$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27843dd2-2d71-356f-98f6-ae959bd3d057.roa File: 27843dd2-2d71-356f-98f6-ae959bd3d057.roa (raw, json) Hash identifier: msql8PGYzTUcGgKZS9XD9fwn90ZBd+tjRTc2dr/rN9U= Subject key identifier: 4F:15:D9:8A:C3:4D:A9:32:11:A6:25:A2:DA:46:C0:AA:DA:EC:0F:79 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA0D268334A118532639BAA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27843dd2-2d71-356f-98f6-ae959bd3d057.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 22394 IP address blocks: 2600:1007:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:68:33:4a:11:85:32:63:9b:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0fff3dfa-b8b5-43fd-b2ea-762393afeb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:3b:45:66:ba:20:1c:dd:e2:5d:be:ef:0c: d5:db:5c:76:2e:6e:3b:61:61:cb:c9:fe:56:bb:e2: b7:c5:1d:31:20:18:d5:e5:fd:bc:12:0d:65:ec:c4: 79:bb:1c:1e:83:35:5d:97:87:65:55:12:ab:a5:1d: bd:d0:8f:0e:41:ef:10:33:e0:13:17:75:69:50:4b: f5:36:55:f2:d1:a9:04:4e:1b:62:49:67:83:3a:16: fd:f7:5c:23:8d:14:70:e8:7b:25:a6:9c:fa:14:7f: 50:70:7f:11:d0:93:a6:79:e2:51:a2:80:8d:e4:23: 45:56:e4:20:83:c5:0a:09:77:6b:78:2d:83:29:c7: 65:32:b8:3b:8b:84:1f:47:f8:93:35:81:13:3d:0a: 55:af:ba:a6:89:04:c1:b1:67:0d:45:fe:58:a0:cc: 2b:fd:45:c3:44:1a:22:93:88:09:20:c1:b0:8d:a5: ad:5a:ef:7a:6b:d3:6f:09:e9:69:02:cb:a6:db:40: a2:52:b6:62:c0:c0:3a:b8:9b:20:01:61:e0:f0:67: d2:27:32:86:55:a4:19:a9:59:f1:4d:bd:70:18:0c: fb:dd:f6:05:29:73:9f:b3:dc:58:e4:44:a0:dd:6b: bd:61:52:0f:ac:6c:64:5d:55:77:cb:33:d2:e2:ae: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:D9:8A:C3:4D:A9:32:11:A6:25:A2:DA:46:C0:AA:DA:EC:0F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27843dd2-2d71-356f-98f6-ae959bd3d057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1007:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:15:05:e2:8a:86:fa:66:c1:e1:9f:7f:89:63:6a:b0:e9:7e: 18:96:7f:8a:28:19:7e:0e:5a:25:10:01:a1:e2:21:36:bf:f3: 06:24:19:aa:1c:9c:3a:fe:8b:b2:81:58:96:c4:58:f4:a0:dd: da:6c:e0:21:6c:12:f0:07:cf:01:0f:4a:67:ea:22:d8:b1:d4: 4d:28:a5:7a:ef:31:79:6b:1d:fb:6f:94:17:19:2f:c5:e9:16: 6a:04:ef:05:6d:48:f1:d9:e5:2e:54:fb:b7:31:09:61:19:0d: ee:70:1c:09:48:da:a0:de:45:9a:e9:03:e1:3d:a4:9f:8c:84: 1c:16:5c:11:b9:1b:b7:c6:90:28:9f:9b:83:db:02:ff:14:a7: 1b:40:3a:57:56:27:73:59:43:3a:c1:dd:45:52:de:64:3f:ac: 9b:a5:60:43:77:ea:7a:15:f1:dc:82:25:4a:3e:87:d5:e6:75: bd:2d:62:9b:21:9f:35:32:9e:c3:d3:92:e5:89:72:17:df:85: 03:7e:63:7f:ba:72:9b:43:2e:1f:da:0b:e3:91:fb:3e:87:e8: 1f:9d:b4:02:65:42:2f:8b:5c:86:55:a2:09:e4:8d:db:05:b4: d9:31:64:76:89:b7:79:2c:68:2b:14:1a:72:95:cc:7a:84:79: 1f:8a:79:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0mgzShGFMmObqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGZmZjNkZmEtYjhiNS00M2ZkLWIyZWEtNzYyMzkzYWZlYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZo7RWa6IBzd4l2+7wzV21x2Lm47YWHLyf5W u+K3xR0xIBjV5f28Eg1l7MR5uxwegzVdl4dlVRKrpR290I8OQe8QM+ATF3VpUEv1 NlXy0akEThtiSWeDOhb991wjjRRw6Hslppz6FH9QcH8R0JOmeeJRooCN5CNFVuQg g8UKCXdreC2DKcdlMrg7i4QfR/iTNYETPQpVr7qmiQTBsWcNRf5YoMwr/UXDRBoi k4gJIMGwjaWtWu96a9NvCelpAsum20CiUrZiwMA6uJsgAWHg8GfSJzKGVaQZqVnx Tb1wGAz73fYFKXOfs9xY5ESg3Wu9YVIPrGxkXVV3yzPS4q5G7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8V2YrDTakyEaYlotpGwKra7A95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjc4NDNkZDItMmQ3MS0z NTZmLTk4ZjYtYWU5NTliZDNkMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBwwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsVBeKKhvpmweGff4ljarDpfhiWf4ooGX4OWiUQAaHiITa/8wYk GaocnDr+i7KBWJbEWPSg3dps4CFsEvAHzwEPSmfqItix1E0opXrvMXlrHftvlBcZ L8XpFmoE7wVtSPHZ5S5U+7cxCWEZDe5wHAlI2qDeRZrpA+E9pJ+MhBwWXBG5G7fG kCifm4PbAv8UpxtAOldWJ3NZQzrB3UVS3mQ/rJulYEN36noV8dyCJUo+h9Xmdb0t YpshnzUynsPTkuWJchffhQN+Y3+6cptDLh/aC+OR+z6H6B+dtAJlQi+LXIZVognk jdsFtNkxZHaJt3ksaCsUGnKVzHqEeR+KeVY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:51 2025 by rpki-client