61:07:13:3b:3a:a5:96:c9:1c:dd:e8: 29:76:83:08:24:97:9d:f3:33:08:13:48:58:47:0f: 10:88:4a:4a:ca:57:14:ed:04:19:33:cc:0d:4a:e0: 66:1f:6f:43:ad:78:dd:7c:b1:13:fc:b1:3d:87:c3: 17:9b:c3:be:d3:94:1c:79:c8:8e:c8:3a:4e:58:d8: 6f:8e:d9:60:1c:0a:4c:2d:d1:07:16:9c:a2:aa:d2: 82:0c:c9:94:a8:e1:45:be:98:0d:8c:8d:0e:22:b7: d5:ac:e4:7e:4d:43:d0:48:06:b8:80:84:ad:91:06: 60:88:08:6b:5f:b3:5e:45:30:41:fc:52:15:ad:c2: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:2F:F3:FB:4F:86:98:7F:B9:07:05:B4:88:24:1D:42:90:FF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:9e00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:24:8b:31:af:74:0b:bd:0f:26:01:5d:be:04:c5:8d:af:90: a2:b5:7f:29:90:de:0e:03:c8:d3:fa:cf:c4:7c:77:48:05:33: d9:07:3b:15:15:9f:64:68:f2:37:b2:a6:b4:39:f0:9b:95:4c: 74:b8:be:a9:9d:f3:f2:dd:22:c3:80:1c:e3:3c:8f:a2:f5:80: 86:f5:60:be:fb:fc:6a:05:a1:ca:06:e0:4f:8e:a6:a3:2b:73: b9:ee:59:c3:14:28:87:f3:f7:fc:c5:18:d3:4e:d7:49:04:47: c4:89:ea:e0:3f:65:b2:13:af:b0:4a:30:dc:d2:82:d6:20:56: 57:ea:dd:84:7c:0c:c9:2e:0b:f0:60:8e:b8:6c:b3:f8:7e:2d: 80:61:6d:1d:36:0e:f8:03:a6:4f:a1:20:a7:a0:9b:72:03:93: be:1e:2f:71:56:3a:da:2d:75:0c:04:e6:ef:a1:33:9e:78:2d: 3d:df:0e:f6:e3:c3:2b:5c:50:7e:33:5a:80:32:0a:a9:28:b8: 2f:17:4a:5c:62:20:e9:10:4b:e8:69:17:81:80:d5:e9:ae:54: e5:bf:4e:da:38:1e:68:8d:ca:d8:40:ee:80:4f:55:17:7c:bc: ad:75:4b:98:9c:64:8a:f3:c9:89:2f:1e:23:77:5e:f4:cd:5e: 3f:0f:df:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMUbQqPII0hXlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2RlZjFiNmYtOGFkZS00YzdlLTliOWQtYWViODYzMzdlZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPebr5BmACvlNlJ6M0SyJFaRpGrJEE7bH8JP 3V978snXt8w42rbSTVgVhE8k+GHyjrpjCv/9kifOQDY190MzE7r2c19489xa7c/R uh+adDsOEu6lYTWp2AKZW73mKpy4lVwSVX1zNlfE0vXRYFFVzLPz8Z/I36KnwJ1c YQcTOzqllskc3egpdoMIJJed8zMIE0hYRw8QiEpKylcU7QQZM8wNSuBmH29DrXjd fLET/LE9h8MXm8O+05QceciOyDpOWNhvjtlgHApMLdEHFpyiqtKCDMmUqOFFvpgN jI0OIrfVrOR+TUPQSAa4gIStkQZgiAhrX7NeRTBB/FIVrcIqyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB4uL/P7T4aYf7kHBbSIJB1CkP9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzFhYTlkM2EtMmMyMC0z YmNkLTk5MjAtNzg0NWU2Y2QxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDZ4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAskizGvdAu9DyYBXb4ExY2vkKK1fymQ3g4DyNP6z8R8d0gFM9kH OxUVn2Ro8jeyprQ58JuVTHS4vqmd8/LdIsOAHOM8j6L1gIb1YL77/GoFocoG4E+O pqMrc7nuWcMUKIfz9/zFGNNO10kER8SJ6uA/ZbITr7BKMNzSgtYgVlfq3YR8DMku C/Bgjrhss/h+LYBhbR02DvgDpk+hIKegm3IDk74eL3FWOtotdQwE5u+hM554LT3f DvbjwytcUH4zWoAyCqkouC8XSlxiIOkQS+hpF4GA1emuVOW/Tto4HmiNythA7oBP VRd8vK11S5icZIrzyYkvHiN3XvTNXj8P31k= -----END CERTIFICATE-----Generated at Wed Jul 9 20:44:47 2025 by rpki-client