$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa File: 5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa (raw, json) Hash identifier: Eb4zJOmCyChYF24NNW/RBmCe85J2JZAvj4ZR0vTlKE0= Subject key identifier: 60:3F:66:B4:68:93:3B:4D:BD:00:CF:18:2E:D2:16:63:63:36:26:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B1A6FD4A74A6DAE229900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 6167 IP address blocks: 2600:1006:a021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:1a:6f:d4:a7:4a:6d:ae:22:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=8a10786b-73f4-48c3-8192-2cf7e7baf198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:cb:72:ed:4e:14:c9:66:df:b0:39:09:4c: 86:c2:b0:a9:5b:30:12:ea:a2:9b:d1:03:9b:e9:1b: f5:08:4f:3a:e6:e2:a5:18:4f:b7:95:71:93:9f:03: 67:7e:e7:29:89:4b:d3:a1:f5:a2:5f:0d:cf:0c:d2: 6b:17:d6:9e:4e:d1:7b:e8:db:63:cd:74:77:d7:41: 20:b5:29:8c:68:68:c4:da:20:1b:c5:cd:39:e4:d2: 15:c5:d0:ed:85:1d:9b:67:2a:f2:b2:ec:db:86:35: 6b:30:58:0e:0e:88:61:1f:80:9d:f5:39:c4:96:0f: 6e:cd:b8:23:8b:2a:58:05:24:62:eb:28:46:09:42: d7:f5:69:46:d2:d8:93:61:71:eb:27:0b:8f:82:4b: 4c:96:a2:d3:1c:54:65:d8:66:ba:00:a5:a7:39:66: 60:54:13:4c:1a:1c:40:6f:5c:eb:9a:97:a3:97:63: da:13:0f:1c:9f:56:53:59:fb:98:60:1f:fe:a6:e1: 50:e5:6e:83:11:72:6e:aa:eb:38:bc:87:e2:42:8e: 28:50:db:5f:77:28:29:8e:84:df:9f:ec:67:41:78: d1:71:d2:f6:b7:5b:23:ed:0b:c9:92:ab:fa:f1:21: ff:ee:bb:68:ca:4d:df:48:f3:ac:72:63:45:42:9b: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:66:B4:68:93:3B:4D:BD:00:CF:18:2E:D2:16:63:63:36:26:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1006:a021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9e:d1:d2:cc:38:0f:9f:9b:15:20:e4:94:94:27:b2:ac:53: 8d:2c:a5:0b:82:bb:d4:87:b0:61:e8:4c:de:8d:7a:23:12:3f: ff:0a:bd:d2:97:ee:ae:95:e6:80:e6:b4:ae:cf:2f:44:f6:fe: d4:5e:40:47:47:66:af:7e:3e:57:f9:f1:72:e1:7c:03:17:4c: 0a:ed:be:5a:c1:b2:43:88:df:44:39:44:83:90:e5:45:e6:a2: 3b:a3:e4:ac:bc:d2:40:91:a4:92:aa:c8:7d:2d:b3:69:bf:50: 8d:b4:1b:54:36:cd:b3:67:79:8f:e7:e1:aa:e5:0b:59:7a:90: b0:42:58:29:31:95:23:5b:b3:3c:db:e1:36:d5:61:3b:c8:46: f2:b9:60:0a:9c:ac:a1:cd:50:d5:62:a4:55:26:fa:65:05:8b: 08:0a:d8:99:88:07:ed:5e:21:d5:55:17:b9:d7:37:a8:c0:9d: 21:d5:50:a9:9c:5e:e7:d3:ad:fc:3f:31:d1:fc:11:4b:81:17: 88:3b:b7:77:9b:8e:f7:43:be:0f:17:f9:77:a1:a9:d0:62:1a: e0:9c:f8:46:48:58:9e:31:c3:ae:7b:67:3f:ab:3f:f0:9d:77: 2d:5c:b5:e3:32:b7:9d:1c:33:d3:7c:39:5b:a3:67:4f:c0:54: 38:77:00:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7expv1KdKba4imQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OGExMDc4NmItNzNmNC00OGMzLTgxOTItMmNmN2U3YmFmMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjLcu1OFMlm37A5CUyGwrCpWzAS6qKb0QOb 6Rv1CE865uKlGE+3lXGTnwNnfucpiUvTofWiXw3PDNJrF9aeTtF76NtjzXR310Eg tSmMaGjE2iAbxc055NIVxdDthR2bZyrysuzbhjVrMFgODohhH4Cd9TnElg9uzbgj iypYBSRi6yhGCULX9WlG0tiTYXHrJwuPgktMlqLTHFRl2Ga6AKWnOWZgVBNMGhxA b1zrmpejl2PaEw8cn1ZTWfuYYB/+puFQ5W6DEXJuqus4vIfiQo4oUNtfdygpjoTf n+xnQXjRcdL2t1sj7QvJkqv68SH/7rtoyk3fSPOscmNFQptytwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGA/ZrRokztNvQDPGC7SFmNjNiZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTAxOGI1ZTgtMTcyZi0z YWEzLWI4ZDMtYTM4MDViODM3YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBqAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSe0dLMOA+fmxUg5JSUJ7KsU40spQuCu9SHsGHoTN6NeiMSP/8K vdKX7q6V5oDmtK7PL0T2/tReQEdHZq9+Plf58XLhfAMXTArtvlrBskOI30Q5RIOQ 5UXmojuj5Ky80kCRpJKqyH0ts2m/UI20G1Q2zbNneY/n4arlC1l6kLBCWCkxlSNb szzb4TbVYTvIRvK5YAqcrKHNUNVipFUm+mUFiwgK2JmIB+1eIdVVF7nXN6jAnSHV UKmcXufTrfw/MdH8EUuBF4g7t3ebjvdDvg8X+XehqdBiGuCc+EZIWJ4xw657Zz+r P/Cddy1cteMyt50cM9N8OVujZ0/AVDh3APQ= -----END CERTIFICATE-----Generated at Mon Jun 30 15:36:09 2025 by rpki-client