$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea0fc6d-7687-3c62-b7ab-43de295a9770.roa File: 5ea0fc6d-7687-3c62-b7ab-43de295a9770.roa (raw, json) Hash identifier: g3/T4rnwRP/QXZ0X9os5DI7r+nRBFrQwt8TvKMnaSX8= Subject key identifier: EA:1C:A6:9E:43:10:79:BA:90:94:B6:AB:38:6B:5F:AA:CA:E6:31:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1066287034807ED7426EEB80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea0fc6d-7687-3c62-b7ab-43de295a9770.roa Signing time: Tue 02 Sep 2025 19:26:28 +0000 ROA not before: Tue 02 Sep 2025 19:26:28 +0000 ROA not after: Mon 01 Dec 2025 20:26:28 +0000 asID: 6167 IP address blocks: 2600:1011:a189::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:66:28:70:34:80:7e:d7:42:6e:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 2 19:26:28 2025 GMT Not After : Dec 1 20:26:28 2025 GMT Subject: CN=3c247372-38e0-42cf-bb6f-1d1f1cbf4134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:9e:23:46:c6:5c:b2:da:d9:48:1e:84:41: 1e:08:98:4c:10:80:ef:e2:b1:66:6e:b3:28:bf:ec: 79:b6:63:b2:0b:ed:45:a5:1b:2a:f0:2e:b4:86:01: 94:b6:a4:91:c1:37:a4:99:91:04:ce:32:72:24:6c: 33:46:82:ae:48:73:67:f5:26:d0:e6:2e:46:a7:ba: 22:e7:11:e8:cf:73:c1:dc:c7:7e:c0:ea:ae:32:0c: e7:3c:80:c3:f7:b3:35:56:b8:5e:40:a0:fc:0b:af: 03:c1:8c:97:c6:e2:8f:26:3e:f3:57:c1:1b:1d:a7: 7f:25:c4:4e:9c:cd:a6:c0:b0:f1:7b:44:06:b8:32: 3f:85:a5:74:71:49:ca:f9:ce:33:46:4a:b4:e1:e2: 4d:14:a1:67:ee:e8:4f:81:a6:38:66:23:d2:ba:f1: 91:50:31:58:2e:34:12:4a:df:21:96:4f:79:dc:20: 03:5d:bc:e3:c0:39:ed:f0:ac:d0:e5:13:13:16:8b: 64:bc:e0:a0:ea:07:e5:4f:0b:9a:a8:1f:f8:94:26: fd:07:ba:8b:e3:80:b8:77:ab:0a:56:b6:76:46:5e: cd:37:f1:19:12:c6:2b:35:04:b4:0a:79:6b:c7:55: 64:57:35:27:10:4f:b4:56:f1:c4:3c:e6:fc:cb:f0: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1C:A6:9E:43:10:79:BA:90:94:B6:AB:38:6B:5F:AA:CA:E6:31:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea0fc6d-7687-3c62-b7ab-43de295a9770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1011:a189::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a4:a7:a0:94:68:3e:39:f3:4a:09:8b:9b:33:60:8c:77:60: 9f:9e:42:8e:82:ee:94:ed:7a:d5:56:a1:9e:b1:ba:0d:45:db: 68:53:c4:08:7c:33:42:65:36:e9:d4:82:c7:da:cd:d7:5b:f3: 75:f0:5b:44:b0:c3:38:c0:87:67:07:e2:c5:61:c6:02:04:6c: 16:0b:b5:3a:b8:53:1a:2f:b7:cc:92:f8:9b:c3:2e:03:9b:f6: 75:9f:74:33:c7:e8:9b:05:1e:21:ba:fe:a9:88:95:81:62:8c: a7:12:41:5b:eb:ca:1b:03:74:b5:99:cf:00:2b:53:be:0f:44: aa:9d:29:b6:54:b7:5d:45:da:24:85:6e:0b:d7:c7:ce:d0:0d: 58:14:a2:7a:a5:41:3e:5f:6a:fd:b6:2b:78:24:ff:a1:8f:44: 9b:e6:c4:bb:cf:89:ee:a1:d1:c3:70:82:1f:65:5a:ae:06:f0: 90:da:b6:53:ef:66:71:2b:2c:65:45:8a:e7:7c:4f:f8:69:31: 4c:e8:87:2b:b9:0a:43:e4:29:5a:ef:b6:49:22:9f:57:d9:bb: 57:7c:44:43:f5:f5:fc:cb:90:b0:82:9b:61:df:64:e1:38:19: 09:fa:92:aa:e0:fa:23:84:93:70:e1:c4:88:5f:35:9f:ec:11: 21:33:b3:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsQZihwNIB+10Ju64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwMjE5MjYyOFoXDTI1MTIwMTIwMjYyOFowLzEtMCsGA1UEAxMk M2MyNDczNzItMzhlMC00MmNmLWJiNmYtMWQxZjFjYmY0MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9aeI0bGXLLa2UgehEEeCJhMEIDv4rFmbrMo v+x5tmOyC+1FpRsq8C60hgGUtqSRwTekmZEEzjJyJGwzRoKuSHNn9SbQ5i5Gp7oi 5xHoz3PB3Md+wOquMgznPIDD97M1VrheQKD8C68DwYyXxuKPJj7zV8EbHad/JcRO nM2mwLDxe0QGuDI/haV0cUnK+c4zRkq04eJNFKFn7uhPgaY4ZiPSuvGRUDFYLjQS St8hlk953CADXbzjwDnt8KzQ5RMTFotkvOCg6gflTwuaqB/4lCb9B7qL44C4d6sK VrZ2Rl7NN/EZEsYrNQS0Cnlrx1VkVzUnEE+0VvHEPOb8y/DIBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOocpp5DEHm6kJS2qzhrX6rK5jGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWVhMGZjNmQtNzY4Ny0z YzYyLWI3YWItNDNkZTI5NWE5NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEaGJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGkp6CUaD4580oJi5szYIx3YJ+eQo6C7pTtetVWoZ6xug1F22hT xAh8M0JlNunUgsfazddb83XwW0SwwzjAh2cH4sVhxgIEbBYLtTq4Uxovt8yS+JvD LgOb9nWfdDPH6JsFHiG6/qmIlYFijKcSQVvryhsDdLWZzwArU74PRKqdKbZUt11F 2iSFbgvXx87QDVgUonqlQT5fav22K3gk/6GPRJvmxLvPie6h0cNwgh9lWq4G8JDa tlPvZnErLGVFiud8T/hpMUzohyu5CkPkKVrvtkkin1fZu1d8REP19fzLkLCCm2Hf ZOE4GQn6kqrg+iOEk3DhxIhfNZ/sESEzs/A= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:12 2025 by rpki-client