$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa File: 5289aa19-a2d8-3480-8db0-07af7b747a41.roa (raw, json) Hash identifier: 3vXwBdBq4GyPxg2P1z8HlbkeCawz6aAu1Iut51904e0= Subject key identifier: 8E:B8:2C:EF:4B:BB:D7:A8:8C:7B:97:CB:38:05:71:E0:9B:DF:B5:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290BE6E90F51407008CE900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:1009:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:be:6e:90:f5:14:07:00:8c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=99b42318-6ee3-4155-869f-1242bc08ed8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:a6:3e:d1:c8:51:cb:bc:83:95:94:51:96: f6:b1:7f:60:25:73:8a:5b:e2:46:7e:8d:c2:02:49: 9d:d4:00:67:f1:be:38:fe:9e:b0:6a:9b:25:4e:41: 88:c3:01:ae:58:6e:e5:c3:48:e3:6e:e0:45:1c:4f: ab:12:f5:e0:79:33:81:ec:65:c5:cd:9c:f5:10:c6: e9:83:9c:b4:3b:c8:6c:98:8b:3d:f8:67:bd:e2:ca: 73:ff:a2:77:1c:f8:16:bb:a5:29:99:3b:92:17:2f: e8:6a:d6:61:f0:78:f8:97:b3:d4:6f:2f:46:1c:e3: 10:ae:3f:f3:38:d9:ab:99:ce:31:47:55:18:ef:ce: a7:ef:1a:9a:07:25:28:3e:4d:6f:e0:a1:88:e6:d6: 58:94:d9:69:49:bd:da:ef:87:b5:21:41:88:98:98: a7:88:e5:6b:d1:1c:1d:9b:d0:4b:a3:0d:10:16:fd: 14:28:9b:12:61:71:48:f6:c1:23:b5:45:bc:77:55: db:31:2b:2a:71:00:e6:bc:62:7b:84:46:9b:a9:ca: bc:ff:fe:35:5a:fa:01:ee:57:d9:7d:d4:29:46:81: 7c:56:56:35:10:30:f7:26:82:0c:fe:56:b8:cf:88: ae:11:c4:4e:2c:4d:c3:01:a6:96:ce:78:bd:8c:28: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B8:2C:EF:4B:BB:D7:A8:8C:7B:97:CB:38:05:71:E0:9B:DF:B5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:56:9e:60:ad:78:e2:e9:7e:d5:d0:e6:92:22:2c:5e:78:5c: 12:7f:38:2c:9d:b5:13:da:20:df:b3:bd:d3:81:0e:fd:fe:de: b6:40:33:f5:ae:0d:1e:c6:82:30:ad:f9:d4:5d:3d:4f:b8:59: 41:9b:ee:6d:6b:ff:a1:98:2b:21:c8:b6:ee:47:44:ee:0b:58: 02:66:b8:94:ea:0f:6d:b2:ae:16:a7:94:36:e8:d5:7f:0c:d7: 96:d3:32:cc:0a:f7:d8:17:5c:f2:a5:eb:4f:85:d6:e1:11:99: a9:24:7c:9d:47:0a:be:a6:4f:01:c3:84:5b:1d:51:c8:52:03: 68:03:a9:4e:87:b9:80:92:e3:4e:2c:5e:ba:06:49:bf:f4:3a: 17:a8:f1:60:38:1d:90:b2:96:47:38:d2:a4:f9:ce:45:09:84: 27:4f:14:8a:d0:68:60:44:24:32:67:72:f4:96:6b:69:67:99: 9c:59:e7:65:01:07:74:e5:cc:70:45:b3:c2:eb:be:9d:a0:7a: 6f:14:2b:da:ba:2d:ad:4f:98:f2:5c:bb:84:2c:fa:a3:98:05: 4b:89:05:d1:69:76:63:31:9c:47:0b:3d:07:23:90:57:8c:89: 1c:9c:6a:9b:cb:02:15:71:1c:0a:0c:31:40:47:e9:43:04:19: 76:92:f6:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikL5ukPUUBwCM6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OTliNDIzMTgtNmVlMy00MTU1LTg2OWYtMTI0MmJjMDhlZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2KmPtHIUcu8g5WUUZb2sX9gJXOKW+JGfo3C Akmd1ABn8b44/p6wapslTkGIwwGuWG7lw0jjbuBFHE+rEvXgeTOB7GXFzZz1EMbp g5y0O8hsmIs9+Ge94spz/6J3HPgWu6UpmTuSFy/oatZh8Hj4l7PUby9GHOMQrj/z ONmrmc4xR1UY786n7xqaByUoPk1v4KGI5tZYlNlpSb3a74e1IUGImJiniOVr0Rwd m9BLow0QFv0UKJsSYXFI9sEjtUW8d1XbMSsqcQDmvGJ7hEabqcq8//41WvoB7lfZ fdQpRoF8VlY1EDD3JoIM/la4z4iuEcROLE3DAaaWzni9jCi+VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI64LO9Lu9eojHuXyzgFceCb37VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTI4OWFhMTktYTJkOC0z NDgwLThkYjAtMDdhZjdiNzQ3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCbFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5WnmCteOLpftXQ5pIiLF54XBJ/OCydtRPaIN+zvdOBDv3+3rZA M/WuDR7GgjCt+dRdPU+4WUGb7m1r/6GYKyHItu5HRO4LWAJmuJTqD22yrhanlDbo 1X8M15bTMswK99gXXPKl60+F1uERmakkfJ1HCr6mTwHDhFsdUchSA2gDqU6HuYCS 404sXroGSb/0Oheo8WA4HZCylkc40qT5zkUJhCdPFIrQaGBEJDJncvSWa2lnmZxZ 52UBB3TlzHBFs8Lrvp2gem8UK9q6La1PmPJcu4Qs+qOYBUuJBdFpdmMxnEcLPQcj kFeMiRycapvLAhVxHAoMMUBH6UMEGXaS9vc= -----END CERTIFICATE-----Generated at Wed Jul 9 21:45:17 2025 by rpki-client