$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c881c8a7-bb97-3404-b548-2a0a8d6c97e5.roa File: c881c8a7-bb97-3404-b548-2a0a8d6c97e5.roa (raw, json) Hash identifier: MU7quxCXrJFrsjjlWc6fkZF/90Bg/Szoc8JrmsGCI0I= Subject key identifier: D0:9F:DC:D1:2D:1C:0E:EB:D5:B7:AA:0C:31:06:63:EA:11:B8:1D:79 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EB4ACF286A1E7DC24EC62900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c881c8a7-bb97-3404-b548-2a0a8d6c97e5.roa Signing time: Tue 20 May 2025 19:39:31 +0000 ROA not before: Tue 20 May 2025 19:39:31 +0000 ROA not after: Mon 18 Aug 2025 19:39:31 +0000 asID: 6167 IP address blocks: 2600:1012:11d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:4a:cf:28:6a:1e:7d:c2:4e:c6:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 19:39:31 2025 GMT Not After : Aug 18 19:39:31 2025 GMT Subject: CN=058104df-2212-43c0-aa17-174675718099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:8d:45:d1:a1:0b:0a:54:ae:f8:65:42:f3: a9:f9:e6:8d:9a:3f:69:7c:49:c4:49:64:0f:83:e0: 14:c6:62:8e:03:a5:22:5a:af:60:dd:1c:b8:97:f7: 50:fb:49:43:2c:c2:4f:80:eb:2b:b9:16:77:8c:bc: 6f:88:12:65:16:a6:72:28:f1:03:f6:b2:0d:bc:17: 77:83:d5:17:53:3f:26:e9:be:8b:0c:03:12:39:b4: 65:e3:4d:0a:7c:24:78:46:35:24:f5:61:4a:9c:45: 63:90:a8:db:3c:ab:ab:ce:50:4d:0d:0b:c7:56:22: e9:4f:90:f8:8b:d8:0a:1e:fd:8f:40:7a:ff:0c:0b: eb:b5:63:e9:3a:3a:d9:ee:a3:55:a3:5d:f0:cf:7c: 78:15:82:a9:98:7a:86:43:ff:75:a8:8d:19:56:de: a9:d3:c0:f4:29:9d:ec:6f:16:b9:3e:c6:a0:62:23: d7:5c:49:85:5e:43:a0:96:3d:b5:2b:65:6b:29:f4: 4f:b9:3e:f7:ac:37:73:db:cd:da:71:78:d3:2b:c1: 4c:93:34:05:d5:c5:d7:19:0d:ab:43:94:f6:1d:a8: 9e:6d:eb:46:34:67:f0:65:fd:87:e4:56:95:03:53: e2:85:17:a3:56:05:d3:de:c3:1e:ca:7a:24:de:f1: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9F:DC:D1:2D:1C:0E:EB:D5:B7:AA:0C:31:06:63:EA:11:B8:1D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c881c8a7-bb97-3404-b548-2a0a8d6c97e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1012:11d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:74:2d:70:6e:c1:75:fc:2d:b8:75:21:58:95:ed:54:60:8d: 8f:36:22:e3:4c:65:28:43:c1:e6:e9:81:2b:b5:59:27:71:03: 49:d4:ff:df:48:61:76:8b:c0:d3:98:a2:9b:42:92:57:9d:7e: 4f:39:a4:ea:76:95:ca:57:b7:a8:85:97:71:2a:fb:2d:29:fa: 70:4b:5f:3d:40:61:a7:34:a4:60:4b:5c:fb:9d:a2:36:88:c7: 62:83:c6:63:47:a3:63:e5:72:3b:66:f0:13:11:6e:a9:07:e6: c7:f9:44:99:64:31:2b:9f:c1:54:32:75:41:22:57:12:5f:20: 6a:78:89:73:b8:74:bd:7d:76:87:3a:bd:c0:e7:82:5a:2a:fe: 0a:88:71:b7:57:99:3c:e4:e0:10:83:da:aa:42:0b:56:22:d6: a5:d1:3e:19:81:37:f7:d9:7c:ba:22:5d:0e:86:84:01:90:5d: df:8e:d2:21:a8:11:fe:4d:6f:fb:88:cf:b6:58:14:81:ad:f1: e6:31:3c:21:69:72:aa:57:83:47:ed:04:5e:af:c1:34:0a:d6: 0c:96:12:a4:23:5e:02:57:24:77:7c:8b:f6:4c:0f:4d:10:cd: cb:4c:db:4b:a9:fc:69:03:0c:0e:a2:e9:5d:e5:5f:22:17:0a: e1:b8:6b:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnrSs8oah59wk7GKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDE5MzkzMVoXDTI1MDgxODE5MzkzMVowLzEtMCsGA1UEAxMk MDU4MTA0ZGYtMjIxMi00M2MwLWFhMTctMTc0Njc1NzE4MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPCNRdGhCwpUrvhlQvOp+eaNmj9pfEnESWQP g+AUxmKOA6UiWq9g3Ry4l/dQ+0lDLMJPgOsruRZ3jLxviBJlFqZyKPED9rINvBd3 g9UXUz8m6b6LDAMSObRl400KfCR4RjUk9WFKnEVjkKjbPKurzlBNDQvHViLpT5D4 i9gKHv2PQHr/DAvrtWPpOjrZ7qNVo13wz3x4FYKpmHqGQ/91qI0ZVt6p08D0KZ3s bxa5PsagYiPXXEmFXkOglj21K2VrKfRPuT73rDdz283acXjTK8FMkzQF1cXXGQ2r Q5T2HaiebetGNGfwZf2H5FaVA1PihRejVgXT3sMeynok3vGF2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNCf3NEtHA7r1beqDDEGY+oRuB15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzg4MWM4YTctYmI5Ny0z NDA0LWI1NDgtMmEwYThkNmM5N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEhHQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh0LXBuwXX8Lbh1IViV7VRgjY82IuNMZShDwebpgSu1WSdxA0nU /99IYXaLwNOYoptCkledfk85pOp2lcpXt6iFl3Eq+y0p+nBLXz1AYac0pGBLXPud ojaIx2KDxmNHo2Plcjtm8BMRbqkH5sf5RJlkMSufwVQydUEiVxJfIGp4iXO4dL19 doc6vcDngloq/gqIcbdXmTzk4BCD2qpCC1Yi1qXRPhmBN/fZfLoiXQ6GhAGQXd+O 0iGoEf5Nb/uIz7ZYFIGt8eYxPCFpcqpXg0ftBF6vwTQK1gyWEqQjXgJXJHd8i/ZM D00QzctM20up/GkDDA6i6V3lXyIXCuG4a40= -----END CERTIFICATE-----Generated at Tue Jul 1 03:11:30 2025 by rpki-client