$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa File: 4882d797-1aa7-36ae-90f1-55a5674ce96b.roa (raw, json) Hash identifier: mjN8Yc5zwRT8V7LyCFrBstmNCKFGnlkeHKytVr3hW20= Subject key identifier: 37:70:6E:68:0F:81:9D:AD:40:DC:2D:54:47:F4:1E:EE:54:48:E4:49 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370D207E557A7F0F9DF500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 2600:4040:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0d:20:7e:55:7a:7f:0f:9d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=bf8d5fb2-81f9-464d-955c-a1bdaa56e635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:01:ff:b7:db:52:f1:3a:0e:1a:b1:a6:2c: 00:4f:34:b8:e9:44:a2:81:66:39:e8:11:74:e1:1f: 63:64:d0:03:63:0d:ae:fb:16:f0:c5:c5:45:55:82: de:bc:87:b7:fc:7c:6b:b3:28:a9:c0:2b:e6:58:7f: 16:3e:29:25:55:55:f5:08:56:69:d0:b3:96:79:b5: 6d:87:aa:5d:7a:cb:92:1e:96:a0:bb:27:ba:3f:bc: cc:92:76:fa:16:c8:46:ff:ca:f7:e4:72:ec:b8:9f: e3:cc:e9:67:c9:d0:f7:8e:aa:17:05:e3:26:86:5b: c2:61:db:93:55:15:c3:d0:f6:57:31:86:64:a3:07: 14:42:c4:5a:2f:e2:52:72:d5:e3:a9:27:eb:ae:82: ed:34:35:73:5d:87:81:d4:ef:e1:a6:8e:48:b9:96: 28:dc:12:b0:72:66:d3:cf:bf:94:47:c9:a1:0c:78: 23:6b:dd:31:22:be:87:8a:d4:22:d3:73:65:14:20: 20:35:9a:a8:b0:47:67:39:05:4e:cf:7a:a2:1c:c1: 39:eb:fb:82:14:90:3f:4e:c3:04:7c:92:66:d0:f9: 45:80:f1:0e:b8:29:8d:8d:19:ad:77:6a:76:dd:04: 3f:46:72:8d:5a:6f:4e:52:5a:5d:8a:f1:b3:3f:71: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:6E:68:0F:81:9D:AD:40:DC:2D:54:47:F4:1E:EE:54:48:E4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:4040:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:07:88:81:0d:8d:d4:51:47:30:bb:62:51:6e:30:b4:0e:75: 4f:6c:09:6d:3b:1a:fd:87:e9:9c:64:0c:49:6e:c3:63:8c:8c: a8:aa:a5:15:36:0d:0c:0b:fb:6b:4a:b7:15:2b:ef:4f:26:6d: c4:71:4b:27:e5:dc:7c:36:36:36:55:b0:81:d2:df:e4:9b:e2: de:7b:3f:fc:2f:d6:0f:40:e6:1c:b5:6e:80:bb:3d:be:67:32: 63:3b:e3:6d:dd:05:c5:47:96:ce:a7:57:f2:34:eb:70:80:01: 32:14:da:18:47:1f:7b:b2:22:73:55:e0:5c:3f:6c:38:3a:9d: 99:27:70:3f:e4:f3:03:03:89:01:02:fc:d8:a0:48:e4:f6:9f: 80:13:fb:8c:1b:aa:e5:90:3f:34:7d:b8:cf:e9:cb:3d:e4:5c: 92:c9:36:c6:28:35:8a:12:3c:30:0f:64:ae:9a:ba:83:c9:7c: 70:d1:8b:db:02:a3:07:92:42:2f:8f:59:1e:e4:5c:18:1c:7a: fe:66:0a:cc:31:77:47:7d:3c:ab:b5:c5:05:46:85:68:ab:ae: d4:6c:61:93:ba:7f:4d:dc:e4:0c:bc:8d:64:99:b0:96:47:e9: 04:c1:d2:2e:2c:45:5f:0b:92:26:51:74:b7:47:3f:31:05:44: 4a:11:15:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEscNw0gflV6fw+d9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YmY4ZDVmYjItODFmOS00NjRkLTk1NWMtYTFiZGFhNTZlNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6wB/7fbUvE6DhqxpiwATzS46USigWY56BF0 4R9jZNADYw2u+xbwxcVFVYLevIe3/HxrsyipwCvmWH8WPiklVVX1CFZp0LOWebVt h6pdesuSHpaguye6P7zMknb6FshG/8r35HLsuJ/jzOlnydD3jqoXBeMmhlvCYduT VRXD0PZXMYZkowcUQsRaL+JSctXjqSfrroLtNDVzXYeB1O/hpo5IuZYo3BKwcmbT z7+UR8mhDHgja90xIr6HitQi03NlFCAgNZqosEdnOQVOz3qiHME56/uCFJA/TsME fJJm0PlFgPEOuCmNjRmtd2p23QQ/RnKNWm9OUlpdivGzP3Fh2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDdwbmgPgZ2tQNwtVEf0Hu5USORJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDg4MmQ3OTctMWFhNy0z NmFlLTkwZjEtNTVhNTY3NGNlOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBAQGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKgeIgQ2N1FFHMLtiUW4wtA51T2wJbTsa/YfpnGQMSW7DY4yMqKql FTYNDAv7a0q3FSvvTyZtxHFLJ+XcfDY2NlWwgdLf5Jvi3ns//C/WD0DmHLVugLs9 vmcyYzvjbd0FxUeWzqdX8jTrcIABMhTaGEcfe7Iic1XgXD9sODqdmSdwP+TzAwOJ AQL82KBI5PafgBP7jBuq5ZA/NH24z+nLPeRcksk2xig1ihI8MA9krpq6g8l8cNGL 2wKjB5JCL49ZHuRcGBx6/mYKzDF3R308q7XFBUaFaKuu1Gxhk7p/TdzkDLyNZJmw lkfpBMHSLixFXwuSJlF0t0c/MQVEShEVfA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:33 2025 by rpki-client