$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efc8aa84-925d-3ae2-a86f-5eb0eded335b.roa File: efc8aa84-925d-3ae2-a86f-5eb0eded335b.roa (raw, json) Hash identifier: XKdl4nlYGBhKvN1ueuXImre8jXRAVYpLZfImQJo0UrI= Subject key identifier: 91:41:2E:D7:C6:C2:45:F2:5A:1D:1A:1C:B6:36:AA:1C:42:B9:06:FB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290AC8F3EF74DCD2B23AA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efc8aa84-925d-3ae2-a86f-5eb0eded335b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100e:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ac:8f:3e:f7:4d:cd:2b:23:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ea755910-d4e5-4a98-b8ed-2f62b4cd94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:06:f8:24:0a:d1:a7:92:6b:93:ed:22:d5: ae:d8:ee:d8:43:63:a4:24:af:52:c5:c2:26:2a:6f: 55:fe:9a:aa:01:0b:b5:19:3f:50:e4:79:f3:8b:02: 6f:60:8c:8e:94:7c:df:16:66:5c:67:08:bf:6c:73: bc:f3:27:13:9d:26:8c:8c:58:91:09:fb:21:0d:d6: e7:97:08:26:5b:fe:06:5c:72:95:7a:13:0d:3c:48: 6d:84:e6:d7:f7:51:a9:a8:33:b1:91:0c:fe:ea:79: 81:95:f5:4a:16:ec:8a:85:15:0f:f9:64:64:b0:8e: c8:eb:16:fa:3c:32:52:fe:4b:29:c9:f0:d1:3e:02: d3:fd:3d:8f:2c:3d:62:58:34:dd:57:75:0d:73:8a: cb:a7:be:90:8d:d1:a9:74:f2:68:03:3d:ab:04:36: c9:91:97:83:82:d2:9c:b9:75:99:45:19:3a:af:1d: e8:79:be:2a:52:1c:f3:a7:90:36:a3:73:25:3b:09: d1:94:48:f5:a8:27:af:43:97:37:67:c9:69:7f:21: 61:f4:a1:54:e8:f9:78:0f:1a:85:5d:ee:bc:27:d9: bb:11:0d:9b:dd:4f:b7:bb:62:06:75:bd:bd:2b:16: 97:2a:36:be:9a:b6:cd:a2:51:5b:76:b5:87:b5:46: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:41:2E:D7:C6:C2:45:F2:5A:1D:1A:1C:B6:36:AA:1C:42:B9:06:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efc8aa84-925d-3ae2-a86f-5eb0eded335b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100e:a020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:56:a5:4e:0a:50:1b:a8:4a:5a:ec:0d:db:2d:40:06:82:6c: 49:08:63:84:59:ce:5e:b0:20:24:3c:9b:6e:6e:ea:30:3b:21: 8c:42:ee:cf:a6:06:63:dc:19:83:79:98:aa:50:aa:a9:80:04: 28:75:6c:05:30:bd:ad:17:9b:61:2a:43:dd:38:84:1e:2c:ab: a8:99:93:a7:01:49:6e:8d:35:c6:7e:62:9c:93:3e:6e:52:bc: 47:63:9b:1b:ba:74:d5:02:62:92:9a:8e:1b:2e:cf:a0:11:d1: 54:a0:a9:9f:72:7b:7d:fe:54:1e:0f:2b:60:b6:6b:d9:23:8b: 97:1c:98:10:9f:c2:cc:66:16:e8:9c:7d:d2:91:1d:78:fe:25: 23:75:e1:04:a1:80:c2:f6:3b:6c:6d:a3:18:20:54:b4:bf:c0: ac:57:2e:4d:18:97:90:d7:06:be:eb:70:05:cd:a7:fd:cb:8b: 2c:fd:4c:48:c1:98:e4:e3:12:fb:dc:7f:9a:d9:2b:89:23:27: 9e:23:c1:e6:34:ff:54:73:a7:fe:cd:90:a9:82:3b:1a:4f:c1: c9:0e:a6:f2:a6:5d:b9:83:6b:d4:46:7c:b4:5e:43:b2:9c:d6: c3:e8:45:db:03:6c:96:15:1b:df:d2:ed:63:00:93:43:94:d1: 2d:4a:9a:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikKyPPvdNzSsjqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWE3NTU5MTAtZDRlNS00YTk4LWI4ZWQtMmY2MmI0Y2Q5NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wwG+CQK0aeSa5PtItWu2O7YQ2OkJK9SxcIm Km9V/pqqAQu1GT9Q5HnziwJvYIyOlHzfFmZcZwi/bHO88ycTnSaMjFiRCfshDdbn lwgmW/4GXHKVehMNPEhthObX91GpqDOxkQz+6nmBlfVKFuyKhRUP+WRksI7I6xb6 PDJS/kspyfDRPgLT/T2PLD1iWDTdV3UNc4rLp76QjdGpdPJoAz2rBDbJkZeDgtKc uXWZRRk6rx3oeb4qUhzzp5A2o3MlOwnRlEj1qCevQ5c3Z8lpfyFh9KFU6Pl4DxqF Xe68J9m7EQ2b3U+3u2IGdb29KxaXKja+mrbNolFbdrWHtUbguQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFBLtfGwkXyWh0aHLY2qhxCuQb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZjOGFhODQtOTI1ZC0z YWUyLWE4NmYtNWViMGVkZWQzMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDqAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABRWpU4KUBuoSlrsDdstQAaCbEkIY4RZzl6wICQ8m25u6jA7IYxC 7s+mBmPcGYN5mKpQqqmABCh1bAUwva0Xm2EqQ904hB4sq6iZk6cBSW6NNcZ+YpyT Pm5SvEdjmxu6dNUCYpKajhsuz6AR0VSgqZ9ye33+VB4PK2C2a9kji5ccmBCfwsxm FuicfdKRHXj+JSN14QShgML2O2xtoxggVLS/wKxXLk0Yl5DXBr7rcAXNp/3Liyz9 TEjBmOTjEvvcf5rZK4kjJ54jweY0/1Rzp/7NkKmCOxpPwckOpvKmXbmDa9RGfLRe Q7Kc1sPoRdsDbJYVG9/S7WMAk0OU0S1KmtY= -----END CERTIFICATE-----Generated at Wed Jul 9 21:17:13 2025 by rpki-client