$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json) Hash identifier: npu0aV8P/Ed3GU3Vz4GwxFSSzieK9Cz9ZfzXOGfLk/c= Subject key identifier: 9C:CD:17:F4:40:8B:2C:B0:E6:2E:A5:EF:A1:D7:2F:5B:26:9A:67:48 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584A3050361D8E226F580218FC80 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:36:1d:8e:22:6f:58:02:18:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=fa8cf375-92f4-4aed-b112-1b29bc0a7509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:fd:60:c8:48:ad:df:e6:21:ce:09:93:c6: 6a:d5:83:0f:37:16:d4:5e:69:7c:e4:55:a6:43:67: c6:45:10:61:91:ad:a4:62:ed:1f:a4:36:2d:e2:03: 73:9a:ba:f6:06:e0:c5:9a:d5:21:35:eb:e0:9c:49: c5:3a:d0:0d:16:86:12:28:87:f0:1e:86:ea:f0:6d: ed:fa:4d:13:eb:64:66:38:f7:b6:91:1b:df:a8:b8: 50:77:8f:f9:aa:cc:29:28:77:dd:02:02:0c:63:9d: ee:e6:b3:61:f6:a9:ee:41:99:e7:47:5a:76:fe:4b: d2:eb:5f:fc:db:9d:ee:6f:f9:07:88:1b:b2:86:b9: 27:ef:51:5b:e7:ba:34:8a:b0:da:d7:16:88:10:90: c4:63:04:11:a2:0a:36:4e:4c:a5:a2:f8:ce:7f:13: 1d:57:eb:6e:b9:60:2f:8a:c5:35:b4:fc:d7:77:11: f8:d6:b2:85:42:e3:21:16:2e:99:a1:a3:68:66:05: 45:12:2a:df:4b:cd:52:9d:bb:49:2a:85:c8:b0:af: c5:b1:66:07:b6:6b:2e:08:57:51:ff:3b:b3:57:f9: c3:73:61:96:55:da:48:b9:fc:f7:dc:07:fc:f6:0f: 46:da:75:0f:4d:35:4e:53:15:2a:16:67:cc:a7:25: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CD:17:F4:40:8B:2C:B0:E6:2E:A5:EF:A1:D7:2F:5B:26:9A:67:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1d:00:a1:df:e1:be:53:fb:f5:03:22:09:97:70:02:ec:ab: 8e:e0:7a:92:02:fa:77:28:74:77:6a:e6:91:a2:30:c3:6d:13: 71:ec:16:6f:99:6c:f9:f5:9a:81:8e:65:bb:43:a6:97:71:ea: 1e:fa:7a:59:6a:38:e4:2f:80:1a:5f:8d:9f:2f:7d:70:24:9a: 7a:d0:b2:3a:2c:8d:29:d8:59:c0:91:38:28:7b:18:99:ba:33: e4:08:e5:b7:26:76:9d:83:cb:1b:1f:61:21:13:4b:f3:85:41: ca:39:cd:00:11:d0:dd:80:dd:1e:cb:b0:7b:a0:6f:d9:98:37: 43:52:24:94:e9:5f:6a:32:4a:f5:20:8e:d1:8e:9c:1f:ae:f9: b5:21:53:53:76:6e:72:fe:56:e4:59:27:d0:ed:c2:56:0e:62: c4:06:2d:4c:77:3c:6d:21:9d:ba:7b:cf:f0:51:e0:b6:11:5c: e0:11:44:8a:7a:b3:6d:57:73:83:51:12:9c:fa:44:df:ac:b2: af:03:7a:87:38:dd:a1:09:59:7b:ff:b6:28:f6:b8:c2:98:99: ff:6d:10:74:15:9d:55:f1:6a:a6:85:93:95:12:06:20:d0:6c: 2f:93:04:3f:20:3d:eb:5c:e8:b6:bc:f0:44:48:a9:1a:ca:e7: 90:f3:9f:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDYdjiJvWAIY/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmE4Y2YzNzUtOTJmNC00YWVkLWIxMTItMWIyOWJjMGE3NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y79YMhIrd/mIc4Jk8Zq1YMPNxbUXml85FWm Q2fGRRBhka2kYu0fpDYt4gNzmrr2BuDFmtUhNevgnEnFOtANFoYSKIfwHobq8G3t +k0T62RmOPe2kRvfqLhQd4/5qswpKHfdAgIMY53u5rNh9qnuQZnnR1p2/kvS61/8 253ub/kHiBuyhrkn71Fb57o0irDa1xaIEJDEYwQRogo2TkylovjOfxMdV+tuuWAv isU1tPzXdxH41rKFQuMhFi6ZoaNoZgVFEirfS81SnbtJKoXIsK/FsWYHtmsuCFdR /zuzV/nDc2GWVdpIufz33Af89g9G2nUPTTVOUxUqFmfMpyX6dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJzNF/RAiyyw5i6l76HXL1smmmdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjUzOTA1YzctNTA0MC0z ZTk2LThhZmItZDFmZDI0ZDI3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYdAKHf4b5T+/UDIgmXcALsq47gepIC+ncodHdq5pGiMMNtE3Hs Fm+ZbPn1moGOZbtDppdx6h76ellqOOQvgBpfjZ8vfXAkmnrQsjosjSnYWcCROCh7 GJm6M+QI5bcmdp2DyxsfYSETS/OFQco5zQAR0N2A3R7LsHugb9mYN0NSJJTpX2oy SvUgjtGOnB+u+bUhU1N2bnL+VuRZJ9DtwlYOYsQGLUx3PG0hnbp7z/BR4LYRXOAR RIp6s21Xc4NREpz6RN+ssq8Deoc43aEJWXv/tij2uMKYmf9tEHQVnVXxaqaFk5US BiDQbC+TBD8gPetc6La88ERIqRrK55Dzn/g= -----END CERTIFICATE-----Generated at Mon Jun 30 15:49:00 2025 by rpki-client