$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa File: db4c3497-1529-3987-a469-9d6a8418497e.roa (raw, json) Hash identifier: S01+V9AwFIj8zJ8ZTYj5Qk7TnNYPtc48QZxeyWUf0Lo= Subject key identifier: 93:C4:C7:FE:24:A4:34:6B:15:B9:56:40:8E:F3:02:F7:6D:A0:0F:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290AAE15B8EE175AB848900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100d:be02::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:aa:e1:5b:8e:e1:75:ab:84:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=70057659-05f9-4cef-87b8-8658c729c9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:b0:c2:cf:b0:53:88:13:f9:f3:27:3a:90: cc:83:03:4c:09:dc:f5:8f:41:7b:7b:b5:5a:ae:21: ae:24:cd:d3:da:af:35:0b:ed:f4:d3:07:78:20:27: 3e:71:f8:a4:e6:21:6d:a3:0a:ed:9b:de:05:c3:ef: 14:4b:b6:5e:fc:3a:2f:d3:42:ee:e2:a0:7f:ff:ac: 48:72:74:0f:76:b9:de:a9:6a:1b:f7:0b:de:8d:8c: 8f:68:1f:92:e0:ab:ba:bb:18:0e:a6:cc:de:54:99: be:0d:05:f5:6f:4e:42:93:fb:51:2c:e0:eb:be:de: 3d:ed:9b:03:ff:5a:57:7c:5d:f8:3f:8f:1c:ec:c8: 68:3a:38:d9:bd:98:5b:cf:aa:c0:76:88:3c:ab:35: 36:98:e8:71:2d:5e:46:c3:62:63:0a:cc:78:33:d3: 35:73:94:21:f5:91:f8:ad:0b:34:28:6b:7b:5e:f2: e8:d4:b2:df:37:32:fd:b5:28:7f:70:cc:f0:0a:91: 33:9a:a6:25:8d:71:60:91:2a:38:30:9e:f0:d4:3f: 93:8a:d6:06:fb:46:82:b1:25:8f:73:d9:8d:26:30: 23:16:76:83:ec:f1:a5:c4:b2:9b:0a:1f:42:04:c9: 72:51:8d:50:be:db:9f:33:bd:0c:ca:70:0a:65:b7: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C4:C7:FE:24:A4:34:6B:15:B9:56:40:8E:F3:02:F7:6D:A0:0F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:be02::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:74:2e:03:87:c9:f9:67:b4:c6:e3:57:73:5f:fa:00:34:ce: 56:66:1e:d7:2c:c6:0a:76:6b:61:cb:6e:59:83:da:b7:b1:9f: 74:43:c4:a0:b9:3a:3a:db:a0:10:1e:12:ea:79:4e:7f:d4:74: ac:7e:e7:c9:96:3d:35:e9:d4:9d:91:be:ea:2d:3d:3f:70:04: 8a:48:56:58:d4:3b:2c:de:fe:5c:b6:3d:bb:b8:58:7e:c7:23: e1:76:3f:75:a5:83:4c:a2:28:2f:4a:bd:34:4e:b3:40:3b:0c: 0c:9f:fd:cf:03:81:9c:7a:d2:e4:cd:6c:8f:6e:61:5a:cf:e2: e4:82:5c:f8:c4:e7:3b:7f:31:17:d4:54:e6:a4:a5:fa:18:8f: 20:5b:1c:00:e2:93:7e:34:f6:1c:09:e8:12:a2:5c:16:c0:d1: f5:39:7a:a8:46:a3:36:77:1a:14:5b:f6:a9:08:bb:48:1d:fa: 35:77:19:ac:b2:54:1c:9e:d6:4d:7c:43:72:70:33:0e:0b:28: b9:93:81:77:4c:63:27:15:ba:1a:ce:4f:91:9a:77:a4:9d:7d: 12:11:40:63:01:f7:50:3c:dc:48:b4:6c:e4:d8:32:a2:f8:24: a1:0c:1c:a3:9f:64:2b:4f:02:4b:6c:f6:4a:81:b8:48:e7:d1: 56:e8:57:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikKrhW47hdauEiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NzAwNTc2NTktMDVmOS00Y2VmLTg3YjgtODY1OGM3MjljOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKKwws+wU4gT+fMnOpDMgwNMCdz1j0F7e7Va riGuJM3T2q81C+300wd4ICc+cfik5iFtowrtm94Fw+8US7Ze/Dov00Lu4qB//6xI cnQPdrneqWob9wvejYyPaB+S4Ku6uxgOpszeVJm+DQX1b05Ck/tRLODrvt497ZsD /1pXfF34P48c7MhoOjjZvZhbz6rAdog8qzU2mOhxLV5Gw2JjCsx4M9M1c5Qh9ZH4 rQs0KGt7XvLo1LLfNzL9tSh/cMzwCpEzmqYljXFgkSo4MJ7w1D+TitYG+0aCsSWP c9mNJjAjFnaD7PGlxLKbCh9CBMlyUY1QvtufM70MynAKZbdrNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPEx/4kpDRrFblWQI7zAvdtoA9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI0YzM0OTctMTUyOS0z OTg3LWE0NjktOWQ2YTg0MTg0OTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDb4C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIt0LgOHyflntMbjV3Nf+gA0zlZmHtcsxgp2a2HLblmD2rexn3RD xKC5OjrboBAeEup5Tn/UdKx+58mWPTXp1J2RvuotPT9wBIpIVljUOyze/ly2Pbu4 WH7HI+F2P3Wlg0yiKC9KvTROs0A7DAyf/c8DgZx60uTNbI9uYVrP4uSCXPjE5zt/ MRfUVOakpfoYjyBbHADik3409hwJ6BKiXBbA0fU5eqhGozZ3GhRb9qkIu0gd+jV3 GayyVBye1k18Q3JwMw4LKLmTgXdMYycVuhrOT5Gad6SdfRIRQGMB91A83Ei0bOTY MqL4JKEMHKOfZCtPAkts9kqBuEjn0VboVy0= -----END CERTIFICATE-----Generated at Wed Jul 2 20:07:54 2025 by rpki-client