$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa File: 93146727-9cad-3961-ae07-df0111f1b59e.roa (raw, json) Hash identifier: 3imYF1VzsaGd8N+BBUhwy3JgVp9zISGLHCx9ADoGS5s= Subject key identifier: 60:59:39:D0:81:C1:F5:C8:14:62:0E:A2:F2:9D:4A:5E:6B:00:48:95 Certificate issuer: /CN=951e7581-98f6-4e09-8091-345244dd8d9d Certificate serial: 010D0C9F4328584A66C071F64D14F80D16F6BB80 Authority key identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 101 IP address blocks: 2001:1860::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:71:f6:4d:14:f8:0d:16:f6:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951e7581-98f6-4e09-8091-345244dd8d9d Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=54e37606-bd9c-4281-8ca6-7b17c7ef4b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:e2:f9:84:fa:c9:cf:04:f6:12:b8:ee:49: a6:49:7e:42:bf:6d:24:bb:76:c1:2f:1c:3f:c3:61: 16:ed:97:8f:1c:e5:8a:06:80:8e:b5:94:9f:4f:5a: 80:5c:fc:58:54:8d:3a:64:1b:30:f3:36:ed:7f:20: 52:52:23:2f:1d:0e:25:2e:81:e4:5a:3e:94:4c:92: 63:c7:1b:ad:35:62:f5:ef:52:a8:cc:77:60:3c:9b: ef:20:49:2f:2f:9d:01:90:56:d0:cc:63:11:f2:4a: 12:be:61:69:64:89:6b:1c:3f:5b:9d:86:8a:28:89: 2a:28:0b:fe:e9:de:7e:bd:50:7d:4a:21:a5:53:92: 16:b4:6a:6e:41:3b:1d:63:18:cf:1c:74:f0:5a:59: 90:e4:29:c3:fc:2b:93:17:a2:36:15:10:54:10:8d: a6:34:ef:a1:af:90:ad:b0:66:b7:82:3a:db:0b:0b: 9d:29:ce:da:23:2a:a6:11:8e:4a:70:8c:26:61:d4: c4:86:49:4a:dc:9f:44:0d:46:c6:ea:6c:da:36:f7: e2:dd:67:e3:12:48:29:de:27:69:a7:3f:fb:22:7b: 3e:92:2b:7d:b4:d8:8d:dc:26:ba:b6:b7:52:0a:f8: 2b:0a:ac:93:46:2e:b3:74:ac:e2:49:1a:a5:89:ec: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:59:39:D0:81:C1:F5:C8:14:62:0E:A2:F2:9D:4A:5E:6B:00:48:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl X509v3 Authority Key Identifier: keyid:9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer sbgp-ipAddrBlock: critical IPv6: 2001:1860::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b2:aa:c8:d8:0d:5b:6a:cc:09:b3:d8:62:eb:36:45:e1:71: c9:73:cd:73:90:fb:1e:04:f1:9e:74:e1:7c:1c:c8:1c:97:a5: 41:a6:9f:3d:3a:6a:16:f8:b2:4e:09:d2:3a:0c:97:d1:e5:af: 84:88:38:5a:d0:da:76:5b:21:95:2f:bd:54:9a:f0:c0:d4:97: 9a:3a:91:02:3f:a2:d6:2f:6f:2a:19:3b:fa:49:e7:42:84:f1: 06:27:fe:d2:7e:de:b6:19:08:99:de:d7:c3:4a:0e:0a:11:26: 76:3e:86:5c:ca:79:ba:b2:2e:bb:83:cc:33:17:ad:17:21:ef: 98:8a:87:35:95:97:e8:06:88:b7:03:ec:2b:b9:9f:0d:97:ed: 17:8a:e6:ec:00:fd:07:dd:ea:be:19:01:04:9f:06:18:46:61: 89:e9:ac:c5:75:08:d3:fb:e0:5c:c9:a7:27:a3:f5:eb:ec:07: a5:7f:d6:38:84:87:7a:e1:c4:25:25:3e:2e:68:f6:37:10:91: b2:ff:7e:5d:fb:ca:b3:a6:91:3c:8c:43:0d:b8:10:e6:e2:9a: 2a:4c:5c:4d:90:92:ff:d8:69:b5:01:3c:0a:bd:5c:c4:80:05: 1d:93:a6:22:23:0a:9b:30:c8:6f:4d:9d:40:d8:88:8f:26:d9: 94:79:03:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwHH2TRT4DRb2u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUxZTc1ODEtOThmNi00ZTA5LTgwOTEtMzQ1MjQ0ZGQ4 ZDlkMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NTRlMzc2MDYtYmQ5Yy00MjgxLThjYTYtN2IxN2M3ZWY0YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13ni+YT6yc8E9hK47kmmSX5Cv20ku3bBLxw/ w2EW7ZePHOWKBoCOtZSfT1qAXPxYVI06ZBsw8zbtfyBSUiMvHQ4lLoHkWj6UTJJj xxutNWL171KozHdgPJvvIEkvL50BkFbQzGMR8koSvmFpZIlrHD9bnYaKKIkqKAv+ 6d5+vVB9SiGlU5IWtGpuQTsdYxjPHHTwWlmQ5CnD/CuTF6I2FRBUEI2mNO+hr5Ct sGa3gjrbCwudKc7aIyqmEY5KcIwmYdTEhklK3J9EDUbG6mzaNvfi3WfjEkgp3idp pz/7Ins+kit9tNiN3Ca6trdSCvgrCqyTRi6zdKziSRqlieyIewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGBZOdCBwfXIFGIOovKdSl5rAEiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NTFl NzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRkZDhkOWQvOTMxNDY3MjctOWNhZC0z OTYxLWFlMDctZGYwMTExZjFiNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTUxZTc1ODEtOThmNi00ZTA5LTgw OTEtMzQ1MjQ0ZGQ4ZDlkLzk1MWU3NTgxLTk4ZjYtNGUwOS04MDkxLTM0NTI0NGRk OGQ5ZC5jcmwwHwYDVR0jBBgwFoAUmlRvAcAV86EwIWSQNYZ5Q+0HEXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUy NDRkZDhkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPsqrI2A1baswJs9hi6zZF4XHJc81zkPseBPGedOF8HMgcl6VBpp89 OmoW+LJOCdI6DJfR5a+EiDha0Np2WyGVL71UmvDA1JeaOpECP6LWL28qGTv6SedC hPEGJ/7Sft62GQiZ3tfDSg4KESZ2PoZcynm6si67g8wzF60XIe+Yioc1lZfoBoi3 A+wruZ8Nl+0XiubsAP0H3eq+GQEEnwYYRmGJ6azFdQjT++Bcyacno/Xr7Aelf9Y4 hId64cQlJT4uaPY3EJGy/35d+8qzppE8jEMNuBDm4poqTFxNkJL/2Gm1ATwKvVzE gAUdk6YiIwqbMMhvTZ1A2IiPJtmUeQMv -----END CERTIFICATE-----Generated at Wed Jul 9 17:54:43 2025 by rpki-client