$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa File: 28b58e9a-06a7-32cf-aa39-a353038ad25a.roa (raw, json) Hash identifier: O3xMwqYUvp/3z8DB+YZ55/KmUaAD9w9teBZFyCJM6f8= Subject key identifier: E2:C4:F7:1E:21:68:62:BB:A2:2E:37:B8:ED:74:07:F0:41:3C:21:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A29558A767D133AD0C4033080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 22394 IP address blocks: 2600:1010::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:8a:76:7d:13:3a:d0:c4:03:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=ac30ce49-bebe-4932-a92d-216ff3e48010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:f9:82:e7:d2:2a:10:76:a0:c4:47:65:51: 6a:f2:43:c5:24:21:4f:98:e4:73:c7:66:6e:ae:9f: 13:fb:7f:45:99:2d:63:e3:50:b1:b8:ba:10:ab:24: e7:f2:b7:2a:55:18:04:7b:e1:32:f1:d7:78:22:51: 05:36:24:a9:de:e5:e1:fa:8f:6b:d1:44:1b:4f:74: 83:e6:bd:0e:82:6c:a3:67:8f:72:f0:19:0c:9e:ec: 8e:2d:40:7c:e2:cd:aa:a6:32:d9:28:f4:0d:9a:5d: 33:bd:4d:ea:15:f8:58:88:68:b8:38:f3:c1:d9:19: f7:ec:8a:54:b4:4d:86:63:aa:21:d1:4c:cd:96:bc: 6f:3f:a4:6f:52:79:a4:75:80:13:7b:f9:f0:b9:ba: 76:1c:6b:84:8c:ba:71:30:c5:dc:eb:9a:5d:ff:52: 28:ca:17:7f:24:73:98:ef:d0:08:b4:89:16:8a:62: f0:26:4d:72:33:20:7c:7c:02:59:10:ee:1d:ef:ca: 8e:9a:ca:4a:96:33:cc:cc:a8:2f:96:be:eb:2f:d4: f2:0e:81:62:f4:3e:77:87:1c:64:c9:ea:30:45:78: 3e:3f:56:75:dd:da:58:f9:1b:5a:c6:ab:b6:f0:ba: 3a:15:6d:c4:4e:cc:76:3b:e8:e7:a3:12:25:43:63: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:F7:1E:21:68:62:BB:A2:2E:37:B8:ED:74:07:F0:41:3C:21:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a9:13:e8:59:d0:90:3e:b5:8c:cd:2b:e0:bf:ec:7d:cb:aa: 1f:67:e1:29:3b:8a:a2:f3:46:f9:9d:cc:33:ee:1e:7b:6a:b7: 4e:6f:ba:ae:56:e3:e5:bf:f8:d6:35:81:24:1a:a6:68:b7:bd: 31:c3:b6:77:ae:8c:57:a5:3f:ee:31:a3:ab:c5:54:52:29:79: d0:f5:fc:fc:b4:5f:fb:3d:a4:62:2a:d1:05:64:50:1e:8e:90: 2e:7e:ed:71:c0:50:96:5b:36:50:a0:15:c6:d2:c4:ad:d3:c1: cc:ee:b5:41:e0:1f:20:13:f3:94:6f:7a:64:7d:bf:a4:04:c4: 01:d8:18:3c:f4:64:ce:5b:28:2b:82:a0:87:58:24:71:bf:a4: ad:98:83:28:f0:a3:13:21:45:8e:16:54:f5:1b:2c:3d:28:b2: c9:81:d0:a6:2d:37:70:93:e5:45:ae:f7:3f:bc:74:0b:9f:25: b0:cf:69:4b:e7:03:a0:d0:1b:b2:6a:86:c5:51:1f:57:72:cd: cc:5e:f2:6a:ca:8a:7e:ff:ae:e5:a9:0c:c3:b4:ec:30:24:da: ac:20:e3:36:0b:2a:44:7b:9d:a7:73:60:c4:b0:0d:81:77:88: bd:bd:31:de:eb:b0:66:d1:79:10:25:e8:d6:a5:fc:28:de:3f: 3e:a2:e0:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEopVYp2fRM60MQDMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YWMzMGNlNDktYmViZS00OTMyLWE5MmQtMjE2ZmYzZTQ4MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLb5gufSKhB2oMRHZVFq8kPFJCFPmORzx2Zu rp8T+39FmS1j41CxuLoQqyTn8rcqVRgEe+Ey8dd4IlEFNiSp3uXh+o9r0UQbT3SD 5r0OgmyjZ49y8BkMnuyOLUB84s2qpjLZKPQNml0zvU3qFfhYiGi4OPPB2Rn37IpU tE2GY6oh0UzNlrxvP6RvUnmkdYATe/nwubp2HGuEjLpxMMXc65pd/1Ioyhd/JHOY 79AItIkWimLwJk1yMyB8fAJZEO4d78qOmspKljPMzKgvlr7rL9TyDoFi9D53hxxk yeowRXg+P1Z13dpY+Rtaxqu28Lo6FW3ETsx2O+jnoxIlQ2Mx4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOLE9x4haGK7oi43uO10B/BBPCE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhiNThlOWEtMDZhNy0z MmNmLWFhMzktYTM1MzAzOGFkMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgAQEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgqRPoWdCQPrWMzSvgv+x9y6ofZ+EpO4qi80b5ncwz7h57ardOb7qu VuPlv/jWNYEkGqZot70xw7Z3roxXpT/uMaOrxVRSKXnQ9fz8tF/7PaRiKtEFZFAe jpAufu1xwFCWWzZQoBXG0sSt08HM7rVB4B8gE/OUb3pkfb+kBMQB2Bg89GTOWygr gqCHWCRxv6StmIMo8KMTIUWOFlT1Gyw9KLLJgdCmLTdwk+VFrvc/vHQLnyWwz2lL 5wOg0BuyaobFUR9Xcs3MXvJqyop+/67lqQzDtOwwJNqsIOM2CypEe52nc2DEsA2B d4i9vTHe67Bm0XkQJejWpfwo3j8+ouDy -----END CERTIFICATE-----Generated at Mon Jun 16 13:29:19 2025 by rpki-client