$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa File: de591f85-7a9b-391e-bfe2-55ee6efb7047.roa (raw, json) Hash identifier: wiV28qoPIvN2rCThzjhHagNqAC1rmMAi2cRPFfrbpFQ= Subject key identifier: 99:F2:D5:75:67:86:AF:FC:5D:14:9B:07:37:35:31:9C:9A:43:3E:35 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B48835FD4FA7E9F49D770 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 6167 IP address blocks: 2600:1003:b1d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:48:83:5f:d4:fa:7e:9f:49:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=e7efbc8b-ac73-47da-8bb9-ff5922660c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:be:3e:7b:58:7d:18:72:46:5f:46:d0:70: 66:00:4a:98:8e:d0:eb:e4:6d:6f:d6:25:4f:f6:7c: cc:35:c9:ad:60:09:95:4a:03:7d:ca:5e:1a:db:b8: 52:a8:fe:c5:93:5c:a8:c3:02:cc:00:49:9d:5e:53: 91:0f:40:56:4b:1c:0e:05:88:d6:3e:4d:e1:c8:6f: f8:e8:d5:4a:58:15:ff:a2:2d:77:c0:5a:b0:b6:98: 02:cd:a3:17:29:ea:18:3e:bf:d4:40:7e:9b:f1:fd: 21:50:5a:f0:61:8e:c1:94:9c:c3:4e:aa:cb:5e:57: 18:40:bd:57:54:b2:58:93:c9:3b:d9:7d:e5:e3:a2: a5:e9:7b:4d:29:79:29:9a:6a:bb:6c:d6:da:77:60: 5b:5b:3d:47:9f:fd:53:57:bb:96:53:6e:3d:0a:6c: 88:26:0b:83:75:f3:5b:84:64:b3:65:20:73:64:2d: 5a:63:90:32:4b:eb:73:d8:81:e1:a3:d7:d0:95:26: b3:fb:c0:ef:80:6f:7e:b9:34:79:99:92:14:b7:76: 63:8b:ea:3b:5a:cc:22:1a:d6:b2:3f:42:b0:8d:03: 82:9d:68:b1:3f:54:d6:a6:28:99:9e:16:61:e6:8b: 86:42:96:b3:f7:fc:8a:7b:e1:51:46:66:56:fb:bc: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F2:D5:75:67:86:AF:FC:5D:14:9B:07:37:35:31:9C:9A:43:3E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:b1d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:77:76:02:98:0f:bd:e5:31:0c:ab:c1:32:65:c4:da:95:e4: f2:d8:13:d3:dd:73:28:28:df:50:08:fe:0f:62:4b:8c:b5:ef: 2a:e8:d7:b9:dc:5c:aa:44:65:6d:a8:f3:9b:93:d6:8e:38:39: 38:0a:60:f6:db:a8:ab:3d:e7:ab:77:04:0b:3e:31:f1:2e:0e: d7:60:58:e0:88:5d:74:b7:fe:8f:dc:83:16:96:c1:ef:9b:fb: 51:e2:07:a0:43:cd:d1:11:ac:c6:55:2f:1f:42:b6:95:b9:a0: 59:c6:ee:9f:cb:0a:97:8e:13:14:78:40:90:14:6e:54:8b:70: d2:be:f7:74:f0:3e:99:3a:f5:6c:15:4b:c7:e9:f7:d8:0e:18: f6:94:01:6b:cc:d3:ec:64:d1:10:6d:79:9a:d0:13:2a:6f:ba: d8:fe:b8:4f:ef:fa:b8:d1:a5:9e:30:02:c5:77:ad:6a:25:24: f1:60:6d:7a:3c:01:38:1a:69:d0:37:45:7d:fa:36:e2:7a:17: a5:52:e7:b9:d0:bc:9e:df:c3:a6:78:fc:81:47:be:08:d3:d9: d4:5c:b2:ef:98:ce:9c:59:10:69:e5:f9:6c:7c:d2:a5:e3:3d: e9:23:f2:32:99:31:1b:74:24:0f:4e:9e:09:60:8d:06:59:9c: bd:57:43:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0iDX9T6fp9J13AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZTdlZmJjOGItYWM3My00N2RhLThiYjktZmY1OTIyNjYwYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlha+PntYfRhyRl9G0HBmAEqYjtDr5G1v1iVP 9nzMNcmtYAmVSgN9yl4a27hSqP7Fk1yowwLMAEmdXlORD0BWSxwOBYjWPk3hyG/4 6NVKWBX/oi13wFqwtpgCzaMXKeoYPr/UQH6b8f0hUFrwYY7BlJzDTqrLXlcYQL1X VLJYk8k72X3l46Kl6XtNKXkpmmq7bNbad2BbWz1Hn/1TV7uWU249CmyIJguDdfNb hGSzZSBzZC1aY5AyS+tz2IHho9fQlSaz+8DvgG9+uTR5mZIUt3Zji+o7WswiGtay P0KwjQOCnWixP1TWpiiZnhZh5ouGQpaz9/yKe+FRRmZW+7xSVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJny1XVnhq/8XRSbBzc1MZyaQz41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGU1OTFmODUtN2E5Yi0z OTFlLWJmZTItNTVlZTZlZmI3MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA7HQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHx3dgKYD73lMQyrwTJlxNqV5PLYE9Pdcygo31AI/g9iS4y17yro 17ncXKpEZW2o85uT1o44OTgKYPbbqKs956t3BAs+MfEuDtdgWOCIXXS3/o/cgxaW we+b+1HiB6BDzdERrMZVLx9CtpW5oFnG7p/LCpeOExR4QJAUblSLcNK+93TwPpk6 9WwVS8fp99gOGPaUAWvM0+xk0RBteZrQEypvutj+uE/v+rjRpZ4wAsV3rWolJPFg bXo8ATgaadA3RX36NuJ6F6VS57nQvJ7fw6Z4/IFHvgjT2dRcsu+YzpxZEGnl+Wx8 0qXjPekj8jKZMRt0JA9OnglgjQZZnL1XQ0c= -----END CERTIFICATE-----Generated at Wed Jul 2 06:43:17 2025 by rpki-client