$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa File: c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa (raw, json) Hash identifier: zlh9kMFT+aeH/P4f8w+1P5MNCNJx+A9FlTEUMXCuIZA= Subject key identifier: 4B:60:8A:62:DD:91:A1:15:F5:FF:5B:B6:1E:AD:61:D3:1A:89:ED:53 Certificate issuer: /CN=a53cd081-f6e5-4e71-868d-a1c11921321d Certificate serial: 010D0C9F4328584A374AC71ECD8C8C0DC62B3D00 Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 14618 IP address blocks: 2620:122:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c7:1e:cd:8c:8c:0d:c6:2b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=b7e95397-6aaf-44db-a9bd-30d70fc01b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:3d:66:b3:5a:18:54:14:12:07:ba:c9:64: 09:2a:f8:52:68:b8:bd:d5:54:7f:16:72:c4:00:28: 88:69:7c:3b:b0:1f:d3:24:b6:72:da:91:1a:3e:96: b1:b3:ce:ec:09:9f:a5:e3:1b:4a:f8:57:79:6f:3e: 62:43:a6:45:c9:16:9b:b1:ec:78:27:9c:b8:d0:cf: 12:f7:2e:d0:53:df:d4:62:a7:6c:11:86:e0:bc:ed: e5:29:54:8b:eb:81:e0:d3:f6:db:76:f4:67:b1:d5: 1e:a6:4e:6b:ab:07:5f:30:d7:13:fc:77:b3:a5:7c: 59:29:96:1c:dd:f6:aa:a3:c7:73:e3:aa:41:ce:e8: 49:35:3f:52:d7:52:bb:07:17:8e:99:49:04:bd:ad: fb:eb:d7:6c:f5:e0:d7:3e:e0:fa:69:97:b4:71:5e: b9:0f:59:ed:2f:c7:eb:e1:1e:56:42:d8:9b:87:74: 29:7d:43:e7:99:99:d2:44:01:d9:b0:66:03:4e:f6: 06:e2:81:c5:12:8e:c6:f5:b9:dc:98:e7:6b:aa:59: 7a:00:17:85:6a:34:db:af:b8:5e:7a:99:b1:bb:b3: 59:15:25:e0:92:77:94:97:75:06:1e:91:8f:50:2d: 69:5a:b2:ac:39:54:4b:98:a4:d7:ac:58:37:19:31: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:60:8A:62:DD:91:A1:15:F5:FF:5B:B6:1E:AD:61:D3:1A:89:ED:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl X509v3 Authority Key Identifier: keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer sbgp-ipAddrBlock: critical IPv6: 2620:122:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:84:65:f0:a9:ba:1b:69:01:fd:c7:7e:aa:cd:84:62:09:e3: 4c:0a:cb:de:a3:21:b9:71:f6:21:64:00:0e:e7:20:b9:89:6f: fc:af:ee:14:c8:d8:d9:6d:67:73:6e:7c:54:2b:fd:64:83:cc: 21:51:95:6d:15:7a:83:41:4d:d6:28:1b:4c:26:0c:d3:a2:44: 72:c8:a6:60:ec:08:09:73:bb:1d:15:ea:a3:1c:c3:8e:60:2a: 94:d0:d6:a0:1c:4a:3c:65:01:a7:d8:7a:d5:dc:41:2a:a1:00: fc:8b:4e:39:99:a3:6a:d3:a5:22:77:0a:b4:bf:18:56:47:27: a1:29:6f:ea:1c:97:e7:72:11:57:ac:25:6e:71:e1:2c:6a:a5: 51:9e:73:8e:8b:bd:ac:93:f4:2b:e3:1d:56:95:c7:1a:84:64: c8:ec:b3:f4:0c:bb:a3:2d:45:79:26:ad:f0:75:f1:5a:77:d3: 63:55:01:91:75:58:21:ff:60:2d:25:25:64:13:33:a3:00:12: 9b:d4:2d:ca:a8:1b:bd:ad:8c:9a:85:0e:d6:f5:71:c9:8a:a8: 98:a2:80:fa:48:c6:3b:84:6e:85:02:43:d5:ad:a8:be:e7:b1: ee:fb:60:38:b6:f0:70:89:b0:1e:92:0b:b7:19:77:7b:41:23: 45:a9:67:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo3SscezYyMDcYrPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzY2QwODEtZjZlNS00ZTcxLTg2OGQtYTFjMTE5MjEz MjFkMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YjdlOTUzOTctNmFhZi00NGRiLWE5YmQtMzBkNzBmYzAxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpU9ZrNaGFQUEge6yWQJKvhSaLi91VR/FnLE ACiIaXw7sB/TJLZy2pEaPpaxs87sCZ+l4xtK+Fd5bz5iQ6ZFyRabsex4J5y40M8S 9y7QU9/UYqdsEYbgvO3lKVSL64Hg0/bbdvRnsdUepk5rqwdfMNcT/HezpXxZKZYc 3faqo8dz46pBzuhJNT9S11K7BxeOmUkEva3769ds9eDXPuD6aZe0cV65D1ntL8fr 4R5WQtibh3QpfUPnmZnSRAHZsGYDTvYG4oHFEo7G9bncmOdrqll6ABeFajTbr7he epmxu7NZFSXgkneUl3UGHpGPUC1pWrKsOVRLmKTXrFg3GTHq3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtgimLdkaEV9f9bth6tYdMaie1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNj ZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMxMTkyMTMyMWQvYzRkNjUwOTEtN2E5ZS0z Y2EzLWE1NGMtNWNiYjc5MzBkMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTUzY2QwODEtZjZlNS00ZTcxLTg2 OGQtYTFjMTE5MjEzMjFkL2E1M2NkMDgxLWY2ZTUtNGU3MS04NjhkLWExYzExOTIx MzIxZC5jcmwwHwYDVR0jBBgwFoAU+c47QoJ3T6uNXqPojUlPKYGHe/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNjZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMx MTkyMTMyMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiEZfCpuhtpAf3HfqrNhGIJ40wKy96jIblx9iFkAA7nILmJb/yv 7hTI2NltZ3NufFQr/WSDzCFRlW0VeoNBTdYoG0wmDNOiRHLIpmDsCAlzux0V6qMc w45gKpTQ1qAcSjxlAafYetXcQSqhAPyLTjmZo2rTpSJ3CrS/GFZHJ6Epb+ocl+dy EVesJW5x4SxqpVGec46LvayT9CvjHVaVxxqEZMjss/QMu6MtRXkmrfB18Vp302NV AZF1WCH/YC0lJWQTM6MAEpvULcqoG72tjJqFDtb1ccmKqJiigPpIxjuEboUCQ9Wt qL7nse77YDi28HCJsB6SC7cZd3tBI0WpZ30= -----END CERTIFICATE-----Generated at Sun Jun 29 14:45:21 2025 by rpki-client