$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa File: af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa (raw, json) Hash identifier: qgaLtNJbQ2E6BjCAD/OtpYNzuQdTSP5cRv384E/kHCs= Subject key identifier: 45:A4:AF:30:B9:1A:6A:01:D5:1E:BE:11:39:6E:EF:E8:0F:C7:40:11 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BBFA5B80487F92E7710337300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6167 IP address blocks: 2600:1014:b200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b8:04:87:f9:2e:77:10:33:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=6e06d336-f494-4bf3-b32f-5ad38e71b5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2d:79:98:d6:21:5d:16:72:c1:0a:05:d3:2e: ca:dd:d9:e5:df:58:28:d5:43:48:4f:af:b3:ea:21: 59:3b:8b:0c:57:34:f8:a1:54:1b:62:ec:60:9d:76: 36:d7:f8:83:31:a9:53:4a:7e:dd:96:b8:49:c6:77: d9:ac:b4:4d:9c:00:a7:dd:cc:1c:b1:cf:b0:f7:d8: 5e:33:1c:fd:1e:38:9b:40:38:15:ce:63:eb:64:a6: ef:79:1c:43:3e:db:1b:db:e6:ba:72:4c:36:48:14: 8e:3e:c8:e1:e8:7e:2e:9a:2c:36:25:bc:a1:95:bb: 1c:9e:42:10:30:6b:98:ed:e3:77:5a:3e:79:24:0c: b2:44:c3:ce:df:a2:76:b5:d2:d7:b2:27:52:53:bd: b0:44:d2:77:34:09:11:23:ea:79:e1:19:0f:ff:92: c1:ef:9c:d0:65:f9:20:32:87:b6:3c:e7:38:2d:92: 2a:de:55:d9:0c:ba:82:d9:15:0f:0d:e6:68:e4:aa: 96:0b:b9:9f:25:99:2e:38:06:87:1b:67:6d:de:14: 91:f8:9f:96:51:f9:da:5c:82:1b:7e:22:bd:ad:41: bb:b3:0d:1b:3d:01:4b:47:73:55:6f:70:af:41:1d: ab:58:a3:78:36:cd:e9:5c:57:da:34:80:0d:24:f7: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A4:AF:30:B9:1A:6A:01:D5:1E:BE:11:39:6E:EF:E8:0F:C7:40:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af974b1d-c8fe-3304-b4cc-8d17a2bf1127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1014:b200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:89:f0:86:63:4b:4a:48:4b:a5:17:f0:28:0f:12:ac:ff:bd: f4:02:2a:7a:b2:8c:81:57:bf:10:68:77:c0:ea:65:c8:52:85: bc:1d:a5:93:fc:1e:78:2d:18:1b:96:ad:3e:e4:11:4a:64:66: ab:cf:81:71:fd:c7:90:83:e7:9d:09:1b:f2:1a:d6:95:05:42: a3:f4:b3:43:15:a4:b5:f2:b8:3d:90:21:74:c7:d8:15:44:a9: 90:47:78:d5:b0:b0:46:13:53:f6:5c:34:51:62:61:a2:43:28: 9c:da:73:42:fd:b3:86:d0:99:0d:db:26:eb:e4:7d:77:66:40: b2:ba:4c:b0:b0:c6:48:20:b7:98:0e:38:a1:59:80:68:ec:c4: 10:41:d4:9b:63:38:f3:b9:6e:14:a1:1f:98:30:fc:2c:56:ee: 93:c6:44:48:b2:f6:78:27:fa:f8:0f:46:de:40:29:aa:e5:b1: c4:f7:4f:39:eb:a1:6f:f9:66:d1:5a:1f:cf:8b:e8:49:bb:b5: 5b:9b:2e:3d:a8:c6:88:ab:7e:3f:94:ef:d1:69:7b:5c:db:8b: dd:5b:f3:19:5d:f4:87:b7:5c:58:0a:69:e4:b9:3f:32:1e:72: a7:76:cc:9d:36:dd:8e:7c:00:04:9f:4e:96:94:ce:ac:2c:98: c1:dc:d9:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbgEh/kudxAzcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NmUwNmQzMzYtZjQ5NC00YmYzLWIzMmYtNWFkMzhlNzFiNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi15mNYhXRZywQoF0y7K3dnl31go1UNIT6+z 6iFZO4sMVzT4oVQbYuxgnXY21/iDMalTSn7dlrhJxnfZrLRNnACn3cwcsc+w99he Mxz9HjibQDgVzmPrZKbveRxDPtsb2+a6ckw2SBSOPsjh6H4umiw2JbyhlbscnkIQ MGuY7eN3Wj55JAyyRMPO36J2tdLXsidSU72wRNJ3NAkRI+p54RkP/5LB75zQZfkg Moe2POc4LZIq3lXZDLqC2RUPDeZo5KqWC7mfJZkuOAaHG2dt3hSR+J+WUfnaXIIb fiK9rUG7sw0bPQFLR3NVb3CvQR2rWKN4Ns3pXFfaNIANJPdoOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWkrzC5GmoB1R6+ETlu7+gPx0ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY5NzRiMWQtYzhmZS0z MzA0LWI0Y2MtOGQxN2EyYmYxMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJqJ8IZjS0pIS6UX8CgPEqz/vfQCKnqyjIFXvxBod8DqZchShbwd pZP8HngtGBuWrT7kEUpkZqvPgXH9x5CD550JG/Ia1pUFQqP0s0MVpLXyuD2QIXTH 2BVEqZBHeNWwsEYTU/ZcNFFiYaJDKJzac0L9s4bQmQ3bJuvkfXdmQLK6TLCwxkgg t5gOOKFZgGjsxBBB1JtjOPO5bhShH5gw/CxW7pPGREiy9ngn+vgPRt5AKarlscT3 TznroW/5ZtFaH8+L6Em7tVubLj2oxoirfj+U79Fpe1zbi91b8xld9Ie3XFgKaeS5 PzIecqd2zJ023Y58AASfTpaUzqwsmMHc2bA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:01 2025 by rpki-client