$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa File: d1e1809b-32ce-3131-90d0-28c02d9448ea.roa (raw, json) Hash identifier: 0FlhRty9qKRA5leiLrJp/DSKCQtqy8Ug38sQAhhTCsE= Subject key identifier: 8C:C7:23:C1:F3:16:1F:4E:69:36:9A:4E:41:6C:3E:CD:80:99:B8:18 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1001520E7A0F8970168C40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 2606:3600:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:01:52:0e:7a:0f:89:70:16:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=62556334-935d-4ed1-a98d-b482f84c3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:a2:b3:af:10:67:85:3b:9f:39:28:ab:6b: 87:51:8e:b8:b3:74:ca:41:d4:80:98:44:a3:23:40: d3:5d:0f:c0:9a:c3:8a:2a:8e:01:13:88:38:e1:56: 8e:27:ce:8b:12:17:86:c7:41:11:99:e3:96:02:c8: a3:1b:68:0e:3e:18:2c:79:41:a1:0b:0f:54:14:8d: 9d:1e:b6:23:35:45:15:bc:c7:d1:8a:4b:cd:85:00: b1:cd:2d:19:08:6a:d7:ba:56:d2:11:be:93:49:1e: 3c:01:f1:72:f3:63:2f:92:d2:27:1b:10:23:e6:69: 8a:f4:00:43:28:f5:89:d6:f5:d4:80:17:2f:8a:27: 99:d7:a8:fc:bc:88:40:a1:b6:80:2b:7a:ea:7e:3d: f2:c7:0e:1b:0a:1c:fc:df:35:40:52:bb:7f:87:86: e2:e8:e1:05:2e:60:45:a5:95:10:dd:c7:1c:0d:aa: 08:28:9e:d0:df:0a:09:46:3a:d0:93:15:42:47:66: e5:36:68:e3:e7:dd:17:f8:42:7d:f9:79:c4:b4:46: 58:ef:57:25:2e:c7:0f:f7:be:23:f7:5c:6e:40:ee: 72:40:d3:55:db:c9:d5:c9:1d:35:c6:68:7d:cf:e5: 60:96:69:24:33:58:c5:5b:29:36:9d:5d:d3:11:d3: 2b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:23:C1:F3:16:1F:4E:69:36:9A:4E:41:6C:3E:CD:80:99:B8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:57:a2:96:e2:f8:d3:32:52:53:8a:90:7a:2f:3b:41:5d:51: 52:8d:24:47:ff:f4:a3:a0:42:20:ed:f5:c8:f9:a8:e4:a6:ec: 4a:0a:02:db:b8:80:96:f6:d0:af:5d:5a:82:a9:10:b4:cf:6e: 92:0f:e4:48:58:a9:6c:16:02:76:fe:de:6d:a7:0e:60:33:5a: 67:87:72:9d:60:9a:ed:00:7f:09:01:bd:7f:f4:9c:93:4e:de: ac:3f:75:30:e6:1f:d5:25:10:9a:cd:4f:90:5f:70:20:85:67: 8c:c7:01:bb:b4:7b:14:1e:cb:ce:1e:47:42:9d:c6:d1:6f:a8: 12:fc:0c:56:60:fb:8e:5e:12:53:08:4e:39:9b:65:6e:55:3a: ea:dc:de:9c:56:ee:7a:80:4d:9b:ee:0b:8f:19:ca:84:a6:69: bb:92:a6:9d:ad:49:87:01:4d:c9:5c:46:bc:4b:bb:a4:0d:b8: f4:db:90:46:5e:d5:0e:47:b2:2c:79:7d:b7:ca:21:e6:dd:51: 1a:2d:3e:68:17:5b:0d:c2:05:62:36:ee:90:b8:79:bf:ff:bd: 2a:8b:c7:ed:af:bd:40:a3:3e:42:aa:d5:6d:9d:af:28:0e:63: df:7e:f8:bc:ed:e0:1c:8c:ad:36:01:86:fc:0b:23:d3:76:86: 18:be:b8:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn+EAFSDnoPiXAWjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NjI1NTYzMzQtOTM1ZC00ZWQxLWE5OGQtYjQ4MmY4NGMzODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzSis68QZ4U7nzkoq2uHUY64s3TKQdSAmESj I0DTXQ/AmsOKKo4BE4g44VaOJ86LEheGx0ERmeOWAsijG2gOPhgseUGhCw9UFI2d HrYjNUUVvMfRikvNhQCxzS0ZCGrXulbSEb6TSR48AfFy82MvktInGxAj5mmK9ABD KPWJ1vXUgBcviieZ16j8vIhAobaAK3rqfj3yxw4bChz83zVAUrt/h4bi6OEFLmBF pZUQ3cccDaoIKJ7Q3woJRjrQkxVCR2blNmjj590X+EJ9+XnEtEZY71clLscP974j 91xuQO5yQNNV28nVyR01xmh9z+VglmkkM1jFWyk2nV3TEdMrwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIzHI8HzFh9OaTaaTkFsPs2AmbgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDFlMTgwOWItMzJjZS0z MTMxLTkwZDAtMjhjMDJkOTQ0OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2AEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR1eiluL40zJSU4qQei87QV1RUo0kR//0o6BCIO31yPmo5KbsSgoC 27iAlvbQr11agqkQtM9ukg/kSFipbBYCdv7ebacOYDNaZ4dynWCa7QB/CQG9f/Sc k07erD91MOYf1SUQms1PkF9wIIVnjMcBu7R7FB7Lzh5HQp3G0W+oEvwMVmD7jl4S UwhOOZtlblU66tzenFbueoBNm+4LjxnKhKZpu5Kmna1JhwFNyVxGvEu7pA249NuQ Rl7VDkeyLHl9t8oh5t1RGi0+aBdbDcIFYjbukLh5v/+9KovH7a+9QKM+QqrVbZ2v KA5j3374vO3gHIytNgGG/Asj03aGGL64tg== -----END CERTIFICATE-----Generated at Tue Jul 1 03:48:59 2025 by rpki-client