$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa File: 03fb9436-1079-3479-8e93-1626e18c2a80.roa (raw, json) Hash identifier: VRckf5Bi05VJz7MT/poxOC5d9cLr3zmVgNVEPfAG/cc= Subject key identifier: 04:6B:6D:28:2D:C7:43:24:B1:DE:E4:7C:98:14:CC:B9:EC:AF:C5:72 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584B110BFE0AFF4357C48D360EE0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2620:116:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fe:0a:ff:43:57:c4:8d:36:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=43b48ade-5c67-4632-9904-815e50265cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:85:4f:22:f7:b9:36:75:56:4a:c0:2d:c1: 6c:2f:36:4c:0b:d3:03:9d:0d:cd:8a:38:93:66:63: 2b:18:b0:2e:8d:05:9f:f5:85:3b:cd:6c:ba:c7:2b: 0d:e9:0c:52:cf:d4:0b:85:3b:37:14:fe:d4:6e:a8: f4:75:3e:24:87:0a:11:6d:28:1b:a9:1d:2e:8e:12: 31:5e:d1:a1:1c:0a:44:da:84:f0:bc:f5:25:1d:18: 27:11:0d:f6:48:2b:ec:95:29:1e:f2:3a:23:62:6f: 40:0d:02:f4:42:8a:aa:36:d0:e5:37:5b:5c:8e:d5: 0f:87:bf:66:17:c3:ab:02:32:8b:c5:24:6a:56:26: 3d:0d:c6:e7:54:e8:7f:1d:01:3f:d6:79:04:d1:6e: ec:4f:ee:91:c3:96:f4:04:d3:3f:9b:03:a1:87:f8: a0:e6:f4:db:e3:90:d1:32:01:3e:dc:f1:86:41:a0: 6e:e3:ba:ea:0c:e3:f3:f0:64:84:c3:c1:a0:f2:ea: b3:9a:cd:a7:cd:43:36:44:57:bb:9f:25:b5:8c:40: 2a:57:e8:af:82:b4:02:36:c9:27:0d:ac:9d:42:51: 4f:69:ac:21:4d:15:68:32:10:bf:b4:3e:f7:3e:61: 86:18:01:21:ab:1c:df:c7:ed:87:ca:9b:d5:b3:f2: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:6D:28:2D:C7:43:24:B1:DE:E4:7C:98:14:CC:B9:EC:AF:C5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b8:f0:97:2e:7f:c1:99:cc:96:13:a1:7a:84:0b:aa:8e:81: 73:4b:46:05:c6:54:02:d6:2c:de:9f:10:d7:f0:8f:9c:11:21: dc:75:6c:08:e3:3d:4e:41:81:f5:08:4f:ab:64:ce:8f:a4:37: 15:ea:7a:3c:9c:23:71:af:a6:aa:72:e0:40:a0:9d:39:19:fa: bf:0c:46:99:99:59:50:23:48:8a:5d:28:14:b0:1b:a6:4f:e7: 83:e9:61:4c:ba:df:60:1e:84:cd:6e:dd:0b:ad:48:de:85:2b: 73:62:d3:3c:16:c7:1b:09:81:fa:2a:50:3a:e6:0b:e0:bf:3b: 97:17:d9:38:d6:46:54:9a:86:74:ea:0b:1d:a1:12:e3:19:54: 20:18:24:b6:45:57:75:47:77:2a:1a:7d:6e:3c:41:7b:30:f6: 17:f2:04:eb:1c:1e:4d:3d:ef:c8:8b:11:d5:51:51:99:28:15: 49:32:e5:d2:1a:72:73:9a:06:bd:55:cf:45:c0:d4:56:f4:d8: c5:62:65:c8:9a:ff:62:55:89:9d:f5:f8:99:00:63:7c:20:89: b9:1f:9a:a8:e0:96:20:d1:10:34:29:ac:e9:1d:8d:0f:2a:a4: 6c:59:0f:6f:5c:f3:81:97:a5:b8:e6:f6:63:f6:73:4b:af:02: bd:09:04:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRC/4K/0NXxI02DuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDNiNDhhZGUtNWM2Ny00NjMyLTk5MDQtODE1ZTUwMjY1Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I6FTyL3uTZ1VkrALcFsLzZMC9MDnQ3NijiT ZmMrGLAujQWf9YU7zWy6xysN6QxSz9QLhTs3FP7Ubqj0dT4khwoRbSgbqR0ujhIx XtGhHApE2oTwvPUlHRgnEQ32SCvslSke8jojYm9ADQL0QoqqNtDlN1tcjtUPh79m F8OrAjKLxSRqViY9DcbnVOh/HQE/1nkE0W7sT+6Rw5b0BNM/mwOhh/ig5vTb45DR MgE+3PGGQaBu47rqDOPz8GSEw8Gg8uqzms2nzUM2RFe7nyW1jEAqV+ivgrQCNskn DaydQlFPaawhTRVoMhC/tD73PmGGGAEhqxzfx+2HypvVs/Iq+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARrbSgtx0Mksd7kfJgUzLnsr8VyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMDNmYjk0MzYtMTA3OS0z NDc5LThlOTMtMTYyNmUxOGMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJm48Jcuf8GZzJYToXqEC6qOgXNLRgXGVALWLN6fENfwj5wRIdx1 bAjjPU5BgfUIT6tkzo+kNxXqejycI3Gvpqpy4ECgnTkZ+r8MRpmZWVAjSIpdKBSw G6ZP54PpYUy632AehM1u3QutSN6FK3Ni0zwWxxsJgfoqUDrmC+C/O5cX2TjWRlSa hnTqCx2hEuMZVCAYJLZFV3VHdyoafW48QXsw9hfyBOscHk0978iLEdVRUZkoFUky 5dIacnOaBr1Vz0XA1Fb02MViZcia/2JViZ31+JkAY3wgibkfmqjgliDREDQprOkd jQ8qpGxZD29c84GXpbjm9mP2c0uvAr0JBEQ= -----END CERTIFICATE-----Generated at Wed Sep 17 03:39:41 2025 by rpki-client