$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa File: 17922156-b32e-3f9a-8bc5-25eb9f4add68.roa (raw, json) Hash identifier: u0IrYtLTMWCSUn3mg0l8wvlKjfkZBMphmVCBMjlLF94= Subject key identifier: 91:44:47:CF:AD:18:0D:DE:40:D8:1B:76:69:9A:A4:11:97:55:7B:25 Certificate issuer: /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Certificate serial: 010D0C9F4328584A4C44530A53895196D3D08508 Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa Signing time: Tue 24 Jun 2025 13:19:52 +0000 ROA not before: Tue 24 Jun 2025 13:19:52 +0000 ROA not after: Mon 22 Sep 2025 13:19:52 +0000 asID: 400085 IP address blocks: 2620:9e:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:44:53:0a:53:89:51:96:d3:d0:85:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Validity Not Before: Jun 24 13:19:52 2025 GMT Not After : Sep 22 13:19:52 2025 GMT Subject: CN=f5610b0b-204b-4786-b4b9-7d9b40534c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:27:77:c5:5a:08:aa:6d:2b:64:41:e5:0b:7c: 24:b1:e3:db:6d:7f:39:92:c8:f5:ed:b2:05:6d:77: 0d:a0:4b:61:ea:88:4e:44:65:43:4f:7f:9f:e1:bd: 8a:b9:00:6a:e9:1d:af:45:a5:c9:18:50:4c:4d:f2: d4:ea:ba:47:74:b8:6a:ce:02:08:23:cb:ed:09:cb: ff:24:f6:ef:62:a9:fa:8d:3c:9e:be:8a:14:50:71: d9:69:d7:63:c7:6a:b5:cb:83:12:83:14:f5:cc:31: 79:53:2e:3b:26:7c:4c:00:3c:36:39:ed:b9:c6:30: 25:ff:3c:c8:d2:87:df:69:e8:6e:14:9e:4f:77:55: 88:5a:d7:50:81:ba:e2:c8:4d:ec:f5:c4:5c:fb:51: 18:fc:0d:55:72:d7:3d:67:f1:ae:b9:89:75:4a:dc: 2b:28:7f:53:5d:ef:ca:97:b5:44:aa:f9:40:8a:13: ce:2f:63:e0:ed:b5:23:b6:c3:6b:03:de:ab:a2:2d: 19:b8:ce:3b:50:95:1e:1a:c3:41:d8:52:a1:c2:77: 81:80:d4:67:18:d8:2c:1b:e1:e7:71:98:d3:d5:fb: 90:00:66:49:c8:18:f2:7c:4f:1e:f6:a7:e6:e7:0f: 26:15:8e:0d:f1:c1:fd:13:10:b5:7f:52:3f:cc:68: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:47:CF:AD:18:0D:DE:40:D8:1B:76:69:9A:A4:11:97:55:7B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/17922156-b32e-3f9a-8bc5-25eb9f4add68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl X509v3 Authority Key Identifier: keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer sbgp-ipAddrBlock: critical IPv6: 2620:9e:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:35:29:3a:b7:3c:31:c7:89:33:3f:23:fa:88:b8:a8:e7:42: f1:9d:dd:68:4c:d1:7a:d8:f8:de:f0:5e:03:a7:72:54:86:5d: 90:bf:12:27:e6:be:ab:48:b1:33:ff:af:33:96:cf:73:48:82: 89:c3:be:0d:90:f8:67:4d:c9:82:c9:6f:d7:94:1f:d2:2f:0c: cf:d9:00:16:42:72:d5:7b:86:be:21:c9:f1:ba:ba:c8:2a:cf: 5e:ef:71:e0:8f:15:f3:7d:1c:d3:4f:b3:be:3b:97:90:e0:d4: 04:4f:ff:17:eb:43:d8:8d:d4:e3:d2:e3:db:74:b6:e3:cd:08: fd:eb:55:dc:15:59:6f:c5:9a:8d:f3:ea:b3:2e:2d:a2:c7:b5: 6e:37:1a:7e:89:d0:27:ef:17:63:58:f7:5a:1f:8d:f6:43:33: aa:54:b5:47:9b:6e:f1:f4:af:5e:b9:39:27:28:0c:f4:4c:4c: bc:4d:1a:e4:f8:66:f1:69:83:58:4f:01:be:32:24:ae:5e:9f: 22:b1:5c:d1:85:93:6b:69:12:b1:9d:c2:6e:3c:7e:d3:ce:88: f3:37:6a:f3:15:77:0a:d9:6f:1d:f6:e3:d8:d0:2f:94:5b:54: 84:26:0a:a8:5d:f4:93:da:d7:c3:f4:75:60:a6:3f:08:1a:ff: 57:1d:13:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMRFMKU4lRltPQhQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU5YTIyYjItOTVkMi00OGMwLThmZWItODE5ZDg3N2Vl MWUzMB4XDTI1MDYyNDEzMTk1MloXDTI1MDkyMjEzMTk1MlowLzEtMCsGA1UEAxMk ZjU2MTBiMGItMjA0Yi00Nzg2LWI0YjktN2Q5YjQwNTM0YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yd3xVoIqm0rZEHlC3wksePbbX85ksj17bIF bXcNoEth6ohORGVDT3+f4b2KuQBq6R2vRaXJGFBMTfLU6rpHdLhqzgIII8vtCcv/ JPbvYqn6jTyevooUUHHZaddjx2q1y4MSgxT1zDF5Uy47JnxMADw2Oe25xjAl/zzI 0offaehuFJ5Pd1WIWtdQgbriyE3s9cRc+1EY/A1Vctc9Z/GuuYl1StwrKH9TXe/K l7VEqvlAihPOL2Pg7bUjtsNrA96roi0ZuM47UJUeGsNB2FKhwneBgNRnGNgsG+Hn cZjT1fuQAGZJyBjyfE8e9qfm5w8mFY4N8cH9ExC1f1I/zGhYCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFER8+tGA3eQNgbdmmapBGXVXslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NTlh MjJiMi05NWQyLTQ4YzAtOGZlYi04MTlkODc3ZWUxZTMvMTc5MjIxNTYtYjMyZS0z ZjlhLThiYzUtMjVlYjlmNGFkZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTU5YTIyYjItOTVkMi00OGMwLThm ZWItODE5ZDg3N2VlMWUzLzk1OWEyMmIyLTk1ZDItNDhjMC04ZmViLTgxOWQ4Nzdl ZTFlMy5jcmwwHwYDVR0jBBgwFoAUY54Wzv5Ue1vzA4W5ucX2ajQGOngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85NTlhMjJiMi05NWQyLTQ4YzAtOGZlYi04MTlk ODc3ZWUxZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABE1KTq3PDHHiTM/I/qIuKjnQvGd3WhM0XrY+N7wXgOnclSGXZC/ EifmvqtIsTP/rzOWz3NIgonDvg2Q+GdNyYLJb9eUH9IvDM/ZABZCctV7hr4hyfG6 usgqz17vceCPFfN9HNNPs747l5Dg1ARP/xfrQ9iN1OPS49t0tuPNCP3rVdwVWW/F mo3z6rMuLaLHtW43Gn6J0CfvF2NY91ofjfZDM6pUtUebbvH0r165OScoDPRMTLxN GuT4ZvFpg1hPAb4yJK5enyKxXNGFk2tpErGdwm48ftPOiPM3avMVdwrZbx3249jQ L5RbVIQmCqhd9JPa18P0dWCmPwga/1cdE+Y= -----END CERTIFICATE-----Generated at Tue Jul 1 07:38:42 2025 by rpki-client