$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json) Hash identifier: sjvZIjD1KtXja3kOT9WGLaI8sqw3cDdQYsnkJ0jH/Ho= Subject key identifier: 4A:75:FB:61:3C:1A:51:0E:83:3B:C3:E1:F2:C6:79:69:A8:3C:25:7A Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584B110C022B09CAFF9BB4891280 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:02:2b:09:ca:ff:9b:b4:89:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=2121d243-57f5-4756-bf44-7ef0a5ebf925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:37:c6:a3:96:23:07:87:1b:63:01:65:62: 98:16:bb:7a:81:5a:e0:75:d9:8c:6c:9a:7f:b7:6d: 37:b9:2e:ee:10:4b:33:f3:cb:8c:d2:79:9b:8f:b5: 89:6d:e2:31:41:73:73:5c:9d:58:2d:3e:41:03:63: 77:18:b5:fb:a0:13:64:1e:83:f2:7d:da:08:57:8a: 81:2d:55:95:fc:91:80:b4:f9:a6:96:14:f0:3c:e4: cc:f5:72:d2:83:6c:15:de:27:99:20:c3:39:26:57: ee:c5:62:d4:85:f7:1c:79:cb:f1:45:f5:50:c9:03: 4a:fd:e8:22:56:d5:cc:e8:72:10:91:a6:07:43:41: dd:a3:75:ef:1d:b6:40:87:4d:ac:eb:18:5c:39:3d: e6:16:84:2b:11:2f:38:72:ce:97:23:b4:96:fe:f1: c0:52:a7:d1:03:ad:22:ec:14:1e:da:ff:9e:0a:7f: dc:20:e4:92:a0:9a:47:4c:b9:da:90:e5:d4:21:62: fd:8f:b6:42:1e:f9:76:e4:fe:91:df:2d:01:2b:64: ef:a0:b2:b4:2c:43:af:b0:ff:21:89:50:3c:39:3e: 86:1c:ad:64:2a:fb:f2:54:07:cc:4d:6e:49:fa:a5: 14:18:e3:6a:7b:38:79:94:f2:81:20:de:14:1a:72: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:FB:61:3C:1A:51:0E:83:3B:C3:E1:F2:C6:79:69:A8:3C:25:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:32:6b:59:07:de:e1:32:7d:67:42:6b:bb:67:54:d0:fe:2a: dd:aa:23:cb:25:ec:7f:a3:ac:33:b3:1a:51:32:14:1e:06:a9: 97:16:44:26:a7:a1:c5:cb:61:7f:c4:f0:42:59:c7:dc:7a:04: fe:ee:a6:2b:52:82:02:8b:0b:8d:36:8a:db:05:f0:58:01:a2: f9:d2:ac:75:df:4c:50:df:29:01:de:6a:87:03:fc:fa:95:49: dc:44:c2:49:40:26:62:e0:60:3d:54:1a:fd:c7:4d:58:0a:4c: 10:c5:db:70:63:9f:4c:1c:0f:b4:96:95:2d:7b:93:b5:39:54: 2a:35:bd:99:eb:8c:de:20:af:4e:a7:bd:1c:d1:12:69:c0:03: 54:43:2f:bf:4d:0e:fa:ee:60:df:57:ef:9a:8a:80:6d:75:d2: d4:be:f8:f7:72:88:ad:c7:75:87:d2:bb:c0:48:85:ce:5e:98: e8:ad:02:92:ee:dc:12:d1:5b:8f:1b:9b:f2:96:2a:ad:23:1b: 4f:69:bb:eb:1b:d2:0d:ae:83:fb:c3:03:da:b4:79:59:fa:ea: ac:51:d9:52:74:a7:82:f2:03:e2:62:ab:a9:c0:b1:13:af:41: f9:ab:75:30:c6:db:65:be:d1:c4:7c:37:24:bb:59:46:9e:3b: 7d:34:9a:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDAIrCcr/m7SJEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjEyMWQyNDMtNTdmNS00NzU2LWJmNDQtN2VmMGE1ZWJmOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDg3xqOWIweHG2MBZWKYFrt6gVrgddmMbJp/ t203uS7uEEsz88uM0nmbj7WJbeIxQXNzXJ1YLT5BA2N3GLX7oBNkHoPyfdoIV4qB LVWV/JGAtPmmlhTwPOTM9XLSg2wV3ieZIMM5JlfuxWLUhfccecvxRfVQyQNK/egi VtXM6HIQkaYHQ0Hdo3XvHbZAh02s6xhcOT3mFoQrES84cs6XI7SW/vHAUqfRA60i 7BQe2v+eCn/cIOSSoJpHTLnakOXUIWL9j7ZCHvl25P6R3y0BK2TvoLK0LEOvsP8h iVA8OT6GHK1kKvvyVAfMTW5J+qUUGONqezh5lPKBIN4UGnIu1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEp1+2E8GlEOgzvD4fLGeWmoPCV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjUzOTA1YzctNTA0MC0z ZTk2LThhZmItZDFmZDI0ZDI3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4ya1kH3uEyfWdCa7tnVND+Kt2qI8sl7H+jrDOzGlEyFB4GqZcW RCanocXLYX/E8EJZx9x6BP7upitSggKLC402itsF8FgBovnSrHXfTFDfKQHeaocD /PqVSdxEwklAJmLgYD1UGv3HTVgKTBDF23Bjn0wcD7SWlS17k7U5VCo1vZnrjN4g r06nvRzREmnAA1RDL79NDvruYN9X75qKgG110tS++PdyiK3HdYfSu8BIhc5emOit ApLu3BLRW48bm/KWKq0jG09pu+sb0g2ug/vDA9q0eVn66qxR2VJ0p4LyA+Jiq6nA sROvQfmrdTDG22W+0cR8NyS7WUaeO300mis= -----END CERTIFICATE-----Generated at Wed Sep 17 03:47:53 2025 by rpki-client