$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa File: aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa (raw, json) Hash identifier: ErdhkzSPOaP9MoDjW6GbeGqhBE0WGlTKG/hJTs9eYyw= Subject key identifier: 45:7A:CD:22:CB:00:DB:82:53:BD:44:54:1C:DC:7D:7A:60:87:7B:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290AAB0875A62560005C760 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100d:b1d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:aa:b0:87:5a:62:56:00:05:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=bd247baf-ba15-4d59-990e-e8c210a1cb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:0f:f4:7d:3c:22:b5:60:c1:d3:af:db:37: d1:68:51:44:66:17:e0:d2:99:a9:82:c6:29:78:12: 1d:4d:40:5c:20:2d:5e:b2:f0:b1:a3:20:09:a1:05: a6:60:90:0b:8e:f4:c0:1d:0f:81:a3:44:b9:14:99: 6e:97:a0:1b:39:df:61:04:bc:ae:8b:62:02:97:15: b1:01:e6:d4:75:1a:34:76:cc:45:b5:7c:ee:f4:12: 6c:1a:ae:f8:75:73:40:c5:ab:b5:1f:b0:89:4a:b0: f9:81:21:15:6e:87:b5:72:ae:d3:03:be:a7:62:34: 6b:9b:5c:8c:6b:aa:3a:a3:3d:d3:bc:82:01:b1:c4: dd:03:72:36:8c:da:62:f5:e4:c0:13:d4:8d:31:3c: 7b:e4:ee:e7:18:d1:cf:92:5d:7e:11:01:74:2a:21: 65:be:8f:71:2f:bd:4c:82:c1:ba:aa:ba:03:e5:28: 6a:e9:7b:50:ce:b3:f4:d0:49:5b:34:ac:39:bb:13: 8e:eb:df:99:ed:2e:f9:14:91:2b:5c:c1:3b:14:29: a2:4d:99:7f:e6:cb:73:4a:41:94:88:33:75:cc:25: 01:c9:40:ba:60:6f:4c:3e:57:18:f6:76:d7:3b:ae: 92:64:ea:d3:83:d1:d6:d9:2e:a4:bc:ec:13:58:2e: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7A:CD:22:CB:00:DB:82:53:BD:44:54:1C:DC:7D:7A:60:87:7B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b1d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:91:e3:7c:69:f4:04:1a:78:13:61:51:60:33:2f:e8:8a:c5: 3e:b4:c0:f5:da:6e:3c:2d:dd:2c:f2:55:d1:74:51:88:c0:71: c5:70:45:ed:c3:05:b2:60:7b:b8:8c:8a:7f:bf:6c:a6:5d:2c: 10:97:25:85:a1:cf:e9:cc:98:1c:22:6a:09:07:8e:6b:5d:2b: 78:94:15:e1:fe:c6:d7:d3:a9:68:1a:95:35:b1:4b:e1:67:69: 61:a9:19:47:95:51:41:8a:83:6c:33:b1:31:43:bf:49:cc:32: 8e:72:a5:41:d6:70:6b:38:7e:35:1f:db:a9:7d:05:9e:f3:e6: 17:25:e5:44:d6:f4:55:1d:c1:4c:00:7e:d3:48:d9:a6:94:7a: 56:ea:90:d4:89:a4:4c:2c:25:fb:39:1c:4a:f2:f3:fb:60:68: 85:bd:8c:bd:40:41:5a:7c:36:60:fa:eb:a9:d8:8d:df:1d:09: 07:ec:43:b2:06:97:07:8a:ba:6f:a0:6d:a1:05:f8:87:ed:0f: 89:7f:00:2a:07:5e:36:66:82:ef:a9:9e:1f:d6:3b:6b:d9:58: bf:51:c2:b2:2b:03:3b:75:a7:ca:ca:06:fa:8a:e9:a8:f7:84: a9:1c:aa:12:67:1c:f9:59:47:02:fa:06:d1:83:ab:d0:b2:e2: eb:65:a5:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikKqwh1piVgAFx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YmQyNDdiYWYtYmExNS00ZDU5LTk5MGUtZThjMjEwYTFjYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMAP9H08IrVgwdOv2zfRaFFEZhfg0pmpgsYp eBIdTUBcIC1esvCxoyAJoQWmYJALjvTAHQ+Bo0S5FJlul6AbOd9hBLyui2IClxWx AebUdRo0dsxFtXzu9BJsGq74dXNAxau1H7CJSrD5gSEVboe1cq7TA76nYjRrm1yM a6o6oz3TvIIBscTdA3I2jNpi9eTAE9SNMTx75O7nGNHPkl1+EQF0KiFlvo9xL71M gsG6qroD5Shq6XtQzrP00ElbNKw5uxOO69+Z7S75FJErXME7FCmiTZl/5stzSkGU iDN1zCUByUC6YG9MPlcY9nbXO66SZOrTg9HW2S6kvOwTWC44jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEV6zSLLANuCU71EVBzcfXpgh3tOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWExODM3YzEtZDc2Mi0z ZWZkLTllODktYjZjMTVkNGE0NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbHQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALaR43xp9AQaeBNhUWAzL+iKxT60wPXabjwt3SzyVdF0UYjAccVw Re3DBbJge7iMin+/bKZdLBCXJYWhz+nMmBwiagkHjmtdK3iUFeH+xtfTqWgalTWx S+FnaWGpGUeVUUGKg2wzsTFDv0nMMo5ypUHWcGs4fjUf26l9BZ7z5hcl5UTW9FUd wUwAftNI2aaUelbqkNSJpEwsJfs5HEry8/tgaIW9jL1AQVp8NmD666nYjd8dCQfs Q7IGlweKum+gbaEF+IftD4l/ACoHXjZmgu+pnh/WO2vZWL9RwrIrAzt1p8rKBvqK 6aj3hKkcqhJnHPlZRwL6BtGDq9Cy4utlpeI= -----END CERTIFICATE-----Generated at Wed Jul 9 21:10:56 2025 by rpki-client