$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa File: 60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa (raw, json) Hash identifier: JqlSkBGZVz9y6ZWEJk5o5kT3K7IJbNI8ukdZzJwmV08= Subject key identifier: 34:44:A2:F9:95:0D:AC:D6:F9:F8:64:42:89:55:5A:F3:C2:23:5C:AF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290BC5D7A32D3AB3DC00900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:1004:b230::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:bc:5d:7a:32:d3:ab:3d:c0:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=b408720d-f7f5-498f-b9e9-a6d1b521dd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:39:6e:66:82:2a:54:c1:23:1f:c2:02:16: 42:63:09:92:f8:c3:f2:6c:bb:46:b6:b4:e4:ab:04: e3:39:66:ac:b1:a6:b8:73:a3:26:5d:9e:cb:bd:92: 23:91:91:51:d0:cb:a5:94:59:75:72:7f:ef:d7:fc: 74:9e:1a:61:38:7c:3e:68:43:9e:98:bb:1f:62:a6: 1f:52:f4:d4:72:cb:1b:48:10:7b:a4:00:d7:13:29: 43:a6:94:45:69:8d:e8:1b:ab:fc:93:86:ad:ce:e6: f8:80:6e:9d:a9:58:aa:10:b8:94:82:c0:92:16:73: 76:be:38:ad:5b:ba:33:47:cf:b4:c8:9d:46:16:5c: 61:be:fc:f6:48:6d:51:cf:08:85:f9:49:7e:17:ce: 10:11:5b:c2:05:35:60:9d:67:a4:02:dc:0f:62:87: 25:6a:c7:d1:6e:91:a8:34:47:46:0b:b9:b2:99:3f: b6:89:a8:90:18:b0:d5:ed:d5:6f:db:32:2c:54:43: bc:dc:87:31:b8:39:6c:33:54:03:39:60:74:4c:5f: 00:1b:c9:fe:03:2a:6a:68:d6:f8:99:35:35:0f:d6: 09:1e:ae:b0:65:7c:ed:02:00:a7:22:c6:32:d6:f1: 81:54:37:7e:44:1b:e5:c2:f7:a8:d8:bb:18:81:a6: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:44:A2:F9:95:0D:AC:D6:F9:F8:64:42:89:55:5A:F3:C2:23:5C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a81c8b-8af9-30d5-9aa3-3fb7b5689c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:b230::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:98:60:41:ed:51:c7:36:8d:96:a9:a3:94:5e:d1:b1:76:3e: f3:ce:54:a1:6a:1f:ef:57:54:4a:7c:88:cb:cf:af:f2:c2:26: e5:81:a5:cd:2a:1a:40:be:54:5b:47:ca:85:e3:50:3a:fa:b5: 10:92:0d:3c:ce:55:aa:af:ad:07:f2:ff:d6:6b:46:82:8e:36: 80:a4:1f:cd:25:b9:35:1e:ea:50:54:f6:9e:d0:21:8e:18:5d: 2a:cc:59:79:e4:b3:d2:9b:f0:08:bf:49:04:ba:6f:45:b3:a1: fb:23:09:02:43:d8:63:14:f1:6b:2b:f6:7a:cd:93:02:f8:4c: ab:ce:a8:10:54:e8:6a:33:92:0b:12:26:40:0a:a0:b1:26:eb: e8:18:06:20:81:7e:ce:02:25:3a:2c:70:25:ef:1a:97:ac:35: 0f:2e:d3:ea:ab:9b:8d:90:de:99:dd:09:19:37:08:05:b6:35: f9:09:67:ce:51:8c:01:38:14:70:3d:bd:b3:5f:80:f1:1f:af: 0f:d2:1e:24:c5:05:4a:d3:0c:df:8e:ed:f1:9e:3e:79:9e:3f: 19:9f:a3:73:3c:88:49:0d:76:08:17:a4:b1:9e:4a:4e:38:e1: df:10:29:27:90:49:ec:90:3d:fa:ae:8e:fa:f9:d6:54:34:9f: 79:22:78:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikLxdejLTqz3ACQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YjQwODcyMGQtZjdmNS00OThmLWI5ZTktYTZkMWI1MjFkZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi105bmaCKlTBIx/CAhZCYwmS+MPybLtGtrTk qwTjOWassaa4c6MmXZ7LvZIjkZFR0MullFl1cn/v1/x0nhphOHw+aEOemLsfYqYf UvTUcssbSBB7pADXEylDppRFaY3oG6v8k4atzub4gG6dqViqELiUgsCSFnN2vjit W7ozR8+0yJ1GFlxhvvz2SG1RzwiF+Ul+F84QEVvCBTVgnWekAtwPYoclasfRbpGo NEdGC7mymT+2iaiQGLDV7dVv2zIsVEO83IcxuDlsM1QDOWB0TF8AG8n+AypqaNb4 mTU1D9YJHq6wZXztAgCnIsYy1vGBVDd+RBvlwveo2LsYgaZoRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDREovmVDazW+fhkQolVWvPCI1yvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBhODFjOGItOGFmOS0z MGQ1LTlhYTMtM2ZiN2I1Njg5YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBLIw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJuYYEHtUcc2jZapo5Re0bF2PvPOVKFqH+9XVEp8iMvPr/LCJuWB pc0qGkC+VFtHyoXjUDr6tRCSDTzOVaqvrQfy/9ZrRoKONoCkH80luTUe6lBU9p7Q IY4YXSrMWXnks9Kb8Ai/SQS6b0WzofsjCQJD2GMU8Wsr9nrNkwL4TKvOqBBU6Goz kgsSJkAKoLEm6+gYBiCBfs4CJToscCXvGpesNQ8u0+qrm42Q3pndCRk3CAW2NfkJ Z85RjAE4FHA9vbNfgPEfrw/SHiTFBUrTDN+O7fGePnmePxmfo3M8iEkNdggXpLGe Sk444d8QKSeQSeyQPfqujvr51lQ0n3kieCU= -----END CERTIFICATE-----Generated at Wed Jul 9 21:19:28 2025 by rpki-client