$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa File: 863cfaab-b768-3083-b5d8-e54160403123.roa (raw, json) Hash identifier: DNxsXrVGnFfDj1vmb5NFbWeUKAk39VBT5U6OJ/kDZu8= Subject key identifier: BE:2F:CF:B2:C7:24:41:8C:FE:67:56:BF:02:20:0E:06:39:46:08:C9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290AA64A30A2B0B4B31D6E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100d:b1c6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:aa:64:a3:0a:2b:0b:4b:31:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c6e8b3e7-ff52-4d72-b4a1-63878cf1b4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:26:cd:d5:12:de:04:3c:14:f7:c1:c7:bb: 4d:5e:17:ca:e4:24:34:94:3b:9a:8c:0b:96:b2:e3: 9a:2a:5f:38:15:2d:79:77:8b:21:ff:51:d4:9f:eb: 65:75:0d:0b:8e:67:41:b1:d5:df:9d:ca:d1:9f:82: 0b:94:d1:e8:43:6a:5c:32:be:09:25:30:4e:96:dd: a7:e5:b1:8e:e5:82:62:b1:3b:ad:b3:8e:1c:1a:53: db:a3:24:de:62:b0:9b:0a:94:8c:1e:66:6e:72:c0: 5b:00:8d:af:20:8a:77:4e:9e:b8:1e:d2:5f:b8:c8: 94:dc:be:b3:ed:ec:72:0d:65:b8:ac:a2:fa:82:dd: 3e:1c:db:8e:04:c7:65:a6:94:be:32:a3:b1:02:b9: 16:ed:49:90:17:1b:cb:62:ae:34:e1:24:f4:98:b2: d0:84:d9:2e:70:2c:e7:db:6f:a5:58:89:62:36:4b: 98:53:23:bd:d0:6b:d7:f1:81:e7:a0:8d:d4:b1:c5: ed:b2:24:19:b9:f3:1a:1c:e0:fb:8f:e4:2b:09:0b: f6:5d:c1:dd:35:7f:f4:b5:42:47:4c:ea:06:13:e7: 88:af:11:23:09:16:e1:4e:3b:e6:43:eb:58:77:b5: b4:eb:a7:21:6b:e9:6c:f2:82:55:e8:d2:53:2c:ab: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2F:CF:B2:C7:24:41:8C:FE:67:56:BF:02:20:0E:06:39:46:08:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b1c6::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4c:1e:56:96:24:64:48:54:c6:fa:6f:e3:3b:10:12:26:45: 40:ca:e8:c2:ab:e7:d0:5b:ab:d5:10:8d:10:23:fe:d8:6d:e1: a7:51:7f:3c:8d:3b:82:8b:34:2c:f2:39:2c:02:fb:dc:c5:42: 25:54:f3:85:f3:08:fc:c1:7f:46:b6:c9:df:7e:4e:e5:94:bc: 19:3e:c4:18:18:2e:7e:5a:f1:99:1c:b0:4e:6f:e8:40:96:85: 76:8a:d4:bd:fe:64:4c:7e:74:2c:b7:e2:fa:75:72:da:87:b7: ac:71:40:32:7e:f1:80:8f:e4:c7:82:c4:4c:a8:d8:61:27:4a: 67:5f:81:95:78:52:2a:46:b5:85:ac:25:78:ee:f2:d7:f4:87: f2:1f:c8:88:e9:4b:12:51:a9:b1:f4:51:ef:b7:4c:78:21:02: a0:2f:44:36:aa:37:bb:86:93:45:87:9f:91:d9:77:ce:9a:14: 0f:03:2a:42:1a:ec:ef:7f:24:ef:7f:b4:0a:0c:e6:ff:34:33: 30:f1:39:95:45:b9:16:88:67:69:79:35:33:5a:c7:79:9c:ec: 48:1b:d7:56:30:3f:66:a2:c8:d5:8d:84:a7:4a:80:2d:5b:e4: 99:13:ba:91:b0:b2:7a:ae:d3:73:b6:31:cb:c2:c6:16:08:4b: ff:46:30:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikKpkoworC0sx1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzZlOGIzZTctZmY1Mi00ZDcyLWI0YTEtNjM4NzhjZjFiNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2EmzdUS3gQ8FPfBx7tNXhfK5CQ0lDuajAuW suOaKl84FS15d4sh/1HUn+tldQ0LjmdBsdXfncrRn4ILlNHoQ2pcMr4JJTBOlt2n 5bGO5YJisTuts44cGlPboyTeYrCbCpSMHmZucsBbAI2vIIp3Tp64HtJfuMiU3L6z 7exyDWW4rKL6gt0+HNuOBMdlppS+MqOxArkW7UmQFxvLYq404ST0mLLQhNkucCzn 22+lWIliNkuYUyO90GvX8YHnoI3UscXtsiQZufMaHOD7j+QrCQv2XcHdNX/0tUJH TOoGE+eIrxEjCRbhTjvmQ+tYd7W066cha+ls8oJV6NJTLKuyPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4vz7LHJEGM/mdWvwIgDgY5RgjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYzY2ZhYWItYjc2OC0z MDgzLWI1ZDgtZTU0MTYwNDAzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbHG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdMHlaWJGRIVMb6b+M7EBImRUDK6MKr59Bbq9UQjRAj/tht4adR fzyNO4KLNCzyOSwC+9zFQiVU84XzCPzBf0a2yd9+TuWUvBk+xBgYLn5a8ZkcsE5v 6ECWhXaK1L3+ZEx+dCy34vp1ctqHt6xxQDJ+8YCP5MeCxEyo2GEnSmdfgZV4UipG tYWsJXju8tf0h/IfyIjpSxJRqbH0Ue+3THghAqAvRDaqN7uGk0WHn5HZd86aFA8D KkIa7O9/JO9/tAoM5v80MzDxOZVFuRaIZ2l5NTNax3mc7Egb11YwP2aiyNWNhKdK gC1b5JkTupGwsnqu03O2McvCxhYIS/9GMIQ= -----END CERTIFICATE-----Generated at Thu Jul 3 00:59:47 2025 by rpki-client