$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa File: 03fb9436-1079-3479-8e93-1626e18c2a80.roa (raw, json) Hash identifier: 9mKJghoaYA4zL0M7leH7is2MqzEe1uQIXbSBiAMce7Q= Subject key identifier: 39:9C:FA:67:C2:2A:4F:D0:BF:B4:6B:3B:78:B9:AB:12:70:53:F8:14 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584A3050327A37AF1B16C9711500 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 2620:116:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:32:7a:37:af:1b:16:c9:71:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=910bbe26-ce25-4c9d-9c31-74bb822262d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:ee:8c:10:e0:d2:ca:7c:97:25:f7:57:04: 9e:e2:bc:3c:10:47:be:cd:91:ca:1f:0a:28:9c:8b: 13:c6:49:42:5e:09:8c:3b:0f:07:7b:d4:0b:f7:2b: 69:cd:6f:db:18:42:c8:fb:8b:8a:44:a5:22:89:d9: 89:94:77:eb:06:0f:64:5d:d1:15:43:df:97:c8:41: 63:b3:62:81:eb:6b:36:bf:4d:96:4d:a9:a9:27:85: a1:81:cc:fe:6b:7b:df:8c:bd:d6:55:57:61:d3:7b: 13:e7:35:a9:4b:87:b3:eb:22:40:df:c5:22:28:07: ed:ea:5f:f2:71:fa:34:55:6b:90:5d:53:e9:ff:1c: 78:9b:05:d4:31:12:89:b5:f3:97:48:53:39:dd:df: 3f:f9:e9:12:99:21:13:c1:47:5b:06:af:4f:c2:bc: 70:07:07:02:32:36:13:df:92:f9:af:72:4b:10:76: 8b:51:34:ed:fb:24:5d:b1:72:46:40:fc:07:4f:34: 66:b4:19:4c:53:fd:a4:60:3f:c6:b7:8a:91:3c:65: 0d:88:eb:c5:74:9e:9f:b6:27:7e:d0:d0:fd:c2:27: 4b:fe:48:aa:23:42:57:7b:8c:e0:7f:39:5a:12:d9: cf:39:31:1f:23:0f:ac:f2:c4:51:4e:41:30:f3:81: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:FA:67:C2:2A:4F:D0:BF:B4:6B:3B:78:B9:AB:12:70:53:F8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5f:f2:54:59:27:0d:2e:ea:24:6c:59:ff:04:84:2f:77:fc: 98:11:d8:b7:a1:62:89:3c:5c:73:67:3d:09:66:40:6b:99:ee: ea:9a:7b:a3:d5:e5:8d:b6:89:02:6e:cf:51:22:d9:2c:39:45: 7d:92:89:2f:f4:1d:00:5d:58:c5:16:c2:93:13:a8:73:64:fd: b5:57:ac:a6:ff:38:01:4a:2e:23:7d:d3:4c:bc:26:82:28:22: 4d:34:09:c4:f4:83:83:6c:b5:2c:4e:cd:59:d3:0b:39:05:e5: 47:68:5f:72:1c:74:37:69:6b:92:ab:a8:01:5c:aa:44:83:e4: 05:e3:ad:48:eb:a8:96:1d:3e:b4:f5:88:f2:1b:cf:c9:c7:b3: df:cc:df:10:93:03:c2:c4:d7:6b:0e:02:6b:24:47:f4:c2:08: 36:8a:76:8f:49:c1:34:26:78:86:8d:df:58:32:1b:da:8e:08: fc:b6:54:5a:26:4e:5d:83:29:31:14:f8:dd:50:15:a0:d8:3a: 24:d6:1b:bb:46:76:d3:26:43:f4:a0:f5:ae:9e:a7:82:f8:5b: 1c:df:17:04:10:35:6d:95:18:57:46:78:4f:a4:ea:c2:dd:8d: 70:dc:3d:4e:b6:fa:d2:c9:f7:fd:2b:67:39:a5:df:79:14:25: 2d:17:bc:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDJ6N68bFslxFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTEwYmJlMjYtY2UyNS00YzlkLTljMzEtNzRiYjgyMjI2MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCHujBDg0sp8lyX3VwSe4rw8EEe+zZHKHwoo nIsTxklCXgmMOw8He9QL9ytpzW/bGELI+4uKRKUiidmJlHfrBg9kXdEVQ9+XyEFj s2KB62s2v02WTampJ4Whgcz+a3vfjL3WVVdh03sT5zWpS4ez6yJA38UiKAft6l/y cfo0VWuQXVPp/xx4mwXUMRKJtfOXSFM53d8/+ekSmSETwUdbBq9PwrxwBwcCMjYT 35L5r3JLEHaLUTTt+yRdsXJGQPwHTzRmtBlMU/2kYD/Gt4qRPGUNiOvFdJ6ftid+ 0ND9widL/kiqI0JXe4zgfzlaEtnPOTEfIw+s8sRRTkEw84H4swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmc+mfCKk/Qv7RrO3i5qxJwU/gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMDNmYjk0MzYtMTA3OS0z NDc5LThlOTMtMTYyNmUxOGMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJf8lRZJw0u6iRsWf8EhC93/JgR2LehYok8XHNnPQlmQGuZ7uqa e6PV5Y22iQJuz1Ei2Sw5RX2SiS/0HQBdWMUWwpMTqHNk/bVXrKb/OAFKLiN900y8 JoIoIk00CcT0g4NstSxOzVnTCzkF5UdoX3IcdDdpa5KrqAFcqkSD5AXjrUjrqJYd PrT1iPIbz8nHs9/M3xCTA8LE12sOAmskR/TCCDaKdo9JwTQmeIaN31gyG9qOCPy2 VFomTl2DKTEU+N1QFaDYOiTWG7tGdtMmQ/Sg9a6ep4L4WxzfFwQQNW2VGFdGeE+k 6sLdjXDcPU62+tLJ9/0rZzml33kUJS0XvMY= -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:21 2025 by rpki-client