$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa File: 55944af2-121b-326e-bc05-cb65ee3b3be2.roa (raw, json) Hash identifier: A2xeagavt9ouJIKULY4d0gTYYwGsSTf6W1l9DfRXK2Q= Subject key identifier: 46:C5:C0:4F:FF:9E:3B:1E:A9:8B:F6:F5:35:83:97:E1:43:F2:04:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36F4B7ACEAB911AF499B20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1008:a000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f4:b7:ac:ea:b9:11:af:49:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=49af43f6-e723-44cc-a2c3-3ed1d35afe6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:c3:0b:18:bf:b3:b9:2f:70:7e:e9:76:60: 5c:27:bb:f1:1f:69:d0:f6:1d:9a:f5:dc:11:5f:45: 3b:35:db:31:9b:25:a0:48:97:21:cc:61:1b:aa:f0: ee:79:68:e6:f5:55:16:8f:51:c3:18:4a:24:cb:75: f9:3c:f2:81:9c:eb:f3:36:1f:4a:37:9f:ed:c6:6d: 39:13:db:af:42:89:62:e7:f6:97:0c:78:10:58:ad: bb:79:ed:f6:e8:69:58:b9:4d:3c:1b:79:64:5a:94: 50:3a:1b:ba:60:d7:35:48:76:b0:0f:30:5e:1d:c4: 54:12:1b:50:3a:74:99:37:83:1f:9a:69:85:37:40: e1:f1:88:53:fc:5c:32:0f:f8:13:2d:6d:1b:64:d7: 32:d1:bb:18:ac:ef:b8:f2:79:8b:06:ff:e6:4b:09: e0:a5:f3:41:63:f6:db:9b:d1:21:d4:f1:e0:1a:3f: 86:37:03:94:e6:96:e2:5a:91:bd:d5:49:e9:63:4c: da:b6:6b:80:53:e4:ec:38:a9:23:6f:50:32:4c:04: e5:8a:69:e5:e5:12:be:d4:d2:34:99:44:85:ae:5e: 92:4a:cb:98:19:03:7a:d3:e0:8d:7e:99:2e:95:52: c6:51:d5:6d:5d:82:52:d1:7b:78:6e:1e:36:d5:ad: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C5:C0:4F:FF:9E:3B:1E:A9:8B:F6:F5:35:83:97:E1:43:F2:04:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1e:e8:8a:38:d4:00:a3:db:d2:ac:a4:4b:33:d1:e1:90:95: ca:a9:34:b3:bf:1c:89:6e:5e:0f:03:d5:f1:7f:b2:2f:b8:21: 72:78:af:98:44:5c:6f:31:5c:2a:e0:2c:5d:c6:37:da:d2:10: c1:5e:fb:5e:2f:c7:ec:dc:8f:31:cd:3e:45:77:29:bc:f3:d6: 2f:14:56:f8:5e:b5:c8:e1:89:cc:ea:6a:9a:a7:28:4d:6f:45: 40:1b:1e:70:d2:6c:1b:76:3f:ed:b7:3b:74:9a:05:0c:9b:61: 5f:bd:83:e7:5d:4f:4f:f1:94:27:d3:61:04:95:27:bc:33:28: a3:94:cd:0a:b8:2b:0a:81:dc:95:96:7c:2a:b7:6f:ab:7a:5f: 98:74:ff:64:1b:5e:ba:dc:30:fe:7e:b8:bc:83:6a:ff:68:46: 5d:69:35:39:f9:15:12:49:82:1f:a8:2b:a1:e1:1f:ab:fc:45: 35:d1:3d:bd:0b:8e:ff:b9:08:85:bd:85:0c:d9:b0:b0:fc:ff: cc:1d:ec:aa:09:0a:0d:e2:c4:f3:64:ec:18:b6:7c:64:bd:3c: fc:6a:ea:b4:50:8a:75:7c:2e:8b:85:9b:db:fe:59:af:d0:df: 6a:29:fb:31:35:33:ea:65:d5:9d:72:06:f3:25:0f:c3:c6:77: cd:95:c1:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNvS3rOq5Ea9JmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDlhZjQzZjYtZTcyMy00NGNjLWEyYzMtM2VkMWQzNWFmZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm7DCxi/s7kvcH7pdmBcJ7vxH2nQ9h2a9dwR X0U7NdsxmyWgSJchzGEbqvDueWjm9VUWj1HDGEoky3X5PPKBnOvzNh9KN5/txm05 E9uvQoli5/aXDHgQWK27ee326GlYuU08G3lkWpRQOhu6YNc1SHawDzBeHcRUEhtQ OnSZN4MfmmmFN0Dh8YhT/FwyD/gTLW0bZNcy0bsYrO+48nmLBv/mSwngpfNBY/bb m9Eh1PHgGj+GNwOU5pbiWpG91UnpY0zatmuAU+TsOKkjb1AyTATlimnl5RK+1NI0 mUSFrl6SSsuYGQN60+CNfpkulVLGUdVtXYJS0Xt4bh421a28CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEbFwE//njseqYv29TWDl+FD8gStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTU5NDRhZjItMTIxYi0z MjZlLWJjMDUtY2I2NWVlM2IzYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADce6Io41ACj29KspEsz0eGQlcqpNLO/HIluXg8D1fF/si+4IXJ4 r5hEXG8xXCrgLF3GN9rSEMFe+14vx+zcjzHNPkV3Kbzz1i8UVvhetcjhiczqapqn KE1vRUAbHnDSbBt2P+23O3SaBQybYV+9g+ddT0/xlCfTYQSVJ7wzKKOUzQq4KwqB 3JWWfCq3b6t6X5h0/2QbXrrcMP5+uLyDav9oRl1pNTn5FRJJgh+oK6HhH6v8RTXR Pb0Ljv+5CIW9hQzZsLD8/8wd7KoJCg3ixPNk7Bi2fGS9PPxq6rRQinV8LouFm9v+ Wa/Q32op+zE1M+pl1Z1yBvMlD8PGd82VwY4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:50 2025 by rpki-client