$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa File: fd64e123-9760-309c-a904-b0c881a21988.roa (raw, json) Hash identifier: RWxn/VU17takA7/wzlHzZc2px1bOQBMkp9EYV2laRKg= Subject key identifier: 2F:55:EC:77:9A:35:1B:1B:2E:92:A5:44:1B:F6:21:DE:56:1D:12:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C37263A947B7E034AA56480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1004:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:26:3a:94:7b:7e:03:4a:a5:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=6f356b03-6822-43b7-a1e0-2234c30c3c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:e1:f5:35:c0:7e:1f:cd:99:87:29:db:b3: 92:f5:46:2e:ed:da:ba:78:8e:e5:f3:2b:6c:6d:31: 2a:df:6a:46:2d:06:8e:2d:cd:33:3a:e5:10:a1:6a: a0:5c:87:c9:6e:1e:ad:c4:bc:e1:b6:69:b1:80:bf: 40:d0:59:a0:c2:a8:b3:64:1f:7f:0b:7f:42:29:6e: 61:3a:6b:8c:e4:46:d3:fc:b4:33:f0:76:03:ac:7f: c5:68:88:e1:71:96:71:b7:87:10:9c:bc:00:eb:81: 2f:cc:ca:b2:e4:21:2c:66:f0:45:0c:d5:9d:66:00: 61:30:14:99:60:98:8d:ca:b5:f6:4d:4a:7a:ec:84: f7:d8:9d:3b:36:13:fe:b9:b9:7e:ec:77:60:5f:8a: 77:92:b3:44:99:31:02:3f:f6:f7:b0:14:d7:ed:29: 90:96:ae:c3:24:c8:a2:cd:3b:b7:24:24:f7:59:8e: 4a:53:ad:27:89:14:61:1b:1e:ac:6f:2f:0b:22:3a: e4:39:bc:78:9f:56:70:16:fb:31:a0:03:00:31:72: 63:92:c2:b0:a9:55:cb:1b:08:16:2c:b8:05:cc:11: 68:f7:63:9a:f4:64:89:c8:6e:3f:03:cd:c2:e1:b8: 30:07:d9:3d:06:1c:b1:97:36:6a:8e:ba:5c:16:79: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:55:EC:77:9A:35:1B:1B:2E:92:A5:44:1B:F6:21:DE:56:1D:12:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d0:ad:b9:10:ad:d4:d0:6e:f1:3a:3b:6a:8d:fd:87:03:5a: 5f:21:6b:dd:e5:74:0b:00:9a:90:b9:86:08:e6:1f:09:e7:47: c4:21:4c:0e:bc:b2:4d:f5:06:c7:25:8f:8e:67:4c:39:12:21: 5d:37:28:8e:9f:0d:9f:9b:ed:98:16:7e:90:a0:66:7e:9d:11: b9:f9:03:79:38:c9:a3:06:e7:72:9b:be:14:3e:dd:93:75:b9: 8d:63:31:b1:34:a1:80:4b:fd:26:b6:ce:0a:b0:e4:3a:5d:7a: ab:e2:e8:9d:e7:6e:36:66:6e:0f:0b:78:6c:0c:c8:d8:9f:7a: 5e:ea:90:9d:64:ba:20:71:31:47:f8:65:aa:d0:70:f9:42:62: 74:eb:6a:d8:b9:dc:c8:78:ff:45:31:41:35:9d:82:eb:ae:e9: 9a:74:70:7f:14:90:9d:0c:31:74:dc:9d:42:c5:2a:ea:85:34: 62:db:54:4a:04:03:f0:d7:46:8a:2f:a0:93:28:c6:20:eb:07: be:6c:73:7d:45:4c:62:8b:ee:53:47:2e:62:a4:17:12:ba:b9: c5:91:c6:83:75:09:75:60:ec:fb:44:e4:99:6f:75:ab:27:70: 17:b9:73:55:fe:91:b5:dd:13:a5:ba:e4:6d:c1:83:2b:d6:13: 77:dc:2b:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNyY6lHt+A0qlZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NmYzNTZiMDMtNjgyMi00M2I3LWExZTAtMjIzNGMzMGMzYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWfh9TXAfh/NmYcp27OS9UYu7dq6eI7l8yts bTEq32pGLQaOLc0zOuUQoWqgXIfJbh6txLzhtmmxgL9A0FmgwqizZB9/C39CKW5h OmuM5EbT/LQz8HYDrH/FaIjhcZZxt4cQnLwA64EvzMqy5CEsZvBFDNWdZgBhMBSZ YJiNyrX2TUp67IT32J07NhP+ubl+7HdgX4p3krNEmTECP/b3sBTX7SmQlq7DJMii zTu3JCT3WY5KU60niRRhGx6sby8LIjrkObx4n1ZwFvsxoAMAMXJjksKwqVXLGwgW LLgFzBFo92Oa9GSJyG4/A83C4bgwB9k9BhyxlzZqjrpcFnlmuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9V7HeaNRsbLpKlRBv2Id5WHRLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmQ2NGUxMjMtOTc2MC0z MDljLWE5MDQtYjBjODgxYTIxOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrQrbkQrdTQbvE6O2qN/YcDWl8ha93ldAsAmpC5hgjmHwnnR8Qh TA68sk31Bsclj45nTDkSIV03KI6fDZ+b7ZgWfpCgZn6dEbn5A3k4yaMG53KbvhQ+ 3ZN1uY1jMbE0oYBL/Sa2zgqw5Dpdeqvi6J3nbjZmbg8LeGwMyNifel7qkJ1kuiBx MUf4ZarQcPlCYnTrati53Mh4/0UxQTWdguuu6Zp0cH8UkJ0MMXTcnULFKuqFNGLb VEoEA/DXRoovoJMoxiDrB75sc31FTGKL7lNHLmKkFxK6ucWRxoN1CXVg7PtE5Jlv dasncBe5c1X+kbXdE6W65G3BgyvWE3fcK6A= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:49 2025 by rpki-client