$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa File: 75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa (raw, json) Hash identifier: GnrfQ1cUQienCEVEXCMWUMyiuBQTvaKSRcsCbspHHsg= Subject key identifier: 9C:B4:A8:18:4A:30:B9:B7:AE:0C:78:71:37:38:F2:6D:69:6C:87:60 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6ED81B5005FEFC641AE40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ed:81:b5:00:5f:ef:c6:41:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=46308452-b3cc-4679-a913-b837cb648d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:38:b1:fc:e9:e4:e3:6e:09:28:d3:47:1e: 99:01:d8:aa:34:e1:f4:49:dc:83:07:56:88:81:01: 59:07:8b:e7:32:45:0b:9b:f8:5f:d2:e5:83:58:6f: c7:70:68:02:6b:e1:ec:80:e0:25:69:1a:7a:0f:c5: 82:37:28:e4:b1:e1:17:f1:2a:d8:c6:b8:43:c7:07: c6:95:11:55:35:24:73:80:11:d9:7e:2f:6d:64:7b: ee:54:6a:c6:b3:4b:1d:c3:a2:1d:24:81:ef:87:9a: dc:f8:87:6f:93:57:cb:68:b6:b4:32:42:cb:98:1d: 0a:af:5d:8a:d2:49:d3:f4:68:90:27:c0:d8:0d:43: a2:8c:0d:c3:c0:cc:70:71:55:19:72:af:5b:e8:db: 1e:b2:a6:39:c8:89:80:e2:fb:2d:73:71:3c:37:b5: e6:af:60:39:82:33:33:21:d7:14:18:74:92:c2:a0: 52:6a:d7:a7:ee:d5:87:72:67:3e:95:e7:88:62:4e: d1:1c:95:f8:3b:ad:b6:88:17:0a:f5:d4:ba:39:88: d7:9d:bf:db:cf:a3:90:65:d9:7e:86:ce:e1:08:72: dd:d0:cc:00:03:00:19:08:4c:61:18:5b:79:ea:5d: b4:75:5f:eb:60:ca:84:80:5a:ac:15:3b:47:12:23: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:A8:18:4A:30:B9:B7:AE:0C:78:71:37:38:F2:6D:69:6C:87:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:53:73:1f:44:47:be:27:3b:74:e4:a1:9a:81:79:19:4d:a2: 23:af:8a:80:ca:be:19:20:96:78:f5:e9:ac:7b:65:8e:15:c8: cb:2c:6d:6e:79:64:9e:a0:12:5c:a6:a1:ba:41:bc:57:a8:f2: aa:0e:aa:b0:25:9a:39:8b:dd:e8:2d:55:1d:4d:1d:6b:5d:16: 93:eb:7a:70:af:8a:e0:a0:40:be:ac:13:61:06:90:e5:ad:9b: a1:46:20:ce:59:a3:9f:12:67:10:da:af:23:5b:7e:2c:7f:27: 51:24:83:dc:53:4c:a0:95:10:ab:dc:2d:67:c1:cd:e8:21:af: 82:0e:40:b9:5d:83:45:de:d2:6e:c6:7d:62:8b:1e:ea:aa:84: d7:33:49:d7:5a:21:9d:52:90:d5:54:b3:31:f2:d3:00:00:ab: cc:4f:4f:a8:bb:08:b8:cc:86:87:82:89:e3:b6:a6:07:9a:11: 02:0b:05:05:52:70:01:23:70:3a:f4:86:28:7c:4a:46:5c:07: 66:5e:65:28:2a:c8:aa:46:40:0f:39:f9:03:fd:ce:fd:78:82: 22:03:7f:ea:8d:99:b1:e8:15:9c:ba:2f:c7:70:55:20:3b:4c: ce:16:5e:c3:27:e8:44:a6:15:d8:89:7c:87:ba:8c:df:07:0e: 4c:4d:fb:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1u2BtQBf78ZBrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NDYzMDg0NTItYjNjYy00Njc5LWE5MTMtYjgzN2NiNjQ4ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic84sfzp5ONuCSjTRx6ZAdiqNOH0SdyDB1aI gQFZB4vnMkULm/hf0uWDWG/HcGgCa+HsgOAlaRp6D8WCNyjkseEX8SrYxrhDxwfG lRFVNSRzgBHZfi9tZHvuVGrGs0sdw6IdJIHvh5rc+Idvk1fLaLa0MkLLmB0Kr12K 0knT9GiQJ8DYDUOijA3DwMxwcVUZcq9b6NsesqY5yImA4vstc3E8N7Xmr2A5gjMz IdcUGHSSwqBSaten7tWHcmc+leeIYk7RHJX4O622iBcK9dS6OYjXnb/bz6OQZdl+ hs7hCHLd0MwAAwAZCExhGFt56l20dV/rYMqEgFqsFTtHEiNZ/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJy0qBhKMLm3rgx4cTc48m1pbIdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzVmZTRmOGItYzRiYS0z NDAxLWEyNTYtY2FiNGU1M2VlNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9Tcx9ER74nO3TkoZqBeRlNoiOvioDKvhkglnj16ax7ZY4VyMss bW55ZJ6gElymobpBvFeo8qoOqrAlmjmL3egtVR1NHWtdFpPrenCviuCgQL6sE2EG kOWtm6FGIM5Zo58SZxDaryNbfix/J1Ekg9xTTKCVEKvcLWfBzeghr4IOQLldg0Xe 0m7GfWKLHuqqhNczSddaIZ1SkNVUszHy0wAAq8xPT6i7CLjMhoeCieO2pgeaEQIL BQVScAEjcDr0hih8SkZcB2ZeZSgqyKpGQA85+QP9zv14giIDf+qNmbHoFZy6L8dw VSA7TM4WXsMn6ESmFdiJfIe6jN8HDkxN+3M= -----END CERTIFICATE-----Generated at Sat May 10 01:33:45 2025 by rpki-client