$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa File: a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa (raw, json) Hash identifier: 9ZjKBCl8znlOWU4vdEaaBBqDhEgJlMN3y0vyS/RIKtU= Subject key identifier: B4:30:50:B1:4C:6B:F0:23:11:1E:18:16:6A:F9:2D:51:41:D5:DF:11 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC7560D6DCC3CE272BD80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 2606:3600:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c7:56:0d:6d:cc:3c:e2:72:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=346fd897-0576-4218-a948-1dd1c9b1edf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:c2:a4:a5:4c:aa:8c:9b:79:c0:32:e0:61: a7:35:ab:c7:bd:8d:1f:f7:a5:e0:4d:ba:10:02:00: 7d:53:91:29:c7:96:e2:68:8d:dc:07:01:7c:b4:a1: c1:3e:06:1d:c5:6b:33:54:e6:cf:79:16:66:dc:80: 56:db:88:68:c2:88:b8:b3:b2:b2:d7:9f:48:45:ad: 71:a2:1f:5b:29:54:e2:33:2a:ce:3f:50:0e:37:97: d2:96:04:18:c1:4b:89:04:bd:4a:26:f9:ac:39:73: 0e:33:ce:5b:96:af:02:f6:3c:98:a6:78:88:b9:a9: 72:aa:25:01:66:4a:b5:c5:26:44:6c:6f:18:1b:47: 5d:eb:28:82:8d:c0:e2:9a:cf:4a:34:8f:9a:44:01: 38:fb:9b:91:df:17:77:07:7a:51:b4:29:e7:2f:37: cf:22:97:ef:9b:7c:f4:b0:04:98:6c:97:e9:1f:85: 99:73:76:5a:4a:8f:08:63:8e:03:cd:92:24:6a:78: fa:30:f1:cb:ee:a1:6b:05:dd:75:4c:d0:f5:2e:b7: ab:97:e7:43:0d:3a:4f:71:68:8f:e0:30:7d:d5:f2: 91:77:ee:82:2f:24:d0:b7:d9:a5:d4:29:f2:4d:57: 3a:b6:2f:ed:9e:42:ca:0e:92:36:f9:44:27:4b:64: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:30:50:B1:4C:6B:F0:23:11:1E:18:16:6A:F9:2D:51:41:D5:DF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ba:34:48:9a:73:0e:48:1a:c4:a6:09:0f:09:17:50:9d:83: e2:92:fb:a4:fc:c9:51:b4:cb:e7:bd:c7:d0:cf:db:5d:82:b9: 51:74:2f:68:91:a9:55:2e:b9:28:48:72:2b:c8:aa:0f:4b:ca: df:38:83:d2:35:d5:44:ca:03:b2:cd:d0:99:d1:c4:75:da:a3: 34:8d:7a:b2:4c:9d:78:01:d1:35:21:87:83:58:ec:0d:f5:03: d1:9b:e4:1a:18:4b:b2:d0:7e:30:84:b4:c2:65:c7:3f:93:d0: 31:fb:cf:52:db:b5:8d:6e:15:ac:2b:4e:a4:96:7b:ff:bd:af: 80:26:68:35:da:2a:e6:6b:e7:cc:20:18:7d:ea:18:be:fc:9b: b3:cc:eb:d8:a0:29:f0:81:55:96:d8:15:f4:14:26:d2:a8:c8: d8:ae:7a:cf:b0:bb:64:2c:e1:d5:9b:cf:21:ba:4d:14:75:db: 09:52:7c:c4:43:2b:e8:e7:d4:6e:1c:c1:09:bc:dc:a3:1f:13: 78:5a:64:3c:ff:30:6a:73:e1:1f:d6:02:37:99:fc:c5:81:1d: fe:cb:43:f3:7d:09:a7:6a:30:bd:35:8f:46:d3:00:48:b8:5e: de:94:32:0a:48:67:eb:e4:1f:b5:c5:e7:39:36:62:ae:46:5d: b4:83:56:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErey8dWDW3MPOJyvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MzQ2ZmQ4OTctMDU3Ni00MjE4LWE5NDgtMWRkMWM5YjFlZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW3CpKVMqoybecAy4GGnNavHvY0f96XgTboQ AgB9U5Epx5biaI3cBwF8tKHBPgYdxWszVObPeRZm3IBW24howoi4s7Ky159IRa1x oh9bKVTiMyrOP1AON5fSlgQYwUuJBL1KJvmsOXMOM85blq8C9jyYpniIualyqiUB Zkq1xSZEbG8YG0dd6yiCjcDims9KNI+aRAE4+5uR3xd3B3pRtCnnLzfPIpfvm3z0 sASYbJfpH4WZc3ZaSo8IY44DzZIkanj6MPHL7qFrBd11TND1Lrerl+dDDTpPcWiP 4DB91fKRd+6CLyTQt9ml1CnyTVc6ti/tnkLKDpI2+UQnS2T+QwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLQwULFMa/AjER4YFmr5LVFB1d8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTFlY2FlYmEtOTU4MC0z ZGNjLTllMmQtMWIzZjkzZjk1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAabo0SJpzDkgaxKYJDwkXUJ2D4pL7pPzJUbTL573H0M/bXYK5UXQv aJGpVS65KEhyK8iqD0vK3ziD0jXVRMoDss3QmdHEddqjNI16skydeAHRNSGHg1js DfUD0ZvkGhhLstB+MIS0wmXHP5PQMfvPUtu1jW4VrCtOpJZ7/72vgCZoNdoq5mvn zCAYfeoYvvybs8zr2KAp8IFVltgV9BQm0qjI2K56z7C7ZCzh1ZvPIbpNFHXbCVJ8 xEMr6OfUbhzBCbzcox8TeFpkPP8wanPhH9YCN5n8xYEd/stD830Jp2owvTWPRtMA SLhe3pQyCkhn6+QftcXnOTZirkZdtINW4A== -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:50 2025 by rpki-client