$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1b6f8e5-0785-37fd-9b5c-50dedef2b9a1.roa File: e1b6f8e5-0785-37fd-9b5c-50dedef2b9a1.roa (raw, json) Hash identifier: MS4Xblzsdw+mGk6t98OgiI5fySOYMQABD2AQDwi+yFs= Subject key identifier: C2:4C:D1:BE:5C:E0:75:56:D0:D0:40:58:1C:0F:86:F6:B7:68:60:0F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6290C4C3FCD75F80AF881180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1b6f8e5-0785-37fd-9b5c-50dedef2b9a1.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 6167 IP address blocks: 2600:100c:d290::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c4:c3:fc:d7:5f:80:af:88:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=87c09388-3774-4bf6-95d9-63718ebf4beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:2f:41:6a:29:d3:2c:5f:87:a2:1c:23:97: de:0d:10:70:2c:bd:6b:b0:b7:6e:21:3b:7a:b4:65: 2b:75:64:da:fc:1b:d0:a1:f8:b6:ab:0d:a2:0d:36: c8:f7:e0:9a:bb:3a:95:47:c1:ca:5c:ff:5a:11:4b: b4:ae:1e:1a:8c:a6:a4:bf:62:53:c1:8a:6e:92:05: 51:13:8d:70:f7:a6:88:8c:ac:4f:26:62:f3:2d:61: 08:e1:7c:20:ea:a9:f3:ad:38:96:0c:b9:5b:03:5e: 8f:cb:2b:f4:12:ac:d8:20:9e:6a:a3:e5:29:65:c4: 68:2a:cc:58:7d:2e:ca:53:8f:32:09:91:a0:6d:9f: 45:8b:51:31:76:dc:1a:b4:2b:c9:5f:df:40:28:57: 6a:e1:eb:2d:c3:d0:c2:30:4e:06:4d:43:22:e0:48: 60:b8:5c:1a:ab:a9:f9:24:20:46:0d:e8:89:d5:82: b3:61:91:44:33:b8:b0:71:dc:4c:70:11:7a:0c:11: 72:df:60:17:66:06:71:9b:15:9e:f9:1c:40:b3:8e: 62:67:54:7b:5a:ca:6d:f1:24:e1:5d:c8:7c:97:2e: f4:8e:52:5a:d8:a4:00:4d:9d:e2:45:9c:bf:5a:da: 48:b2:5e:a2:d7:5c:70:f5:f2:d2:b4:27:f7:a1:74: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4C:D1:BE:5C:E0:75:56:D0:D0:40:58:1C:0F:86:F6:B7:68:60:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1b6f8e5-0785-37fd-9b5c-50dedef2b9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:d290::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:7c:7e:ae:99:4e:c2:cb:b3:f9:92:b1:45:1f:8b:b0:65:7a: 23:37:dc:2e:1e:b3:1c:43:8a:c5:d2:e3:5f:25:3d:51:9d:29: 0f:7f:ca:38:b2:78:c0:7b:23:2c:1e:d3:55:68:eb:bf:17:a0: 87:1e:80:13:d5:79:f7:74:20:6b:31:a1:3e:a9:10:1a:b6:d2: a0:3b:cb:96:ea:bb:30:eb:f9:88:07:d4:af:af:53:a5:b1:11: 33:c3:66:bc:b2:36:17:21:bb:bf:ff:ab:9d:58:14:b3:8a:b3: da:ca:d3:31:93:b7:94:7c:8e:2d:d4:16:b1:40:4e:1b:f7:d2: 90:32:38:7c:20:a6:90:32:7e:d7:7e:df:9f:52:dc:89:bd:77: 8d:ef:a0:b2:2e:65:aa:f1:ac:3e:4c:bf:c3:c8:91:99:d6:06: 29:3c:dd:40:3c:37:ad:9b:04:91:32:8d:57:79:e9:8c:32:19: 40:60:c6:cc:79:2b:fb:35:4c:bd:5c:fa:cb:7d:d7:f3:28:79: e9:18:a2:e4:a3:1e:95:dd:90:4d:7a:0d:08:a5:0a:2e:6e:35: 2b:35:84:57:4b:30:fe:49:fd:d2:b4:63:ee:0f:cf:c9:46:3a: 24:b4:ba:3a:2c:94:cf:5f:5a:fb:31:97:c0:78:ad:f4:0f:e3: 33:dd:90:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMTD/NdfgK+IEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODdjMDkzODgtMzc3NC00YmY2LTk1ZDktNjM3MThlYmY0YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4vQWop0yxfh6IcI5feDRBwLL1rsLduITt6 tGUrdWTa/BvQofi2qw2iDTbI9+CauzqVR8HKXP9aEUu0rh4ajKakv2JTwYpukgVR E41w96aIjKxPJmLzLWEI4Xwg6qnzrTiWDLlbA16Pyyv0EqzYIJ5qo+UpZcRoKsxY fS7KU48yCZGgbZ9Fi1ExdtwatCvJX99AKFdq4estw9DCME4GTUMi4EhguFwaq6n5 JCBGDeiJ1YKzYZFEM7iwcdxMcBF6DBFy32AXZgZxmxWe+RxAs45iZ1R7Wspt8STh Xch8ly70jlJa2KQATZ3iRZy/WtpIsl6i11xw9fLStCf3oXQFowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJM0b5c4HVW0NBAWBwPhva3aGAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTFiNmY4ZTUtMDc4NS0z N2ZkLTliNWMtNTBkZWRlZjJiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDNKQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALd8fq6ZTsLLs/mSsUUfi7BleiM33C4esxxDisXS418lPVGdKQ9/ yjiyeMB7Iywe01Vo678XoIcegBPVefd0IGsxoT6pEBq20qA7y5bquzDr+YgH1K+v U6WxETPDZryyNhchu7//q51YFLOKs9rK0zGTt5R8ji3UFrFAThv30pAyOHwgppAy ftd+359S3Im9d43voLIuZarxrD5Mv8PIkZnWBik83UA8N62bBJEyjVd56YwyGUBg xsx5K/s1TL1c+st91/MoeekYouSjHpXdkE16DQilCi5uNSs1hFdLMP5J/dK0Y+4P z8lGOiS0ujoslM9fWvsxl8B4rfQP4zPdkBk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:48 2025 by rpki-client