$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3f74f59-f5b3-3546-86aa-037b38b0697c.roa File: a3f74f59-f5b3-3546-86aa-037b38b0697c.roa (raw, json) Hash identifier: H8Br4tSTHBc/M5c4mGn3RTBrXCy6/qk9ghfb3Wdu6so= Subject key identifier: C9:0A:E6:80:BA:0C:56:30:19:F4:48:54:E2:D1:8D:AE:79:B9:BA:7A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290BCC8467A0C596B75F700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3f74f59-f5b3-3546-86aa-037b38b0697c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:1009:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:bc:c8:46:7a:0c:59:6b:75:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=af04201f-5323-4bf4-8435-571204e90d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:8e:a0:bb:a3:4e:98:bf:ef:66:68:53:d4: 14:ba:17:5f:3a:4f:eb:5c:f5:21:de:9c:d4:18:6f: 79:74:36:4f:fd:f0:e2:96:ee:60:be:54:6a:22:20: 7a:4e:27:2e:b5:31:b3:07:aa:84:cd:18:f9:bc:4f: b5:e4:ca:9d:d7:2c:d9:f5:ae:27:de:2c:08:da:3b: 43:b4:ad:23:7d:d1:ab:b2:78:bc:fd:bc:7f:88:99: 72:16:50:6d:ba:21:2c:69:5f:27:b2:7f:65:dd:bc: 27:39:b2:b0:7b:9a:5d:67:18:c2:f1:1d:96:b2:10: dd:67:4b:6b:13:4e:8c:8f:1d:fe:88:22:a7:ec:13: 7c:11:f5:e6:19:b9:a7:ad:ee:05:56:6b:7a:68:d9: 74:6d:e7:2b:56:ef:0f:4a:58:8a:45:be:8e:be:63: cb:e5:c8:42:a0:6d:b8:6f:dc:5e:f3:61:67:27:e5: a9:7c:a0:e9:19:ca:16:d4:06:6b:53:3d:08:bb:47: c8:4f:ab:90:a7:a9:68:b4:eb:16:46:c0:ed:8f:7e: 2f:6d:c9:93:b7:ef:c6:5d:31:8f:69:04:d2:ea:78: c8:52:57:9f:5f:bb:c0:24:f1:77:e2:28:8b:3c:a8: b0:b3:9c:fe:22:e1:41:d0:6f:68:ea:b3:e5:56:f0: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:E6:80:BA:0C:56:30:19:F4:48:54:E2:D1:8D:AE:79:B9:BA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3f74f59-f5b3-3546-86aa-037b38b0697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:86:f0:39:30:7a:ec:26:37:1d:6b:e4:42:95:7e:e3:a5:63: 07:a4:9f:ee:d0:44:ef:34:09:09:7f:88:11:8e:d5:13:1b:93: 85:68:22:fa:21:89:a6:e8:79:3b:ab:7a:ca:4e:38:25:3f:d8: 3d:45:09:59:8e:b3:b9:c5:93:15:37:98:98:50:f6:2e:47:1b: 61:04:b4:c0:be:42:3b:e8:1a:9f:17:47:dd:62:4b:d5:56:10: 0d:f3:a7:1e:b5:01:0e:6c:59:24:e4:1c:b7:c8:ec:5c:05:ac: b2:86:db:15:b8:09:31:e6:bc:f5:e0:54:89:cb:39:2a:50:a0: 81:56:ea:94:e8:b4:b7:a3:46:a9:13:a4:24:d4:21:37:54:a8: 1a:c7:1f:02:eb:91:b0:ad:0a:7a:65:37:ea:a5:eb:f6:88:b1: d5:26:60:37:20:a5:db:2f:1b:7e:99:a7:95:8e:6a:0c:b3:14: f0:0d:9d:10:da:a9:4f:5d:27:4f:0d:8b:0e:40:74:89:5b:31: e8:4c:d3:fe:57:09:2e:c0:7c:e8:37:de:97:de:72:7d:77:38: dc:e8:24:f5:5d:ea:8c:63:41:81:a7:42:e8:e5:81:8b:93:38: 42:14:d5:5b:13:1b:88:6a:2a:46:30:fd:1b:88:5f:71:88:e3: 96:39:5f:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikLzIRnoMWWt19wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YWYwNDIwMWYtNTMyMy00YmY0LTg0MzUtNTcxMjA0ZTkwZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxiOoLujTpi/72ZoU9QUuhdfOk/rXPUh3pzU GG95dDZP/fDilu5gvlRqIiB6TicutTGzB6qEzRj5vE+15Mqd1yzZ9a4n3iwI2jtD tK0jfdGrsni8/bx/iJlyFlBtuiEsaV8nsn9l3bwnObKwe5pdZxjC8R2WshDdZ0tr E06Mjx3+iCKn7BN8EfXmGbmnre4FVmt6aNl0becrVu8PSliKRb6OvmPL5chCoG24 b9xe82FnJ+WpfKDpGcoW1AZrUz0Iu0fIT6uQp6lotOsWRsDtj34vbcmTt+/GXTGP aQTS6njIUlefX7vAJPF34iiLPKiws5z+IuFB0G9o6rPlVvB/vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkK5oC6DFYwGfRIVOLRja55ubp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTNmNzRmNTktZjViMy0z NTQ2LTg2YWEtMDM3YjM4YjA2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCZAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqG8DkweuwmNx1r5EKVfuOlYwekn+7QRO80CQl/iBGO1RMbk4Vo IvohiaboeTurespOOCU/2D1FCVmOs7nFkxU3mJhQ9i5HG2EEtMC+QjvoGp8XR91i S9VWEA3zpx61AQ5sWSTkHLfI7FwFrLKG2xW4CTHmvPXgVInLOSpQoIFW6pTotLej RqkTpCTUITdUqBrHHwLrkbCtCnplN+ql6/aIsdUmYDcgpdsvG36Zp5WOagyzFPAN nRDaqU9dJ08Niw5AdIlbMehM0/5XCS7AfOg33pfecn13ONzoJPVd6oxjQYGnQujl gYuTOEIU1VsTG4hqKkYw/RuIX3GI45Y5X3U= -----END CERTIFICATE-----Generated at Wed Jul 9 21:15:38 2025 by rpki-client