$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa File: 43fc22d3-8640-3949-8385-f3bfb894240e.roa (raw, json) Hash identifier: GBiIXwHhNMqP744kVYKhd1vCUVgo5Tvp2tt5wXfBkhI= Subject key identifier: B5:DD:0C:9F:27:54:29:4D:B9:C2:35:61:7E:00:4F:6F:D2:5E:3C:9D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290C38F86D1E526536E2440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100c:b0e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c3:8f:86:d1:e5:26:53:6e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=67b69c25-8dca-407e-934c-f658c6ec8586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:27:7f:4f:c1:6d:6d:4d:68:9e:be:6d:2f: 3a:96:ec:34:68:78:42:b8:a4:88:35:8e:f1:65:9b: 5a:f9:47:d5:2d:03:54:10:54:b3:a9:c5:64:37:09: 12:75:d6:ed:13:94:9d:ca:4c:60:77:28:72:a3:25: d2:ed:de:53:db:33:9b:20:ae:be:57:06:9a:5a:bb: 29:e2:9a:d9:92:03:b9:d0:5e:5b:1a:68:af:26:11: 82:8e:c6:9b:02:40:5c:0b:fa:16:ce:83:38:2d:54: d0:70:1b:c7:e5:4d:a9:d9:c8:30:00:03:03:a6:57: e2:d5:c4:9d:8e:19:ea:d6:11:17:39:62:0a:ff:5c: 47:8b:4b:d7:5e:07:12:0c:46:fa:e1:f0:d0:f8:30: 7d:be:60:55:af:88:d8:88:d9:5b:e3:91:13:4a:db: 81:13:5e:eb:84:c2:36:92:d3:29:70:45:5a:5f:a6: bd:fe:7b:28:61:d4:fb:80:dc:2d:6e:5f:f8:93:6a: 4e:e5:38:00:b3:d8:d3:08:63:f3:1e:0b:e5:a8:e4: ff:0a:68:30:18:f5:d3:b5:63:ce:22:2d:de:83:7b: fb:a2:fd:70:14:17:df:ca:fc:72:fd:af:0d:25:12: 2f:e6:a2:6c:16:78:ec:5d:a3:f9:46:6b:04:e3:ca: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DD:0C:9F:27:54:29:4D:B9:C2:35:61:7E:00:4F:6F:D2:5E:3C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43fc22d3-8640-3949-8385-f3bfb894240e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:b0e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:db:ce:e8:b3:16:19:c1:f9:cd:88:66:48:63:34:7b:7a:44: 61:6d:eb:9f:d5:c5:ca:c1:cb:39:8a:1e:7d:53:22:7a:79:3b: 4a:9b:65:a5:ae:39:cb:b1:3d:84:f3:f7:9c:02:e3:5b:52:5d: 28:df:cc:c1:84:6e:6e:56:10:c5:c1:33:16:9a:b9:dc:68:1e: ca:09:35:9e:7d:69:c2:7c:69:40:c3:0b:9f:80:89:9e:44:81: cf:c1:ec:87:d9:b4:90:d1:0c:29:c3:12:b2:ec:35:9e:d3:cd: 05:9e:1e:28:00:4b:35:4c:32:d2:21:29:dd:4d:e8:74:ca:10: d1:15:55:0d:e2:4d:f2:de:16:48:7d:1d:69:93:41:39:47:44: eb:da:23:84:e0:47:e3:61:74:77:e2:02:c9:55:c8:b1:e9:b9: 28:7b:66:7a:60:ed:e3:5b:8e:29:28:e7:78:8c:58:26:8e:b8: 69:ee:aa:d6:04:68:69:c8:04:46:83:49:02:57:e4:8e:36:35: 5a:6b:cd:e6:3c:c2:0e:3c:d9:51:f5:ea:8e:fa:18:3e:17:73: 24:10:dc:fa:ed:13:90:5b:a1:c0:59:90:e1:41:9c:a6:32:43: bd:04:c0:5c:04:e4:82:fa:20:8a:28:b7:db:00:4c:cd:ed:00: 20:da:12:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMOPhtHlJlNuJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NjdiNjljMjUtOGRjYS00MDdlLTkzNGMtZjY1OGM2ZWM4NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Enf0/BbW1NaJ6+bS86luw0aHhCuKSINY7x ZZta+UfVLQNUEFSzqcVkNwkSddbtE5SdykxgdyhyoyXS7d5T2zObIK6+VwaaWrsp 4prZkgO50F5bGmivJhGCjsabAkBcC/oWzoM4LVTQcBvH5U2p2cgwAAMDplfi1cSd jhnq1hEXOWIK/1xHi0vXXgcSDEb64fDQ+DB9vmBVr4jYiNlb45ETStuBE17rhMI2 ktMpcEVaX6a9/nsoYdT7gNwtbl/4k2pO5TgAs9jTCGPzHgvlqOT/CmgwGPXTtWPO Ii3eg3v7ov1wFBffyvxy/a8NJRIv5qJsFnjsXaP5RmsE48qgnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXdDJ8nVClNucI1YX4AT2/SXjydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDNmYzIyZDMtODY0MC0z OTQ5LTgzODUtZjNiZmI4OTQyNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDLDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPbzuizFhnB+c2IZkhjNHt6RGFt65/VxcrByzmKHn1TInp5O0qb ZaWuOcuxPYTz95wC41tSXSjfzMGEbm5WEMXBMxaaudxoHsoJNZ59acJ8aUDDC5+A iZ5Egc/B7IfZtJDRDCnDErLsNZ7TzQWeHigASzVMMtIhKd1N6HTKENEVVQ3iTfLe Fkh9HWmTQTlHROvaI4TgR+NhdHfiAslVyLHpuSh7Znpg7eNbjiko53iMWCaOuGnu qtYEaGnIBEaDSQJX5I42NVprzeY8wg482VH16o76GD4XcyQQ3PrtE5BbocBZkOFB nKYyQ70EwFwE5IL6IIoot9sATM3tACDaEvU= -----END CERTIFICATE-----Generated at Wed Jul 2 21:17:24 2025 by rpki-client