$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be359fc-e935-3b47-9695-3aea42b7fed2.roa File: 2be359fc-e935-3b47-9695-3aea42b7fed2.roa (raw, json) Hash identifier: 0zOUL6h8ZHc2bmaoTL2vjUi2oFG3IhOD3J+bM9kkZwg= Subject key identifier: 55:53:61:8F:CF:05:56:F0:3D:91:DD:86:06:85:17:2C:7C:89:6F:50 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B434C840C960121FD262A6180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be359fc-e935-3b47-9695-3aea42b7fed2.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2600:1001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:84:0c:96:01:21:fd:26:2a:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c6031569-889a-4043-8486-ed4a8bc36229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:4d:0d:d1:90:9e:ca:9b:58:87:62:a7:49: d9:cd:c3:dd:07:9a:49:ce:84:59:58:84:d0:f8:ef: a7:a8:76:b8:79:bb:11:fe:e7:8f:0c:1d:56:de:5c: 9e:e7:9c:fe:e0:35:27:57:45:ce:87:41:2d:9c:a4: cb:5f:88:18:e7:0a:f7:2a:fb:d2:1f:e7:a4:7d:04: bf:d8:ef:93:7c:e6:5c:85:b5:35:b6:6b:10:7e:02: 75:ca:d2:72:40:0f:27:d7:34:60:bf:ae:c9:b1:0f: 9c:97:78:ab:38:c3:1d:39:76:f6:3b:5b:ab:18:e2: 0e:aa:27:8a:c5:d6:e8:06:7f:a0:f8:c4:c3:d1:f3: 71:92:66:bb:8e:ef:31:1b:fa:19:1d:1a:88:56:8b: 63:aa:cf:ff:99:d5:4a:38:cb:90:2e:cf:ff:1d:40: a6:a5:80:05:b4:e3:43:2b:5e:b4:d4:6c:6b:1a:25: 3f:ea:96:e3:ef:b3:02:86:5d:cb:34:29:a6:64:61: 00:a5:7f:8b:14:93:8c:1b:bf:39:71:c3:0a:ad:95: cc:33:50:51:fc:a1:83:3c:a9:16:a5:97:d6:08:a4: ac:e2:15:b6:62:51:da:b6:08:a7:c1:04:b3:64:a6: a0:01:5a:f8:6f:5a:2c:7b:8b:5c:ed:d9:f2:20:be: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:53:61:8F:CF:05:56:F0:3D:91:DD:86:06:85:17:2C:7C:89:6F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be359fc-e935-3b47-9695-3aea42b7fed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1001::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ab:a6:c2:45:e8:0c:6d:d6:56:61:e9:8a:5d:d8:e0:68:6c: ef:4f:02:cc:53:16:f6:52:d2:b2:eb:36:4d:cb:31:1e:d2:f2: be:a9:70:d7:b2:91:6c:18:4a:21:b3:76:05:d5:d1:08:cc:28: f5:72:a5:3b:9d:bb:ca:d8:78:d4:ab:a0:6f:20:71:30:2c:96: 6d:40:b2:bd:eb:54:b0:3b:38:56:b6:5d:ab:18:51:11:d1:ba: c0:a6:f2:7e:f6:73:cd:b1:dd:04:36:2b:3a:e3:f1:28:95:7b: 57:e2:16:fc:36:d5:d0:11:45:e6:e2:71:4e:ce:a4:86:10:26: 98:be:70:72:54:da:8f:d2:74:16:aa:73:c6:46:5c:ce:ea:97: 21:46:06:4d:5b:a9:37:da:65:9c:d0:68:0e:00:4b:39:09:db: 71:89:e7:d5:24:8c:09:57:e9:79:85:4a:52:1b:e9:20:b5:59: 7b:59:c1:90:6e:ea:7f:bb:3e:5d:b1:64:41:57:34:8d:e0:b2: e9:60:9f:82:8f:03:76:69:b0:c4:4e:12:28:25:0f:d0:0a:f0: 5b:22:9c:53:ef:65:ed:59:78:a4:7f:33:d1:97:49:cd:a9:03: cd:af:35:47:e1:26:46:b7:73:50:b7:9c:89:e5:77:bd:06:ec: cd:67:59:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTIQMlgEh/SYqYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzYwMzE1NjktODg5YS00MDQzLTg0ODYtZWQ0YThiYzM2MjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQJNDdGQnsqbWIdip0nZzcPdB5pJzoRZWITQ +O+nqHa4ebsR/uePDB1W3lye55z+4DUnV0XOh0EtnKTLX4gY5wr3KvvSH+ekfQS/ 2O+TfOZchbU1tmsQfgJ1ytJyQA8n1zRgv67JsQ+cl3irOMMdOXb2O1urGOIOqieK xdboBn+g+MTD0fNxkma7ju8xG/oZHRqIVotjqs//mdVKOMuQLs//HUCmpYAFtOND K1601GxrGiU/6pbj77MChl3LNCmmZGEApX+LFJOMG785ccMKrZXMM1BR/KGDPKkW pZfWCKSs4hW2YlHatginwQSzZKagAVr4b1ose4tc7dnyIL6ZzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFVTYY/PBVbwPZHdhgaFFyx8iW9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJlMzU5ZmMtZTkzNS0z YjQ3LTk2OTUtM2FlYTQyYjdmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAQATBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIq6bCRegMbdZWYemKXdjgaGzvTwLMUxb2UtKy6zZNyzEe0vK+qXDX spFsGEohs3YF1dEIzCj1cqU7nbvK2HjUq6BvIHEwLJZtQLK961SwOzhWtl2rGFER 0brApvJ+9nPNsd0ENis64/EolXtX4hb8NtXQEUXm4nFOzqSGECaYvnByVNqP0nQW qnPGRlzO6pchRgZNW6k32mWc0GgOAEs5CdtxiefVJIwJV+l5hUpSG+kgtVl7WcGQ bup/uz5dsWRBVzSN4LLpYJ+CjwN2abDEThIoJQ/QCvBbIpxT72XtWXikfzPRl0nN qQPNrzVH4SZGt3NQt5yJ5Xe9BuzNZ1kN -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:44 2025 by rpki-client