$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa File: cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa (raw, json) Hash identifier: dCDhGtm0r564mmvizvZ1sqH8OeiR7r2vvoEZ6KGQDbw= Subject key identifier: 1C:71:47:59:EB:13:F0:31:10:0F:BF:BF:BA:C8:A8:7C:56:B2:65:B8 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584A3050369B5144166E9E196400 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 27281 IP address blocks: 2620:116:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:36:9b:51:44:16:6e:9e:19:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=1ca72b83-e1d9-4edb-8c32-76df549ac2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:be:d5:f3:99:89:85:ce:56:e0:b9:e2:b4: 42:c7:e2:25:59:2e:7c:d0:f1:05:f0:d6:6f:ec:b4: 0c:8a:1b:5b:27:8c:70:cc:07:e8:f4:e7:aa:a1:49: 0a:83:fc:fc:82:7a:24:87:a4:98:9a:1d:c6:6b:20: 65:3b:68:6b:ee:1c:88:9c:d3:49:ff:19:00:e9:37: 1e:5d:0e:15:f9:aa:21:3d:57:a5:57:de:e1:1b:70: 28:ba:b7:5a:26:2f:fc:4b:35:07:71:b1:22:eb:ef: f3:9c:32:94:b8:bf:52:62:75:d5:88:65:d6:42:19: 54:aa:8a:86:b3:de:b7:b4:f4:e4:54:90:64:eb:8e: b3:8d:74:66:34:d5:cb:ae:30:80:a8:61:2b:5c:24: 0a:70:a3:ba:90:9c:95:08:b8:2d:74:61:e6:c1:0b: fe:da:f7:28:1b:a3:06:f0:77:d5:d2:e1:80:96:60: e3:f0:77:18:4f:b3:9a:7c:0a:4b:c0:fa:08:15:6e: 22:0a:f7:e1:d6:01:98:c9:3f:58:e2:11:f8:aa:30: e5:1b:c6:e4:bb:43:6b:83:1d:75:49:06:cd:f5:dd: 1d:c6:7d:9c:30:da:36:69:17:8f:06:7c:cc:fe:e9: 56:04:5d:d0:4c:d9:47:bf:6a:dd:8a:90:f0:47:f5: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:71:47:59:EB:13:F0:31:10:0F:BF:BF:BA:C8:A8:7C:56:B2:65:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:23:51:4d:2e:a9:8a:b1:61:e6:82:9c:9d:24:fd:f0:11:73: 62:71:a2:bf:42:32:c8:0d:69:55:cb:32:1a:de:bd:bb:89:c3: 38:a7:49:ac:f8:b4:3c:cb:6b:75:0a:4a:65:5e:3e:49:9a:0e: 69:55:a1:87:14:98:77:0d:30:70:1f:22:25:f3:0c:67:aa:05: 36:99:73:48:82:56:c4:77:15:29:e2:52:d0:9f:5b:0b:1a:a3: 3f:eb:4e:8e:cb:b1:93:20:5d:a2:1c:d2:c5:73:93:b6:ca:59: a7:1a:58:52:eb:b5:ad:94:fe:56:42:17:0d:d9:70:89:5f:60: d4:c7:5d:b5:4b:83:a5:67:4c:dc:6b:80:2f:38:d0:e9:da:6f: 35:28:9a:66:c7:96:ac:fb:35:a8:8d:cf:43:72:af:83:2c:0c: a9:17:77:8b:eb:a6:47:c5:df:b6:28:1b:49:79:1d:a7:8b:33: c0:27:7b:cc:0c:f4:28:0b:20:a4:6b:af:38:5e:e7:2d:20:76: 08:eb:8e:98:fb:eb:0f:ee:18:7a:04:b8:25:9f:c6:d7:eb:0d: 85:d8:1d:7b:64:38:09:d3:b3:0d:a7:93:55:51:62:eb:fe:ae: 90:94:69:be:e5:2f:9a:91:32:a8:1d:96:a2:eb:6f:55:18:eb: 73:a7:72:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDabUUQWbp4ZZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWNhNzJiODMtZTFkOS00ZWRiLThjMzItNzZkZjU0OWFjMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2S+1fOZiYXOVuC54rRCx+IlWS580PEF8NZv 7LQMihtbJ4xwzAfo9OeqoUkKg/z8gnokh6SYmh3GayBlO2hr7hyInNNJ/xkA6Tce XQ4V+aohPVelV97hG3AourdaJi/8SzUHcbEi6+/znDKUuL9SYnXViGXWQhlUqoqG s963tPTkVJBk646zjXRmNNXLrjCAqGErXCQKcKO6kJyVCLgtdGHmwQv+2vcoG6MG 8HfV0uGAlmDj8HcYT7OafApLwPoIFW4iCvfh1gGYyT9Y4hH4qjDlG8bku0Nrgx11 SQbN9d0dxn2cMNo2aRePBnzM/ulWBF3QTNlHv2rdipDwR/UntwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxxR1nrE/AxEA+/v7rIqHxWsmW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2Y0NWRkYjMtMGY4Yy0z YzUzLThhNzAtMjM0ZDFjYWExMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAgjUU0uqYqxYeaCnJ0k/fARc2Jxor9CMsgNaVXLMhrevbuJwzin Saz4tDzLa3UKSmVePkmaDmlVoYcUmHcNMHAfIiXzDGeqBTaZc0iCVsR3FSniUtCf Wwsaoz/rTo7LsZMgXaIc0sVzk7bKWacaWFLrta2U/lZCFw3ZcIlfYNTHXbVLg6Vn TNxrgC840OnabzUommbHlqz7NaiNz0Nyr4MsDKkXd4vrpkfF37YoG0l5HaeLM8An e8wM9CgLIKRrrzhe5y0gdgjrjpj76w/uGHoEuCWfxtfrDYXYHXtkOAnTsw2nk1VR Yuv+rpCUab7lL5qRMqgdlqLrb1UY63OncgM= -----END CERTIFICATE-----Generated at Mon Jun 16 03:31:03 2025 by rpki-client