$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa File: f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa (raw, json) Hash identifier: Q4z6o7LW/X79KiPx3F5CvrpgO301lyxytCpmpf0+g3M= Subject key identifier: 61:14:30:9A:53:5A:D7:43:DE:A4:F7:5C:42:AA:E4:81:D0:A3:BC:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B44542EFF9C3C84742C28 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 6167 IP address blocks: 2600:1000:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:44:54:2e:ff:9c:3c:84:74:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=99e58972-2f9f-477f-b640-85d04e874dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:10:0c:90:20:84:ef:7c:77:84:ae:55:5c: 38:74:dd:50:90:de:22:a5:64:83:bd:16:09:2a:81: 3c:bf:2d:9e:de:82:61:cd:56:f6:17:0c:c1:82:60: fc:94:a2:55:0a:b8:34:a2:e0:91:36:a4:bd:4d:e1: a1:ac:6b:91:2b:83:44:fe:31:e0:83:5f:9a:27:28: 1e:32:93:3e:99:41:fc:15:da:9a:26:a6:3d:0a:6d: ff:cf:cf:44:03:74:e0:43:dd:3d:b5:55:e2:22:28: df:db:fe:3b:93:ac:2c:9a:c2:44:d1:b8:3a:5e:44: 0c:2d:98:20:b0:a1:73:2c:f4:aa:99:71:5e:51:ca: d7:94:33:57:91:11:22:6a:6c:29:8f:b5:56:7e:90: 3c:7a:5f:fc:53:a4:b9:93:9d:d6:f5:21:e7:b0:47: dd:a6:29:29:b6:07:6c:6f:dc:13:1f:79:1f:86:27: e3:10:91:fc:4e:a8:73:2b:b0:82:b2:8c:29:89:9d: 48:ce:b3:e4:9f:42:20:41:85:43:10:85:ed:3e:9d: 49:5b:e3:22:0c:fa:d2:f3:d0:fa:44:b2:f3:f3:2d: 06:54:c1:56:f7:84:e6:1d:1f:a4:67:c5:18:de:c5: d9:d5:5d:ba:02:44:9b:37:3b:61:72:1c:43:83:42: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:14:30:9A:53:5A:D7:43:DE:A4:F7:5C:42:AA:E4:81:D0:A3:BC:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:81:30:71:0d:c5:67:ec:66:e8:7a:95:7b:8a:a0:8b:87:05: 2f:b2:e2:22:91:84:4b:12:2a:39:05:97:d6:6a:d0:ac:2b:8a: 7e:59:fa:28:5c:80:0a:9f:c9:85:97:55:f1:90:ad:8d:1c:ca: 6e:31:7f:69:87:10:d7:51:b6:c5:65:00:62:cd:b1:be:fc:29: 26:af:68:de:f7:72:ab:2b:bb:10:ea:ec:78:57:1a:8f:56:a1: b4:28:2a:1d:80:ea:a1:25:57:41:e5:47:e2:62:94:69:33:81: a1:6a:6c:82:e1:35:af:71:5c:db:78:a7:19:ca:49:10:70:4e: 34:84:78:8d:82:b9:d4:e6:98:2a:db:79:41:3c:e2:72:74:b2: 32:8a:04:88:3b:1e:f6:14:b4:a3:b0:1c:e3:8c:75:6c:b9:95: ff:a4:56:fa:00:be:76:03:8a:ea:2f:b8:bd:2d:37:a9:88:98: c0:57:66:b8:fa:94:8d:a5:eb:c3:53:bb:81:fa:93:c7:65:94: 93:81:b3:fc:82:a9:8c:80:0b:40:f9:71:d8:48:00:6d:81:22: 3d:d6:1c:e7:ff:36:23:dd:43:a6:12:83:47:44:10:af:34:70: d3:d2:7b:b1:58:83:23:c5:bc:dd:e4:90:4a:c9:7e:29:34:8d: 4e:97:c8:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0RULv+cPIR0LCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OTllNTg5NzItMmY5Zi00NzdmLWI2NDAtODVkMDRlODc0ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqkQDJAghO98d4SuVVw4dN1QkN4ipWSDvRYJ KoE8vy2e3oJhzVb2FwzBgmD8lKJVCrg0ouCRNqS9TeGhrGuRK4NE/jHgg1+aJyge MpM+mUH8FdqaJqY9Cm3/z89EA3TgQ909tVXiIijf2/47k6wsmsJE0bg6XkQMLZgg sKFzLPSqmXFeUcrXlDNXkREiamwpj7VWfpA8el/8U6S5k53W9SHnsEfdpikptgds b9wTH3kfhifjEJH8TqhzK7CCsowpiZ1IzrPkn0IgQYVDEIXtPp1JW+MiDPrS89D6 RLLz8y0GVMFW94TmHR+kZ8UY3sXZ1V26AkSbNzthchxDg0IUSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEUMJpTWtdD3qT3XEKq5IHQo7xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjUzYjhiNTktMmU1Ny0z ZTk3LWFiMGMtMTFhZDc1ZWQ5NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGBMHENxWfsZuh6lXuKoIuHBS+y4iKRhEsSKjkFl9Zq0Kwrin5Z +ihcgAqfyYWXVfGQrY0cym4xf2mHENdRtsVlAGLNsb78KSavaN73cqsruxDq7HhX Go9WobQoKh2A6qElV0HlR+JilGkzgaFqbILhNa9xXNt4pxnKSRBwTjSEeI2CudTm mCrbeUE84nJ0sjKKBIg7HvYUtKOwHOOMdWy5lf+kVvoAvnYDiuovuL0tN6mImMBX Zrj6lI2l68NTu4H6k8dllJOBs/yCqYyAC0D5cdhIAG2BIj3WHOf/NiPdQ6YSg0dE EK80cNPSe7FYgyPFvN3kkErJfik0jU6XyOc= -----END CERTIFICATE-----Generated at Mon Jun 30 14:40:52 2025 by rpki-client