$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa File: ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json) Hash identifier: 9/6O75OHCYqqw3HxYV62iBNbvHgh7OSwMHaV5DBWxZY= Subject key identifier: 49:38:5C:3D:E3:DB:33:CF:FF:A5:6A:98:7C:85:1D:92:C9:73:7E:65 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584A3050366B981D2493DFF5B380 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2620:116:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:36:6b:98:1d:24:93:df:f5:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=ed2855de-1e41-4ac9-88c2-9379eb1cd7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:6b:16:88:e6:d4:2c:3e:23:4c:35:92:e7: 28:21:3e:11:e7:8b:15:cb:aa:77:8b:52:21:c9:6e: 52:e4:82:63:70:68:28:ae:28:2b:36:f5:2d:45:f9: 41:0f:09:c7:6a:03:a4:06:d2:ef:31:fc:19:5e:14: a5:01:f9:55:b1:11:27:01:7d:26:72:29:d7:14:b3: 5a:32:14:9f:c9:65:6f:9d:02:cb:4e:f8:9b:d2:9e: 84:a8:91:2a:b6:e4:c8:ae:07:a1:41:c5:8f:25:f5: ff:7b:8b:42:8b:70:27:db:99:46:b1:63:de:6b:9f: a1:ac:d9:30:13:09:47:de:ef:a3:aa:48:85:b9:5a: 18:1e:7a:ff:27:52:e4:70:33:52:04:c9:21:d9:5f: 18:6a:13:3f:a6:d4:d2:95:e6:66:0f:12:94:10:02: d5:5c:e0:e7:99:ea:e0:14:25:14:d1:04:aa:1e:b2: da:92:aa:26:8b:1c:d7:96:c2:3c:1f:03:fe:fc:f1: 74:66:64:c6:7b:55:9b:64:fa:04:88:63:7f:bc:c1: 2c:b4:ff:f9:32:62:a6:25:ef:36:3f:88:a8:50:93: 83:c9:80:40:08:9a:c6:b5:d7:a3:90:ad:4d:8a:86: 28:82:d0:7c:c7:52:43:85:0d:ec:77:e9:a2:87:3c: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:38:5C:3D:E3:DB:33:CF:FF:A5:6A:98:7C:85:1D:92:C9:73:7E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:da:8f:95:f0:53:97:b2:36:b4:a8:c7:b5:70:81:a3:5d:59: eb:c5:4d:e6:ae:90:3e:03:bb:80:1e:18:7a:b5:59:af:8d:28: b0:10:3f:e9:b4:c6:5f:1d:c0:5f:f1:00:7c:1f:26:85:74:ff: bc:54:82:89:f8:66:57:a5:57:5f:7c:30:f7:d4:10:29:2e:67: 28:c3:65:8c:1f:e5:bc:8e:7b:c4:e3:cb:29:5f:22:db:bb:11: 50:29:23:d5:3c:dd:0f:48:b8:09:9d:db:b8:7c:da:22:b1:40: c0:22:01:d5:dd:e4:43:b2:45:66:80:9c:a1:a0:1b:b2:0a:cf: 44:f2:1e:dd:ca:a4:22:91:6f:7c:fa:ab:2e:4e:61:4f:fa:8d: cd:97:9c:ff:a7:b8:6b:b1:ee:66:e6:9c:4a:9a:85:d9:90:45: 3d:85:80:df:6d:4d:89:a6:69:27:68:01:58:f9:23:8e:ee:4b: cc:f8:b1:3f:a7:2d:b8:9c:1c:c5:8f:b8:fd:f5:fc:a0:c2:ff: c1:f1:86:f0:6b:d5:fc:51:00:8c:5a:9e:22:03:5a:39:3c:87: 26:22:54:53:d8:fc:cd:47:20:b7:11:2b:00:98:42:c8:0c:3e: 65:fe:5e:f2:21:8c:3c:91:a9:f7:9e:ea:6b:37:b1:92:04:ca: 68:c9:44:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDZrmB0kk9/1s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWQyODU1ZGUtMWU0MS00YWM5LTg4YzItOTM3OWViMWNkN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz71rFojm1Cw+I0w1kucoIT4R54sVy6p3i1Ih yW5S5IJjcGgorigrNvUtRflBDwnHagOkBtLvMfwZXhSlAflVsREnAX0mcinXFLNa MhSfyWVvnQLLTvib0p6EqJEqtuTIrgehQcWPJfX/e4tCi3An25lGsWPea5+hrNkw EwlH3u+jqkiFuVoYHnr/J1LkcDNSBMkh2V8YahM/ptTSleZmDxKUEALVXODnmerg FCUU0QSqHrLakqomixzXlsI8HwP+/PF0ZmTGe1WbZPoEiGN/vMEstP/5MmKmJe82 P4ioUJODyYBACJrGtdejkK1NioYogtB8x1JDhQ3sd+mihzwdUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEk4XD3j2zPP/6VqmHyFHZLJc35lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2U5MzM3YTQtNGUwYS0z ZjliLWE3MDMtMzIzNzhjOGIwODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHaj5XwU5eyNrSox7VwgaNdWevFTeaukD4Du4AeGHq1Wa+NKLAQ P+m0xl8dwF/xAHwfJoV0/7xUgon4ZlelV198MPfUECkuZyjDZYwf5byOe8Tjyylf Itu7EVApI9U83Q9IuAmd27h82iKxQMAiAdXd5EOyRWaAnKGgG7IKz0TyHt3KpCKR b3z6qy5OYU/6jc2XnP+nuGux7mbmnEqahdmQRT2FgN9tTYmmaSdoAVj5I47uS8z4 sT+nLbicHMWPuP31/KDC/8HxhvBr1fxRAIxaniIDWjk8hyYiVFPY/M1HILcRKwCY QsgMPmX+XvIhjDyRqfee6ms3sZIEymjJRPg= -----END CERTIFICATE-----Generated at Sun Jun 29 14:24:21 2025 by rpki-client