$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa File: 75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa (raw, json) Hash identifier: 0C7EwGpHPVdVzKKfG+Pek0RH05jC6RFUzcNFf/Zp+zM= Subject key identifier: 1A:AA:02:CC:45:9D:2A:DD:CA:93:21:81:B1:7C:5A:08:1C:63:60:12 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000F07E628A3941F44580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 2606:3600:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:f0:7e:62:8a:39:41:f4:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=73344a17-3a89-4a7e-82c7-797ec36e6463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:62:95:8c:1d:b1:c7:9c:cc:77:4b:58:e9: 43:ea:33:bf:51:9d:7f:0b:e2:09:16:f3:35:cb:35: 65:0a:55:2b:75:83:1f:ce:c2:ec:e5:99:6e:ee:45: d2:e5:dd:f0:ae:b5:4f:bd:1e:30:0b:ee:e0:e0:b7: ea:dc:9b:81:fd:56:57:81:4d:b5:97:18:e6:7f:3e: 45:c4:e0:3e:01:59:f8:56:f6:aa:72:93:ed:8e:97: aa:67:4a:23:21:6d:58:34:df:ae:01:75:9b:6a:e5: d2:f3:f3:9b:8b:c1:02:ac:f5:89:5d:5c:97:0e:d4: 2a:f0:18:de:eb:88:16:e5:36:7a:ff:1f:6b:dd:ba: 0a:44:a8:91:71:8f:91:44:bb:fd:5d:d0:0b:05:92: 5c:0b:a0:2d:96:84:93:2e:98:03:20:7f:57:a7:01: 85:04:9c:7b:63:3f:1f:18:51:61:8c:3c:66:fe:14: e1:f5:04:56:00:42:b6:91:b6:89:9d:51:cf:dc:25: 70:c6:63:a0:f9:57:9b:dc:6f:e3:65:2c:05:da:b1: 59:58:31:f0:78:f3:81:28:16:5b:aa:c4:ec:dc:51: 69:54:07:ec:1a:d1:f3:6e:ff:f3:70:ef:b9:43:23: 0c:ab:51:65:3e:e3:26:1e:7a:88:df:78:96:93:c8: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:02:CC:45:9D:2A:DD:CA:93:21:81:B1:7C:5A:08:1C:63:60:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:6a:a6:fc:0f:c8:1a:18:8a:cd:bd:a5:b2:b7:ab:e3:00: e6:90:80:83:42:c8:9e:b1:90:f9:fa:95:1f:e5:83:67:8c:41: 4d:23:1c:17:0d:6f:34:8b:3c:c0:53:08:99:cb:4b:ca:25:90: e9:19:70:97:2c:0b:18:bd:23:bb:42:dd:66:71:cc:16:ff:bd: c6:22:cf:2c:11:91:d1:04:cb:15:a1:08:28:18:a9:32:e5:7d: d1:21:6d:b5:62:53:b0:0a:e4:74:9a:b1:c3:b8:0a:ff:e0:f0: 7f:48:46:28:2e:79:f4:eb:ba:5a:7a:10:4c:2a:ca:b8:cf:4e: ed:28:5c:12:f4:9d:50:9d:03:77:48:bd:9c:21:cc:dd:e2:10: 93:7b:fe:e5:3c:1b:72:74:ba:0a:36:3e:1f:c3:34:a1:f7:ad: 90:e4:58:c6:17:1d:2e:ed:b8:70:ea:85:29:f6:19:22:ac:ec: 26:e7:1e:4a:2a:dd:95:c7:d0:58:12:68:23:cf:c9:cf:b6:1c: dc:c7:99:7c:03:78:9f:43:a4:98:64:50:2c:c8:8a:80:b0:98: d7:59:82:21:2e:08:a4:37:66:ca:dc:5b:18:81:c1:47:e2:7b: 3c:6d:2e:a6:e6:e5:79:15:02:44:f1:d6:b6:76:f2:ba:5b:23: 69:87:ec:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+EADwfmKKOUH0RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzMzNDRhMTctM2E4OS00YTdlLTgyYzctNzk3ZWMzNmU2NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ZilYwdsceczHdLWOlD6jO/UZ1/C+IJFvM1 yzVlClUrdYMfzsLs5Zlu7kXS5d3wrrVPvR4wC+7g4Lfq3JuB/VZXgU21lxjmfz5F xOA+AVn4VvaqcpPtjpeqZ0ojIW1YNN+uAXWbauXS8/Obi8ECrPWJXVyXDtQq8Bje 64gW5TZ6/x9r3boKRKiRcY+RRLv9XdALBZJcC6AtloSTLpgDIH9XpwGFBJx7Yz8f GFFhjDxm/hTh9QRWAEK2kbaJnVHP3CVwxmOg+Veb3G/jZSwF2rFZWDHwePOBKBZb qsTs3FFpVAfsGtHzbv/zcO+5QyMMq1FlPuMmHnqI33iWk8ggSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqqAsxFnSrdypMhgbF8WggcY2ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzVmZTRmOGItYzRiYS0z NDAxLWEyNTYtY2FiNGU1M2VlNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSVaqb8D8gaGIrNvaWyt6vjAOaQgINCyJ6xkPn6lR/lg2eMQU0j HBcNbzSLPMBTCJnLS8olkOkZcJcsCxi9I7tC3WZxzBb/vcYizywRkdEEyxWhCCgY qTLlfdEhbbViU7AK5HSascO4Cv/g8H9IRiguefTrulp6EEwqyrjPTu0oXBL0nVCd A3dIvZwhzN3iEJN7/uU8G3J0ugo2Ph/DNKH3rZDkWMYXHS7tuHDqhSn2GSKs7Cbn Hkoq3ZXH0FgSaCPPyc+2HNzHmXwDeJ9DpJhkUCzIioCwmNdZgiEuCKQ3ZsrcWxiB wUfiezxtLqbm5XkVAkTx1rZ28rpbI2mH7OA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:54:21 2025 by rpki-client