$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa File: 0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa (raw, json) Hash identifier: Bo9KQIG9NA94FjOISI0k4bzKJvD2OI2sbO3+dz32TlI= Subject key identifier: 15:E9:D8:8B:8E:4A:38:AF:DA:54:F8:8A:FD:33:3B:0B:AD:30:62:FB Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584A4E3D034F3A1C853EB21E8280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa Signing time: Wed 25 Jun 2025 06:16:45 +0000 ROA not before: Wed 25 Jun 2025 06:16:45 +0000 ROA not after: Tue 23 Sep 2025 06:16:45 +0000 asID: 16839 IP address blocks: 2606:3600:157::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4e:3d:03:4f:3a:1c:85:3e:b2:1e:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 25 06:16:45 2025 GMT Not After : Sep 23 06:16:45 2025 GMT Subject: CN=131d36bb-cccf-47ad-878a-f8124f6daa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:2d:ea:2c:3d:2e:65:46:34:4a:86:fa:77: 8c:fd:bb:3e:79:2e:4b:f9:fe:d2:ff:74:72:e4:bd: a2:e7:5d:a0:20:ca:8e:9b:eb:88:85:8d:8d:7f:74: 36:47:dd:b7:c9:c7:88:02:b5:f1:ff:c6:dc:1f:bc: 8f:21:d8:63:72:d1:b8:48:16:c5:07:ab:c7:91:a1: e4:6e:83:19:4e:4e:42:97:72:d2:f3:27:7f:6e:4e: 53:fe:14:06:90:9c:e0:36:87:54:76:08:5f:1e:6c: ca:00:c4:d5:6c:da:0b:a2:77:f4:6b:62:1b:3b:dd: 5a:51:c9:ee:77:b7:21:bf:40:06:e1:91:d8:2e:cb: b6:19:f2:df:24:f8:c5:80:66:0f:9d:bf:9e:60:78: 02:3d:b8:57:82:9a:17:9f:cf:5d:b5:52:74:93:25: 6a:de:bc:22:45:37:31:10:a6:fc:7e:59:e7:de:23: ac:64:2e:b8:8e:74:16:9e:7f:e3:d9:bc:8a:9f:b8: 2c:3a:81:ac:a9:d1:7a:af:d7:96:b8:9f:00:14:79: d3:21:36:f7:41:43:5d:d1:ec:31:90:62:e0:75:3e: 7a:86:92:82:ad:2f:8b:fa:da:51:3b:c3:79:c1:88: 8f:24:4e:63:f5:19:23:f3:be:f9:78:3c:14:ed:ad: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:D8:8B:8E:4A:38:AF:DA:54:F8:8A:FD:33:3B:0B:AD:30:62:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:157::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e3:55:66:83:b3:90:e5:65:a0:e4:d2:90:69:d9:5a:c5:d9: 71:06:4f:29:5d:ba:48:d8:9f:38:e1:97:d4:8b:c4:97:28:ad: bc:a8:2e:97:74:03:de:da:9e:9b:e0:37:aa:82:92:cf:e9:e3: 36:84:0a:f9:1d:e9:6f:1e:59:0e:ca:10:11:56:3b:5a:58:71: bc:4e:c8:05:f4:e0:ee:cc:a9:43:0c:29:67:be:24:ac:fb:57: 5e:d0:32:bd:0a:70:f4:ad:76:a7:dc:aa:f4:f9:f6:7b:35:22: 5a:bc:54:19:f9:7e:18:ef:f5:b1:ca:6b:a0:c5:62:1b:35:3b: c9:e3:f1:8e:25:ac:42:13:24:bb:f7:df:47:51:59:17:e8:4c: 08:7a:f7:cf:e5:28:65:9e:02:2c:8d:58:dd:db:61:d1:a5:5b: 03:05:e6:9f:f7:5a:e2:12:31:6a:ac:b1:7a:d8:88:0a:a3:18: 9c:d3:a1:1e:01:d2:8c:4f:98:b3:27:fa:6d:54:e1:9d:21:41: 6f:14:8c:5b:10:41:f1:cf:5e:eb:63:93:e2:b3:52:ad:28:a5: 72:4a:2a:7d:bb:37:c9:3d:9c:08:80:26:eb:c8:f3:e9:30:47: ec:ad:40:f0:a5:22:c0:39:65:bb:8a:1a:3e:bb:58:08:37:46: 82:f8:2f:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpOPQNPOhyFPrIegoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDYyNTA2MTY0NVoXDTI1MDkyMzA2MTY0NVowLzEtMCsGA1UEAxMk MTMxZDM2YmItY2NjZi00N2FkLTg3OGEtZjgxMjRmNmRhYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Mt6iw9LmVGNEqG+neM/bs+eS5L+f7S/3Ry 5L2i512gIMqOm+uIhY2Nf3Q2R923yceIArXx/8bcH7yPIdhjctG4SBbFB6vHkaHk boMZTk5Cl3LS8yd/bk5T/hQGkJzgNodUdghfHmzKAMTVbNoLonf0a2IbO91aUcnu d7chv0AG4ZHYLsu2GfLfJPjFgGYPnb+eYHgCPbhXgpoXn89dtVJ0kyVq3rwiRTcx EKb8flnn3iOsZC64jnQWnn/j2byKn7gsOoGsqdF6r9eWuJ8AFHnTITb3QUNd0ewx kGLgdT56hpKCrS+L+tpRO8N5wYiPJE5j9Rkj8775eDwU7a3PsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBXp2IuOSjiv2lT4iv0zOwutMGL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGZlMGEwYzYtMWI3ZC0z NWY2LWFlNDItZWFiMzUzNWUwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJPjVWaDs5DlZaDk0pBp2VrF2XEGTyldukjYnzjhl9SLxJcorbyo Lpd0A97anpvgN6qCks/p4zaECvkd6W8eWQ7KEBFWO1pYcbxOyAX04O7MqUMMKWe+ JKz7V17QMr0KcPStdqfcqvT59ns1Ilq8VBn5fhjv9bHKa6DFYhs1O8nj8Y4lrEIT JLv330dRWRfoTAh698/lKGWeAiyNWN3bYdGlWwMF5p/3WuISMWqssXrYiAqjGJzT oR4B0oxPmLMn+m1U4Z0hQW8UjFsQQfHPXutjk+KzUq0opXJKKn27N8k9nAiAJuvI 8+kwR+ytQPClIsA5ZbuKGj67WAg3RoL4L4Q= -----END CERTIFICATE-----Generated at Mon Jun 30 09:49:11 2025 by rpki-client