$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa746bd4-92d4-323f-b99e-ec701e7ca79d.roa File: aa746bd4-92d4-323f-b99e-ec701e7ca79d.roa (raw, json) Hash identifier: 0NODiOqNkdvl19K+ne/EpIaOeD9yJrEvy1XOWlKGyvw= Subject key identifier: 71:79:EB:85:47:F7:AB:4B:0D:3C:2C:94:0F:26:97:F3:66:6D:ED:12 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7D15EA2F805FBAAD48C4BE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa746bd4-92d4-323f-b99e-ec701e7ca79d.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 2600:1003:b150::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:ea:2f:80:5f:ba:ad:48:c4:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=98042dc2-cc07-4f10-a5ca-4fc9fd46b0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:fa:18:01:2a:bf:42:4b:cf:ee:b2:33:a1: 0d:2f:60:d6:3f:47:c9:35:cc:03:01:23:05:2d:58: f0:71:81:cb:5a:98:85:34:3c:26:db:44:e0:23:ef: fc:7c:56:b7:67:c9:d5:1c:9f:a3:86:61:2d:df:e7: 09:d8:65:d5:40:ea:49:06:2b:fe:39:66:b3:6a:a6: cb:f4:b9:c3:1f:f1:9f:f7:84:44:b3:68:c1:cf:e8: d9:31:85:67:09:5e:ab:53:74:cb:d4:b0:7d:37:10: dd:a9:1a:ea:29:0b:08:27:59:51:77:7b:f3:9a:57: 12:3a:ee:f0:54:d2:0d:66:1f:8d:82:4f:87:d2:ed: 18:66:8f:7d:7c:a1:75:47:b5:23:32:d3:c6:0b:84: ec:ef:c7:ab:b0:7c:44:5b:be:6d:4f:03:20:b3:75: 9b:c9:1d:aa:50:d2:8b:c8:cb:a2:8c:85:62:e6:a5: cc:ff:39:16:93:f5:d5:15:e9:b3:bf:f4:b2:43:f8: 55:e9:f1:88:43:16:08:02:5e:35:d6:40:1f:26:52: 2b:00:f0:51:f8:ed:fb:15:82:a5:c1:58:9d:f2:1c: 54:ad:08:be:c4:2d:32:90:a1:2a:2e:8b:86:59:0d: b5:8e:67:e3:d2:b1:e7:ad:45:3f:27:b9:43:26:d7: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:EB:85:47:F7:AB:4B:0D:3C:2C:94:0F:26:97:F3:66:6D:ED:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa746bd4-92d4-323f-b99e-ec701e7ca79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:b150::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:79:65:b3:26:43:dd:e2:d0:4b:61:31:f2:41:5a:68:e6:85: 36:fd:9a:25:ea:f4:1c:66:f5:fa:d4:f9:0d:8e:41:06:c0:d1: d1:b4:10:99:fb:b5:0b:f4:9c:1b:d2:c9:f7:ec:98:0c:c8:e3: 9b:46:04:92:3e:a9:41:8d:b4:b3:49:1b:9a:81:0b:e2:11:58: dc:06:ee:73:b1:ff:c2:b8:1a:1f:a0:65:e7:6e:44:d9:98:03: 3c:57:20:3b:34:ec:1f:98:53:90:2b:a3:9b:29:93:21:b5:1d: b6:01:44:46:be:98:bf:fd:31:1d:73:4d:5e:b0:cc:be:47:64: 7e:29:18:d9:77:fb:fd:4d:a9:df:ad:d9:20:bb:86:9f:17:af: 36:ce:9b:2c:06:6a:42:2b:74:22:bc:fa:b8:5c:c9:19:22:84: bb:61:79:3b:5b:e9:e0:72:b9:cf:ed:80:03:7a:7e:63:d2:92: f1:9e:f3:51:a1:d6:e1:4b:e8:df:5d:5d:30:42:ba:d3:3b:0c: 14:ce:14:35:d7:c0:98:12:c6:e2:df:db:06:e3:fa:48:7b:32: 46:a2:16:c6:0b:7c:ce:83:7c:5a:10:84:8a:05:a6:d1:35:6a: 6b:7d:6a:25:e8:8e:67:cd:dc:f7:b1:0b:94:22:b8:98:7a:02: f2:a5:af:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp9FeovgF+6rUjEvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk OTgwNDJkYzItY2MwNy00ZjEwLWE1Y2EtNGZjOWZkNDZiMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt076GAEqv0JLz+6yM6ENL2DWP0fJNcwDASMF LVjwcYHLWpiFNDwm20TgI+/8fFa3Z8nVHJ+jhmEt3+cJ2GXVQOpJBiv+OWazaqbL 9LnDH/Gf94REs2jBz+jZMYVnCV6rU3TL1LB9NxDdqRrqKQsIJ1lRd3vzmlcSOu7w VNINZh+Ngk+H0u0YZo99fKF1R7UjMtPGC4Ts78ersHxEW75tTwMgs3WbyR2qUNKL yMuijIVi5qXM/zkWk/XVFemzv/SyQ/hV6fGIQxYIAl411kAfJlIrAPBR+O37FYKl wVid8hxUrQi+xC0ykKEqLouGWQ21jmfj0rHnrUU/J7lDJtcmYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHF564VH96tLDTwslA8ml/Nmbe0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE3NDZiZDQtOTJkNC0z MjNmLWI5OWUtZWM3MDFlN2NhNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQA7FQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFl5ZbMmQ93i0EthMfJBWmjmhTb9miXq9Bxm9frU+Q2OQQbA0dG0 EJn7tQv0nBvSyffsmAzI45tGBJI+qUGNtLNJG5qBC+IRWNwG7nOx/8K4Gh+gZedu RNmYAzxXIDs07B+YU5Aro5spkyG1HbYBREa+mL/9MR1zTV6wzL5HZH4pGNl3+/1N qd+t2SC7hp8XrzbOmywGakIrdCK8+rhcyRkihLtheTtb6eByuc/tgAN6fmPSkvGe 81Gh1uFL6N9dXTBCutM7DBTOFDXXwJgSxuLf2wbj+kh7MkaiFsYLfM6DfFoQhIoF ptE1amt9aiXojmfN3PexC5QiuJh6AvKlr2E= -----END CERTIFICATE-----Generated at Tue Aug 5 16:46:44 2025 by rpki-client