$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa File: a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (raw, json) Hash identifier: k4yNoC4nH21JeGStTGRJfZ44C9uRFRhhKZuhoZYW/7M= Subject key identifier: 9A:9B:03:47:78:06:B2:D9:29:64:B0:82:D9:27:54:FE:9D:D1:11:87 Certificate issuer: /CN=60e6a30d-f63a-493d-8227-28d94c142383 Certificate serial: 010D0C9F4328584A253F6F7A51F6FA48C5B658B0 Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa Signing time: Tue 10 Jun 2025 13:53:29 +0000 ROA not before: Tue 10 Jun 2025 13:53:29 +0000 ROA not after: Mon 08 Sep 2025 13:53:29 +0000 asID: 19163 IP address blocks: 2607:b340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:3f:6f:7a:51:f6:fa:48:c5:b6:58:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383 Validity Not Before: Jun 10 13:53:29 2025 GMT Not After : Sep 8 13:53:29 2025 GMT Subject: CN=af401e9a-0a12-4f37-b590-09939a5ea854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:a7:4e:fb:58:fb:10:b6:cd:f5:88:95:5a: 44:22:33:92:b1:d2:ad:9d:b1:9f:c9:e2:ce:76:f4: f2:03:dd:d0:94:7d:33:f4:8b:db:d0:5e:96:a8:8e: ae:fb:0f:83:75:ce:a9:04:80:f2:1a:65:19:92:e3: 10:cb:7a:8b:08:06:71:e6:f9:bb:f4:b7:83:7f:96: ee:2f:9e:d6:eb:b4:97:7a:0d:82:77:49:f0:86:16: e2:75:69:4f:12:24:b6:c5:10:8e:f4:f9:72:8c:9c: c7:38:11:1f:44:58:b2:01:bf:fa:33:3f:7c:86:78: 98:9e:90:30:4d:d5:8a:cc:98:82:24:85:34:a8:0f: 14:23:61:a8:f0:da:ad:6b:d3:b8:0c:99:c0:76:57: 44:27:9a:95:ce:fe:67:ea:67:96:45:7a:01:0e:28: 01:51:d3:51:7d:6c:d0:28:fb:36:a2:55:70:6a:9c: fd:21:1a:46:2e:a3:4e:2f:1d:ae:f1:bd:a9:2d:11: 60:b4:4c:31:55:c8:71:dc:9f:18:67:c8:77:15:4f: 67:7d:1a:52:65:85:6e:e4:e7:bd:dc:32:07:56:07: 8f:cd:7c:c6:1a:63:77:0b:75:86:30:10:02:3b:33: de:5e:28:30:3d:da:c7:0d:65:68:c9:6d:53:f9:2c: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9B:03:47:78:06:B2:D9:29:64:B0:82:D9:27:54:FE:9D:D1:11:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl X509v3 Authority Key Identifier: keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer sbgp-ipAddrBlock: critical IPv6: 2607:b340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:12:3f:a0:e5:05:9a:1b:51:94:5b:86:fb:2c:ea:7a:e4:22: df:62:50:13:9c:a1:f2:09:c6:42:86:03:95:ff:b4:5c:1f:db: f2:e8:9c:f9:61:d2:23:19:bb:c4:74:38:6f:c5:f0:40:0c:dc: 5c:c7:26:c3:7a:e3:c1:35:c9:fc:7d:5d:b8:b4:30:95:0e:bd: 38:64:bc:05:29:4d:f8:4d:a2:8d:a4:22:5c:79:b1:58:b7:a4: 91:44:a9:16:e0:d9:01:51:53:61:98:0f:b7:c8:dc:5f:c2:c3: df:3e:86:9b:4f:b4:ec:8a:2d:f2:6b:ad:69:09:57:66:9d:dd: 2e:0f:7e:08:da:09:4d:c1:95:4b:c7:61:25:4e:a6:9c:b1:c3: d5:ff:c0:39:b2:b2:de:94:16:35:9e:ac:4a:d2:3a:d3:58:e9: c6:c6:67:6e:e0:d4:a4:ae:37:3a:38:66:e9:2a:92:ff:ef:f6: 03:e7:72:94:14:e6:49:51:df:f6:a8:39:c1:c7:05:91:c0:9e: 76:3b:01:09:6f:21:a4:0a:38:ce:3e:8f:85:68:54:73:a9:2a: 1a:7f:fa:93:35:aa:99:c0:cd:18:32:4d:ed:fe:8f:48:eb:8c: 5d:d0:bd:4d:53:c1:fd:c5:d7:ed:e5:e9:d8:34:6a:0a:a0:91: 93:b6:95:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEolP296Ufb6SMW2WLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBlNmEzMGQtZjYzYS00OTNkLTgyMjctMjhkOTRjMTQy MzgzMB4XDTI1MDYxMDEzNTMyOVoXDTI1MDkwODEzNTMyOVowLzEtMCsGA1UEAxMk YWY0MDFlOWEtMGExMi00ZjM3LWI1OTAtMDk5MzlhNWVhODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H2nTvtY+xC2zfWIlVpEIjOSsdKtnbGfyeLO dvTyA93QlH0z9Ivb0F6WqI6u+w+Ddc6pBIDyGmUZkuMQy3qLCAZx5vm79LeDf5bu L57W67SXeg2Cd0nwhhbidWlPEiS2xRCO9PlyjJzHOBEfRFiyAb/6Mz98hniYnpAw TdWKzJiCJIU0qA8UI2Go8Nqta9O4DJnAdldEJ5qVzv5n6meWRXoBDigBUdNRfWzQ KPs2olVwapz9IRpGLqNOLx2u8b2pLRFgtEwxVchx3J8YZ8h3FU9nfRpSZYVu5Oe9 3DIHVgePzXzGGmN3C3WGMBACOzPeXigwPdrHDWVoyW1T+SxMAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqbA0d4BrLZKWSwgtknVP6d0RGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2 YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5NGMxNDIzODMvYTBhZWQyY2YtODFhMC0z ZmMwLTg1ZmQtZjE0NWIwYTdkZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjBlNmEzMGQtZjYzYS00OTNkLTgy MjctMjhkOTRjMTQyMzgzLzYwZTZhMzBkLWY2M2EtNDkzZC04MjI3LTI4ZDk0YzE0 MjM4My5jcmwwHwYDVR0jBBgwFoAUPyCnLjA8pOKQPlYPDjtbnt5d/0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5 NGMxNDIzODMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgezQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMEj+g5QWaG1GUW4b7LOp65CLfYlATnKHyCcZChgOV/7RcH9vy6Jz5 YdIjGbvEdDhvxfBADNxcxybDeuPBNcn8fV24tDCVDr04ZLwFKU34TaKNpCJcebFY t6SRRKkW4NkBUVNhmA+3yNxfwsPfPoabT7Tsii3ya61pCVdmnd0uD34I2glNwZVL x2ElTqacscPV/8A5srLelBY1nqxK0jrTWOnGxmdu4NSkrjc6OGbpKpL/7/YD53KU FOZJUd/2qDnBxwWRwJ52OwEJbyGkCjjOPo+FaFRzqSoaf/qTNaqZwM0YMk3t/o9I 64xd0L1NU8H9xdft5enYNGoKoJGTtpVR -----END CERTIFICATE-----Generated at Wed Jun 18 14:08:57 2025 by rpki-client