$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa File: a67bd7b6-53e3-3353-b7ea-05521b667b83.roa (raw, json) Hash identifier: 9caKegUxQqD2Z1iOs2ofSAqLeDM1OmXo3b/kgU3tZU0= Subject key identifier: 76:50:08:68:38:64:9F:B6:3A:E8:B6:53:61:3C:CA:1D:AA:53:A5:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B44A587E8A2A931C5FC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 6167 IP address blocks: 2600:1000:b1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:44:a5:87:e8:a2:a9:31:c5:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=0dcf211c-65eb-4906-a00e-a6377638824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:fc:78:85:35:69:3b:b6:b7:0c:93:1d:ae: ac:bc:79:d9:3f:2a:10:7f:b6:70:e2:71:36:fb:88: bc:aa:9e:e7:c1:16:fd:82:0a:a4:90:b5:48:ff:c9: 5c:8c:31:dc:0b:a6:ba:ab:ba:8c:c5:93:6a:3b:a8: 3e:78:c9:60:e8:63:f9:6e:1f:1c:78:d6:e2:56:da: 8f:7f:5a:08:eb:8d:a9:d0:51:b2:b6:ef:65:bd:13: af:ec:c8:39:11:19:ff:9a:4e:2c:5e:89:75:38:4c: ef:18:22:f9:c8:56:a5:6f:62:5e:54:ae:2e:7d:ab: 73:6b:37:d5:ce:da:52:ac:ba:db:6a:fa:59:5a:d9: 86:22:90:1d:40:84:93:44:b4:9c:df:9b:5c:e0:c6: 4f:c3:6e:66:cf:7a:5f:7e:14:ed:18:98:24:b8:52: 33:4e:c9:90:85:e0:69:3b:b8:0f:42:9b:b0:6f:cf: d3:7a:78:b3:6d:e0:df:35:2d:62:8b:55:d3:41:a1: 6c:ae:32:91:8c:3c:51:9e:fa:b4:0f:c3:aa:5e:7a: 55:b1:f7:3b:86:bb:80:a4:6b:93:d1:ab:f4:c9:56: 75:b5:67:5d:49:12:0b:66:99:4d:aa:6c:c3:ac:e9: f9:e1:b7:c0:bd:b0:e1:24:54:0e:49:f4:ac:12:84: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:50:08:68:38:64:9F:B6:3A:E8:B6:53:61:3C:CA:1D:AA:53:A5:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:b1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:da:05:eb:40:ba:d9:50:17:43:93:c8:d4:0a:3c:5e:b7:1e: a6:8c:f4:99:8f:47:46:da:f0:ff:ea:f1:79:82:a8:ef:4c:b5: 70:69:95:87:5b:3c:9b:92:57:6c:1e:33:71:0f:6d:85:7f:c3: 0e:61:5c:67:19:c5:cb:eb:15:0c:c6:64:9a:b9:54:29:81:20: 03:20:62:39:4a:de:45:79:ae:2c:af:e0:f1:da:9c:01:13:c0: ac:65:1d:7f:a1:70:35:13:4f:58:3e:37:ec:da:70:86:5a:91: 93:4a:a4:4e:6f:a3:04:22:94:53:03:95:58:95:dd:26:b4:c7: 58:e3:b4:97:4f:90:59:c8:a6:05:25:51:54:e7:1c:a2:31:8f: 26:85:45:0f:8f:da:ae:df:3b:1b:35:21:80:3e:8f:c3:63:44: 7e:c5:5d:b6:b8:47:75:da:89:61:4f:3c:d0:82:a6:93:e4:b1: c1:b9:62:ca:59:d9:2c:9f:70:17:2d:fb:5b:79:a3:f7:c9:ad: e4:78:7d:38:9c:aa:38:2d:36:5d:9e:20:53:9d:7a:d8:e1:db: 3b:58:c5:99:44:63:ce:52:cd:fb:53:9a:c7:82:9e:37:ca:44: 27:02:8e:c0:96:2b:8e:1b:1a:2b:f6:30:e2:6a:29:55:16:79: 1d:6a:e8:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0Slh+iiqTHF/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MGRjZjIxMWMtNjVlYi00OTA2LWEwMGUtYTYzNzc2Mzg4MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukL8eIU1aTu2twyTHa6svHnZPyoQf7Zw4nE2 +4i8qp7nwRb9ggqkkLVI/8lcjDHcC6a6q7qMxZNqO6g+eMlg6GP5bh8ceNbiVtqP f1oI642p0FGytu9lvROv7Mg5ERn/mk4sXol1OEzvGCL5yFalb2JeVK4ufatzazfV ztpSrLrbavpZWtmGIpAdQISTRLSc35tc4MZPw25mz3pffhTtGJgkuFIzTsmQheBp O7gPQpuwb8/TenizbeDfNS1ii1XTQaFsrjKRjDxRnvq0D8OqXnpVsfc7hruApGuT 0av0yVZ1tWddSRILZplNqmzDrOn54bfAvbDhJFQOSfSsEoQwowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZQCGg4ZJ+2Oui2U2E8yh2qU6UAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTY3YmQ3YjYtNTNlMy0z MzUzLWI3ZWEtMDU1MjFiNjY3YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPaBetAutlQF0OTyNQKPF63HqaM9JmPR0ba8P/q8XmCqO9MtXBp lYdbPJuSV2weM3EPbYV/ww5hXGcZxcvrFQzGZJq5VCmBIAMgYjlK3kV5riyv4PHa nAETwKxlHX+hcDUTT1g+N+zacIZakZNKpE5vowQilFMDlViV3Sa0x1jjtJdPkFnI pgUlUVTnHKIxjyaFRQ+P2q7fOxs1IYA+j8NjRH7FXba4R3XaiWFPPNCCppPkscG5 YspZ2SyfcBct+1t5o/fJreR4fTicqjgtNl2eIFOdetjh2ztYxZlEY85SzftTmseC njfKRCcCjsCWK44bGiv2MOJqKVUWeR1q6Jc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:08:08 2025 by rpki-client