$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa File: 18a7b006-bca2-30b0-b588-6f3437d24a3c.roa (raw, json) Hash identifier: 2KQAHGZOURNCwwGY2xDF5RI+LL1sJfep1CQ9dzgwlEo= Subject key identifier: EE:7B:71:78:8A:3E:E1:1E:94:C7:3A:8B:7F:C1:36:91:30:AB:67:52 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC704B1BD05AC80DC5DE0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 2606:3600:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c7:04:b1:bd:05:ac:80:dc:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=a1243f3e-79f4-4c8a-adcc-ddda825474e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:17:6c:77:e4:09:12:36:e9:fa:da:d8:47: 4d:e9:a9:f1:92:fb:7e:db:58:bb:e0:df:f3:aa:cb: 49:92:f7:52:e5:03:92:2c:3a:9b:7b:23:53:8c:55: ed:bf:01:44:61:3d:04:65:d7:99:5d:9e:29:29:6c: 82:02:86:97:e4:ff:e0:cf:8a:59:4d:69:79:a8:88: 8e:f8:d1:09:2b:6a:d0:7c:96:ff:37:e2:a1:f1:63: b8:87:e1:20:75:96:98:95:80:b0:60:6a:0c:c2:6f: 64:66:66:a7:d8:52:e7:09:af:9c:76:4b:62:de:31: 84:80:cc:02:23:ff:eb:63:b6:75:2f:06:19:f9:e9: aa:db:c8:09:5a:0d:b6:ff:fc:16:9f:c5:44:15:3e: 2c:4a:62:43:44:ec:74:96:ed:aa:cb:5b:9c:44:24: cd:89:19:5c:33:60:97:66:7c:3a:a8:25:b4:36:1c: 1a:b5:32:fc:46:15:00:81:73:2f:fd:d0:50:03:76: 58:44:ba:f1:7a:f5:0a:2a:f0:83:9e:8c:2c:55:77: 8a:91:f3:25:2e:56:d4:34:1d:19:f6:5d:4b:8e:49: 21:2a:ac:b2:e0:bb:d0:bc:14:45:06:e0:fd:63:1a: 68:63:e7:81:84:95:6f:46:3f:4b:4e:96:ed:bb:6a: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7B:71:78:8A:3E:E1:1E:94:C7:3A:8B:7F:C1:36:91:30:AB:67:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:130::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ed:9f:f1:dc:da:28:62:07:74:38:74:61:a4:11:7f:e9:80: 66:cb:c8:3d:49:de:fc:31:cc:e0:a0:c4:f6:b1:4e:79:c0:09: e0:90:f9:64:cc:d8:8c:e4:1f:ce:76:70:00:2b:ff:e0:40:0d: 50:0a:3d:02:03:53:96:1a:76:d8:50:c2:5b:d4:26:1a:d5:13: 5d:b9:76:ba:c2:fd:a3:92:32:8c:b2:71:c9:2d:1a:dd:96:1b: 65:55:f5:37:15:92:32:97:1a:7c:59:a8:8e:3f:6f:71:72:f2: 6c:b9:02:73:d8:4f:8c:62:1c:c3:16:57:0f:91:92:7c:2f:c8: 43:d6:d1:7f:fc:0d:fc:e5:d9:5a:ac:18:66:d1:89:c0:f8:5a: ae:aa:a3:2d:5f:c8:b1:01:43:54:ba:3f:6b:9e:13:ba:6b:c6: f0:4a:94:41:99:ec:aa:18:06:94:eb:17:c6:c3:ca:7b:69:c5: 9f:7b:ca:52:02:c8:a5:cf:93:37:0b:1f:c3:5d:5c:69:1d:98: 47:30:ec:94:f7:c3:e2:f5:df:87:10:c7:15:6b:e9:a4:d6:d3: e8:97:12:33:a9:fc:3b:80:89:60:01:06:cc:e8:a8:7b:c5:7c: 10:a9:6e:52:12:91:3e:82:cb:92:83:42:ec:f3:4f:ec:7f:6e: 5a:d1:be:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey8cEsb0FrIDcXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YTEyNDNmM2UtNzlmNC00YzhhLWFkY2MtZGRkYTgyNTQ3NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08IXbHfkCRI26fra2EdN6anxkvt+21i74N/z qstJkvdS5QOSLDqbeyNTjFXtvwFEYT0EZdeZXZ4pKWyCAoaX5P/gz4pZTWl5qIiO +NEJK2rQfJb/N+Kh8WO4h+EgdZaYlYCwYGoMwm9kZman2FLnCa+cdkti3jGEgMwC I//rY7Z1LwYZ+emq28gJWg22//wWn8VEFT4sSmJDROx0lu2qy1ucRCTNiRlcM2CX Znw6qCW0NhwatTL8RhUAgXMv/dBQA3ZYRLrxevUKKvCDnowsVXeKkfMlLlbUNB0Z 9l1LjkkhKqyy4LvQvBRFBuD9YxpoY+eBhJVvRj9LTpbtu2pbmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO57cXiKPuEelMc6i3/BNpEwq2dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMThhN2IwMDYtYmNhMi0z MGIwLWI1ODgtNmYzNDM3ZDI0YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3tn/Hc2ihiB3Q4dGGkEX/pgGbLyD1J3vwxzOCgxPaxTnnACeCQ +WTM2IzkH852cAAr/+BADVAKPQIDU5YadthQwlvUJhrVE125drrC/aOSMoyycckt Gt2WG2VV9TcVkjKXGnxZqI4/b3Fy8my5AnPYT4xiHMMWVw+RknwvyEPW0X/8Dfzl 2VqsGGbRicD4Wq6qoy1fyLEBQ1S6P2ueE7prxvBKlEGZ7KoYBpTrF8bDyntpxZ97 ylICyKXPkzcLH8NdXGkdmEcw7JT3w+L134cQxxVr6aTW0+iXEjOp/DuAiWABBszo qHvFfBCpblISkT6Cy5KDQuzzT+x/blrRvjA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:23 2025 by rpki-client