$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa File: ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json) Hash identifier: eEJslcZupe6hnVBPgKMjDFvpgHRDGwvkN5eHYrrvS3o= Subject key identifier: 4A:9B:B6:8B:44:6F:47:AC:45:7F:89:78:66:60:A3:2C:43:30:59:54 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584B110C029A26F05A7B09968340 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:116:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:02:9a:26:f0:5a:7b:09:96:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=7f09bbb3-8ac6-4b54-b824-0e46f14098ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:97:a9:01:98:d9:45:84:16:b1:b1:6a:e9: 4c:ea:2b:a3:61:9c:aa:7c:36:0e:98:83:67:60:08: 70:a7:37:d5:10:fd:48:84:90:3d:d4:2d:78:3b:eb: 42:86:ac:b4:05:57:f4:89:76:f1:db:22:a2:b1:1c: 53:16:19:49:66:59:1e:5f:91:3f:e0:02:b1:35:d1: a1:90:90:2a:8b:a4:6c:d8:2d:b1:15:2c:fc:82:6b: 1e:a3:a4:8b:66:0c:78:95:25:9c:5c:83:e4:ed:3e: e4:e7:1f:e4:90:4c:8e:87:cc:26:64:0a:cd:1e:e8: b2:30:c5:54:37:db:80:7d:8a:61:0d:2c:24:27:11: be:5b:7b:6f:0c:9d:6b:70:d9:92:64:47:a2:8e:59: 3f:a2:17:16:b4:0c:02:f0:c8:b6:89:83:b4:79:30: e2:8f:00:df:fe:8d:3f:9e:a7:e6:aa:cd:d5:bf:26: 62:16:12:83:cd:ed:4a:63:40:bf:ba:9d:66:48:fb: 3e:e3:b3:ca:da:ad:95:d1:af:31:ee:25:48:47:52: 49:87:6e:7d:21:84:7b:8f:08:3e:d0:1f:5d:43:74: 61:32:e6:83:7f:e8:0e:eb:4a:93:42:ca:20:fe:54: 8e:83:41:90:93:36:02:83:cd:af:0b:5c:2b:83:f1: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9B:B6:8B:44:6F:47:AC:45:7F:89:78:66:60:A3:2C:43:30:59:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6b:dd:07:c4:62:4f:47:60:26:8a:62:7b:25:4f:19:a1:84: 88:7f:bd:2a:d3:99:0d:3b:16:b4:74:d7:f9:4d:c7:82:1d:31: 5e:ed:48:82:8a:d1:9a:5b:85:16:a3:b1:f5:b8:d5:ad:d1:3e: 9c:bf:83:68:a6:6f:0c:92:3f:6f:13:0b:60:94:59:31:79:81: f2:42:6d:dd:09:fd:86:c1:a0:d3:d2:20:24:08:7f:a3:8c:ad: ed:22:ab:90:f6:da:60:ed:36:0f:4e:c8:e6:bc:72:ca:25:7e: c6:8d:83:c6:ae:05:65:c9:67:c0:4f:29:30:2b:f1:dd:31:65: a2:84:1f:3a:dc:74:c8:a6:b4:ed:b6:a1:c9:61:4f:f9:f0:c8: 12:20:82:94:08:bf:84:c0:fc:6c:25:06:f4:2d:69:ce:3a:cb: 70:20:e5:e3:55:b8:b9:17:49:5c:d8:c8:ad:e2:c0:83:b6:17: 58:4e:77:12:08:4f:32:ab:c7:e9:ad:6e:50:6e:50:c5:04:21: aa:2a:c2:11:27:c8:88:e1:b2:63:ec:68:e0:02:7e:47:3e:a3: 33:3f:0b:c8:0a:87:52:61:41:41:a0:14:75:fd:b1:9b:03:8e: 04:36:3a:70:5c:68:69:d1:6a:05:9f:5f:1a:74:35:7a:11:b1: 57:18:03:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDAKaJvBaewmWg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2YwOWJiYjMtOGFjNi00YjU0LWI4MjQtMGU0NmYxNDA5OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+2XqQGY2UWEFrGxaulM6iujYZyqfDYOmINn YAhwpzfVEP1IhJA91C14O+tChqy0BVf0iXbx2yKisRxTFhlJZlkeX5E/4AKxNdGh kJAqi6Rs2C2xFSz8gmseo6SLZgx4lSWcXIPk7T7k5x/kkEyOh8wmZArNHuiyMMVU N9uAfYphDSwkJxG+W3tvDJ1rcNmSZEeijlk/ohcWtAwC8Mi2iYO0eTDijwDf/o0/ nqfmqs3VvyZiFhKDze1KY0C/up1mSPs+47PK2q2V0a8x7iVIR1JJh259IYR7jwg+ 0B9dQ3RhMuaDf+gO60qTQsog/lSOg0GQkzYCg82vC1wrg/EPAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqbtotEb0esRX+JeGZgoyxDMFlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2U5MzM3YTQtNGUwYS0z ZjliLWE3MDMtMzIzNzhjOGIwODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhr3QfEYk9HYCaKYnslTxmhhIh/vSrTmQ07FrR01/lNx4IdMV7t SIKK0ZpbhRajsfW41a3RPpy/g2imbwySP28TC2CUWTF5gfJCbd0J/YbBoNPSICQI f6OMre0iq5D22mDtNg9OyOa8csolfsaNg8auBWXJZ8BPKTAr8d0xZaKEHzrcdMim tO22oclhT/nwyBIggpQIv4TA/GwlBvQtac46y3Ag5eNVuLkXSVzYyK3iwIO2F1hO dxIITzKrx+mtblBuUMUEIaoqwhEnyIjhsmPsaOACfkc+ozM/C8gKh1JhQUGgFHX9 sZsDjgQ2OnBcaGnRagWfXxp0NXoRsVcYAzA= -----END CERTIFICATE-----Generated at Wed Sep 17 03:39:41 2025 by rpki-client