$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dd3dff4-3825-38b8-9384-c4273590a1a8.roa File: 6dd3dff4-3825-38b8-9384-c4273590a1a8.roa (raw, json) Hash identifier: BUeGU5mdxF3hwVrezNIDg7fNQ0+a+699ZQAVACy3azw= Subject key identifier: 80:49:6B:A7:70:4B:3E:B8:6F:27:61:45:AC:1A:0F:B0:68:CB:43:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B491A13FD7C53C39C1854 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dd3dff4-3825-38b8-9384-c4273590a1a8.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 6167 IP address blocks: 2600:1003:b840::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:49:1a:13:fd:7c:53:c3:9c:18:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=acc63b4f-d423-4d76-9d74-7d3e5ff437af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:2e:f4:dd:c9:8a:af:8a:35:93:72:e8:14: f1:c5:91:db:6b:df:41:b2:be:6e:1f:74:a6:9d:7f: dc:d1:c4:5d:51:ac:8a:97:b6:b0:27:1a:27:26:96: e4:5b:5c:7c:28:68:50:10:c3:ca:23:0c:7d:f0:ac: 4c:64:8d:d3:43:01:cc:93:50:1b:62:bf:5b:f2:77: b1:c6:3c:af:75:41:d4:ce:5b:23:fe:f7:91:ed:7c: 6b:af:b8:e2:6f:4d:94:0b:72:28:90:8f:13:51:83: 40:7a:d5:00:f9:74:82:68:fc:95:d1:b9:41:8a:fe: 12:8e:f1:31:b4:a7:13:48:eb:98:82:40:ee:8e:45: cf:df:f3:76:b0:2d:df:b7:bf:a8:9f:64:cb:ef:f3: aa:de:5e:34:fc:83:a8:92:91:73:29:70:af:99:bb: b6:db:c1:05:3b:bf:39:9b:65:f5:78:fe:62:af:5c: f4:2a:34:d4:26:47:4e:d1:65:3e:e2:e1:a7:dd:9a: 85:4c:8e:58:d3:ef:b0:a5:ae:4d:1d:f3:14:e1:76: e7:b1:b2:67:97:13:c0:5d:83:11:ee:c4:cd:b9:01: 8b:3e:0e:d5:ec:3d:71:54:10:d7:7c:14:d5:b2:5d: 60:07:5c:44:70:81:77:b8:7f:bb:52:8c:92:94:59: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:49:6B:A7:70:4B:3E:B8:6F:27:61:45:AC:1A:0F:B0:68:CB:43:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dd3dff4-3825-38b8-9384-c4273590a1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:b840::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ef:23:76:2a:be:00:cb:32:5a:0f:57:d8:9d:84:e2:9d:a3: 52:9f:8f:2d:a9:a1:e4:0b:87:f4:6f:79:e0:39:60:e5:81:c2: c5:b8:3c:4e:55:fa:4a:16:ef:b1:20:48:40:0d:83:5f:1a:de: 00:7d:71:a3:6f:8f:bc:2e:94:f4:b4:3a:44:d8:2d:19:bd:cb: 1d:66:ab:52:4e:70:26:be:54:28:fe:a8:89:f9:e2:9d:14:48: 6c:37:4c:95:d9:cb:c8:9a:3a:e3:2a:2f:6c:c5:ec:61:0d:52: 02:49:94:88:25:5c:87:64:9f:02:d2:71:6b:9f:a7:2a:b6:11: 19:d9:89:e7:cc:88:cd:d4:ad:9d:cf:b2:46:39:7c:8a:12:76: 20:17:4c:4c:28:7e:44:7a:a6:44:08:50:de:27:1e:2d:fb:c4: 76:c5:54:ec:ad:73:75:34:d5:42:a7:47:5d:12:aa:af:9d:a9: 68:06:be:39:4a:c2:0b:9c:f7:64:0b:e5:82:ae:0f:38:78:65: fb:c9:c5:59:82:b9:22:38:ee:80:49:95:56:94:be:86:39:69: 7c:d4:6a:93:80:76:60:8b:d6:ff:44:ee:5c:9f:d8:48:64:f5: 22:77:95:7d:51:d5:3d:63:fd:49:36:89:e8:3d:68:d0:7a:c0: 4a:e8:11:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0kaE/18U8OcGFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YWNjNjNiNGYtZDQyMy00ZDc2LTlkNzQtN2QzZTVmZjQzN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUwu9N3Jiq+KNZNy6BTxxZHba99Bsr5uH3Sm nX/c0cRdUayKl7awJxonJpbkW1x8KGhQEMPKIwx98KxMZI3TQwHMk1AbYr9b8nex xjyvdUHUzlsj/veR7Xxrr7jib02UC3IokI8TUYNAetUA+XSCaPyV0blBiv4SjvEx tKcTSOuYgkDujkXP3/N2sC3ft7+on2TL7/Oq3l40/IOokpFzKXCvmbu228EFO785 m2X1eP5ir1z0KjTUJkdO0WU+4uGn3ZqFTI5Y0++wpa5NHfMU4XbnsbJnlxPAXYMR 7sTNuQGLPg7V7D1xVBDXfBTVsl1gB1xEcIF3uH+7UoySlFknXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBJa6dwSz64bydhRawaD7Boy0MmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmRkM2RmZjQtMzgyNS0z OGI4LTkzODQtYzQyNzM1OTBhMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA7hA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTvI3YqvgDLMloPV9idhOKdo1Kfjy2poeQLh/RveeA5YOWBwsW4 PE5V+koW77EgSEANg18a3gB9caNvj7wulPS0OkTYLRm9yx1mq1JOcCa+VCj+qIn5 4p0USGw3TJXZy8iaOuMqL2zF7GENUgJJlIglXIdknwLScWufpyq2ERnZiefMiM3U rZ3PskY5fIoSdiAXTEwofkR6pkQIUN4nHi37xHbFVOytc3U01UKnR10Sqq+dqWgG vjlKwguc92QL5YKuDzh4ZfvJxVmCuSI47oBJlVaUvoY5aXzUapOAdmCL1v9E7lyf 2Ehk9SJ3lX1R1T1j/Uk2ieg9aNB6wEroEfQ= -----END CERTIFICATE-----Generated at Wed Jul 9 22:11:57 2025 by rpki-client