$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa File: af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa (raw, json) Hash identifier: yS3Mkv2ZVIer+m/1D2lIaHLpOQw0WM0rp+3kOfiz2aI= Subject key identifier: 17:E6:4F:8D:38:27:74:1B:1E:B0:36:11:52:4D:D7:B1:A8:DC:2A:3C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849FEE7FD0EFA1390D115BB5180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa Signing time: Tue 27 May 2025 20:16:34 +0000 ROA not before: Tue 27 May 2025 20:16:34 +0000 ROA not after: Mon 25 Aug 2025 20:16:34 +0000 asID: 6167 IP address blocks: 2600:1014:b200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:e7:fd:0e:fa:13:90:d1:15:bb:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 27 20:16:34 2025 GMT Not After : Aug 25 20:16:34 2025 GMT Subject: CN=a0e28828-b997-4087-8877-bd5733af88ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:e7:23:b3:23:a5:08:f6:b8:96:80:7d:ff: f0:38:7c:f1:e6:c7:67:63:dd:0a:fe:57:ad:1b:ab: 47:a3:9e:29:a5:02:cb:5c:a6:ce:c2:79:58:63:8c: 50:5b:69:37:d1:93:90:b0:48:39:0e:e7:c5:d5:98: 9a:25:3a:ad:7a:e2:3c:96:50:bb:ec:e9:1a:2c:9b: fd:3c:60:cf:73:0e:d4:06:93:a1:23:c7:94:57:1b: 5d:a4:6e:7e:5c:6b:6a:96:9d:21:7a:94:3d:2d:5d: b1:42:e4:21:4b:89:2f:5f:38:58:7e:7a:33:ac:6a: 1c:42:a6:49:54:06:65:7c:2e:30:fc:0b:d8:6e:95: c2:c0:22:48:a1:ef:53:3c:5d:d1:4d:74:45:de:d6: 62:54:99:9d:74:76:1b:05:2e:b4:a2:be:13:d2:b0: 21:58:3c:bc:5d:71:ee:ec:32:33:eb:86:44:ec:97: f0:5e:41:81:1f:17:e9:46:f5:6d:8d:5a:d1:6e:b3: fa:fd:b7:34:8b:b7:7d:8a:2e:ef:e3:b3:98:8e:54: fb:c0:88:d4:f9:bb:ed:19:44:94:f8:2f:c8:78:ed: 3a:6a:09:b6:45:22:6d:90:f3:e3:5c:f6:10:fe:4f: de:0c:5f:cb:7c:80:96:61:ee:87:89:cf:c8:f9:69: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:4F:8D:38:27:74:1B:1E:B0:36:11:52:4D:D7:B1:A8:DC:2A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1014:b200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9a:ed:64:1d:4d:71:ff:83:d6:f1:12:b7:da:0d:22:7a:da: 2b:22:a9:27:68:eb:e7:96:c1:52:7a:16:45:8e:02:bd:16:d1: 16:3b:ee:e1:fc:28:dc:35:aa:89:f6:b1:72:d3:ee:c5:e4:48: f2:40:d4:c1:a1:e4:31:62:58:a6:4c:30:34:b1:ff:0f:8f:11: ca:29:16:c3:50:f4:ff:ae:83:cb:fb:8c:4f:82:54:31:58:52: df:14:e8:e7:44:37:a5:6e:aa:07:df:e0:cd:6e:72:67:45:c6: 6e:8d:fd:48:f2:7b:0a:e9:4b:b9:e2:9a:b2:39:d3:5e:4c:1e: c6:93:d0:44:f0:6f:73:dd:de:d3:ec:e1:3c:d0:65:80:3c:b7: 68:49:e5:3a:3f:a1:f0:6d:f8:0b:70:28:58:78:39:4a:f7:26: 3f:64:47:4f:e6:13:9d:8c:3e:07:e0:f7:a3:2e:e1:9c:6b:69: ea:a2:e5:23:68:a0:f7:37:93:37:33:94:b9:1b:8c:a2:f5:09: 41:b6:04:9f:a0:3b:45:60:43:b4:48:ee:16:4a:e0:fd:43:61: 47:ee:49:a3:40:9e:c2:fc:97:37:17:06:56:62:9b:bb:ed:40: a6:0e:a0:64:c0:90:c1:d6:b3:9d:15:17:1d:1d:1a:50:af:25: 60:72:ad:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+5/0O+hOQ0RW7UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNzIwMTYzNFoXDTI1MDgyNTIwMTYzNFowLzEtMCsGA1UEAxMk YTBlMjg4MjgtYjk5Ny00MDg3LTg4NzctYmQ1NzMzYWY4OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvnI7MjpQj2uJaAff/wOHzx5sdnY90K/let G6tHo54ppQLLXKbOwnlYY4xQW2k30ZOQsEg5DufF1ZiaJTqteuI8llC77OkaLJv9 PGDPcw7UBpOhI8eUVxtdpG5+XGtqlp0hepQ9LV2xQuQhS4kvXzhYfnozrGocQqZJ VAZlfC4w/AvYbpXCwCJIoe9TPF3RTXRF3tZiVJmddHYbBS60or4T0rAhWDy8XXHu 7DIz64ZE7JfwXkGBHxfpRvVtjVrRbrP6/bc0i7d9ii7v47OYjlT7wIjU+bvtGUSU +C/IeO06agm2RSJtkPPjXPYQ/k/eDF/LfICWYe6Hic/I+WnoQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfmT404J3QbHrA2EVJN17Go3Co8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY5NzRiMWQtYzhmZS0z MzA0LWI0Y2MtOGQxN2EyYmYxMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHma7WQdTXH/g9bxErfaDSJ62isiqSdo6+eWwVJ6FkWOAr0W0RY7 7uH8KNw1qon2sXLT7sXkSPJA1MGh5DFiWKZMMDSx/w+PEcopFsNQ9P+ug8v7jE+C VDFYUt8U6OdEN6Vuqgff4M1ucmdFxm6N/UjyewrpS7nimrI5015MHsaT0ETwb3Pd 3tPs4TzQZYA8t2hJ5To/ofBt+AtwKFh4OUr3Jj9kR0/mE52MPgfg96Mu4Zxraeqi 5SNooPc3kzczlLkbjKL1CUG2BJ+gO0VgQ7RI7hZK4P1DYUfuSaNAnsL8lzcXBlZi m7vtQKYOoGTAkMHWs50VFx0dGlCvJWByrSM= -----END CERTIFICATE-----Generated at Mon Jun 30 14:22:11 2025 by rpki-client