$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa File: 9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa (raw, json) Hash identifier: tdTt5klK0KMvKaBGhSzqgTHPxOpunih90GxHvF96zdc= Subject key identifier: E0:8D:89:11:58:87:FF:5B:F0:26:06:BA:EF:39:87:A2:F5:8A:AC:E8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCD8470784380DF71FC80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 2606:3600:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cd:84:70:78:43:80:df:71:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=27a5cd76-af49-48d1-a4bd-aa3e572cb218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:df:e2:dd:46:e9:ca:66:7e:5d:1f:ce:4c: 50:d5:07:3a:4c:6f:4e:09:59:3e:9b:82:76:63:6a: 59:64:dd:42:0d:c3:e0:65:1d:db:03:ac:24:e9:04: 52:42:b5:a1:7c:31:59:fa:d7:65:e2:bf:c8:6d:81: 21:b4:41:ea:c2:08:4e:25:d6:6f:a0:44:66:5e:1d: fc:a2:e2:8f:d5:02:97:8c:85:bf:72:cc:6d:f6:f3: 59:4d:93:0b:ff:18:55:a4:45:e5:3f:8c:c7:92:2e: d7:3a:45:ec:df:d4:6a:c2:8f:5a:3c:58:84:eb:fb: c9:03:d6:d8:d8:26:ce:7b:8b:02:97:36:0b:aa:08: 82:ed:8f:9d:2c:82:b5:d2:04:ba:cf:8d:a3:1a:57: 75:d9:aa:5b:2f:e7:48:b4:dd:02:30:62:ca:c7:2b: c2:e0:7d:3e:9e:53:ff:d3:90:2b:74:ae:79:42:83: f9:d7:c7:fc:0b:65:f6:1b:60:4d:56:44:a7:dd:05: 0e:a6:39:4d:8b:f4:04:bb:15:31:9d:63:b6:94:3a: 65:06:99:1b:64:a7:25:7e:00:db:48:f8:b3:9d:bc: 08:33:d2:6e:39:24:62:07:6c:7a:d9:35:83:81:f6: 9e:b8:96:23:3b:39:a5:d4:0c:c4:04:45:e4:7a:03: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8D:89:11:58:87:FF:5B:F0:26:06:BA:EF:39:87:A2:F5:8A:AC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fb:ee:e5:48:fe:76:d8:90:43:ff:38:e4:bc:4c:c2:e1:3b: ee:03:da:12:a0:ac:f5:11:b1:96:c9:46:6f:87:e0:22:67:a8: 34:14:6c:f9:23:99:f8:2d:11:41:2f:b1:ce:fb:ee:9b:6d:a1: 3f:98:9d:88:9f:ae:7a:bb:5c:b0:82:42:35:7c:ca:ed:39:6b: 5d:fa:22:57:8c:b4:ad:78:fc:d9:d7:6f:49:a7:20:86:a0:2a: f9:2c:f1:79:9b:5e:66:5a:89:e4:cf:73:18:74:c0:81:13:d0: c4:e4:69:25:72:db:d5:80:27:10:3a:a1:bc:2a:c1:b0:8d:15: eb:4c:5c:eb:5f:ab:41:b5:8d:8b:c0:c3:1b:e1:ab:4d:dc:48: 6d:85:6c:46:7a:2b:ed:44:b2:68:23:9a:11:ad:8a:7a:b1:a8: 52:e2:75:b9:e8:fa:ba:d5:82:9e:f9:d0:50:80:bc:01:80:4e: 52:b2:61:da:0b:72:ab:2c:04:6e:4c:48:96:35:30:9d:9b:28: f4:b3:19:55:4e:24:97:73:1b:bc:5b:9f:a8:92:48:35:73:ec: 3c:0d:68:93:98:4a:0d:69:a5:56:e1:50:30:9c:06:9b:c4:ba: 75:f3:da:04:84:6a:87:79:8e:8c:61:19:69:c6:da:f4:3c:1a: 0e:8b:9f:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErey82EcHhDgN9x/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MjdhNWNkNzYtYWY0OS00OGQxLWE0YmQtYWEzZTU3MmNiMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGLf4t1G6cpmfl0fzkxQ1Qc6TG9OCVk+m4J2 Y2pZZN1CDcPgZR3bA6wk6QRSQrWhfDFZ+tdl4r/IbYEhtEHqwghOJdZvoERmXh38 ouKP1QKXjIW/csxt9vNZTZML/xhVpEXlP4zHki7XOkXs39Rqwo9aPFiE6/vJA9bY 2CbOe4sClzYLqgiC7Y+dLIK10gS6z42jGld12apbL+dItN0CMGLKxyvC4H0+nlP/ 05ArdK55QoP518f8C2X2G2BNVkSn3QUOpjlNi/QEuxUxnWO2lDplBpkbZKclfgDb SPiznbwIM9JuOSRiB2x62TWDgfaeuJYjOzml1AzEBEXkegNs2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOCNiRFYh/9b8CYGuu85h6L1iqzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWQwY2M2MDAtMzRkNi0z ZTNlLWIxMGItMjdkYzJiNWQwNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEPvu5Uj+dtiQQ/845LxMwuE77gPaEqCs9RGxlslGb4fgImeoNBRs +SOZ+C0RQS+xzvvum22hP5idiJ+uertcsIJCNXzK7TlrXfoiV4y0rXj82ddvSacg hqAq+SzxeZteZlqJ5M9zGHTAgRPQxORpJXLb1YAnEDqhvCrBsI0V60xc61+rQbWN i8DDG+GrTdxIbYVsRnor7USyaCOaEa2KerGoUuJ1uej6utWCnvnQUIC8AYBOUrJh 2gtyqywEbkxIljUwnZso9LMZVU4kl3MbvFufqJJINXPsPA1ok5hKDWmlVuFQMJwG m8S6dfPaBIRqh3mOjGEZacba9DwaDouf9Q== -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:31 2025 by rpki-client