$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json) Hash identifier: Nl4ch/V445Ksatm73xlKRoOjNwGYSb9MtwMKKLGMHCo= Subject key identifier: D0:76:93:1F:32:B6:0E:C0:A3:A3:ED:AB:4C:93:D1:6E:15:F2:E4:85 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584A10354E8ABAC248C8790C1A40 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 4226 IP address blocks: 2604:f586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4e:8a:ba:c2:48:c8:79:0c:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=13b70806-4ec7-46b8-960d-460fec96b580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:8d:26:69:8c:c7:77:60:29:53:08:65:72: 34:cd:75:e2:fb:9f:62:b4:49:e4:9f:a1:4b:60:b8: 94:80:3e:1c:a4:3c:bd:4c:5c:f8:2c:06:9c:4e:15: 7e:fe:84:4e:fa:7b:86:cf:67:16:61:5d:c2:c4:9f: 3a:a4:6c:af:16:b4:9a:56:61:af:5b:ff:ec:f7:83: 96:69:d2:f6:33:2c:70:2e:eb:d9:4f:04:1b:d7:c2: be:eb:98:36:fc:e4:0f:b0:94:5e:98:d3:27:b2:f0: 17:0a:59:d9:fa:59:3f:6f:fa:60:69:8f:a6:2a:c3: 6c:9f:b8:ef:d9:54:eb:c7:7d:7e:c5:c9:72:93:35: df:d1:4d:19:e3:9c:10:04:72:ba:77:c9:60:2f:fb: 26:e2:e7:74:4e:6d:00:6b:53:11:8b:c8:35:ca:cd: cb:86:02:ba:45:a9:c4:8f:84:c5:30:e8:82:2a:4b: 6d:73:37:8d:3e:7a:d5:c1:d5:14:97:b4:88:7a:57: 37:61:34:de:9f:55:8a:1e:73:1d:e4:d1:de:40:47: bf:e5:0f:88:53:d7:e2:38:7b:87:0b:e5:57:0c:37: 68:23:38:d0:7c:dc:7b:d9:51:84:5f:4a:2b:76:96: 7c:2f:7b:80:e8:99:99:2b:dd:3a:e3:8d:03:29:26: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:76:93:1F:32:B6:0E:C0:A3:A3:ED:AB:4C:93:D1:6E:15:F2:E4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f586::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b4:d8:56:aa:af:21:5d:df:d6:1e:f3:dd:d8:19:75:4a:bc: 75:d7:c7:1e:e2:16:e7:1a:50:40:9f:40:d3:74:4f:6e:62:e7: 4e:b9:4d:59:22:5e:84:49:e5:32:6f:08:c7:e4:63:d5:45:be: 5a:f3:1d:f5:0f:f1:1b:4d:0b:b6:84:c6:f5:7a:fb:7f:a7:8d: 54:b0:e7:04:f8:c8:d0:cc:c1:a4:2e:1f:45:3a:ec:b5:fc:5a: 01:12:78:67:14:c8:2f:5d:10:d6:63:dd:b8:3e:30:91:a1:ce: 96:77:e1:08:1a:e2:a8:ae:f4:73:c2:dc:04:40:7d:3c:8e:23: 98:9a:e0:48:15:06:e1:1c:4a:88:5a:a1:84:0c:13:3d:b1:99: f2:54:6b:0a:f2:12:eb:61:26:d5:45:51:a3:87:ab:65:82:c5: f0:34:a9:e2:28:f0:4e:e4:fa:24:bc:81:c2:c6:31:28:f8:5d: 4d:71:e2:cc:25:10:9a:06:3b:dd:3e:59:dd:de:f8:73:38:3e: f2:31:a1:0a:1e:e9:89:c6:8e:5d:c9:e2:39:08:9a:8e:d6:62: 1b:ac:38:06:cc:6a:7e:d0:cf:55:de:21:77:a3:5a:16:0d:c2: 7e:ee:08:a5:f9:b7:17:f9:11:90:29:ad:03:ea:09:7b:db:fa: 24:d4:32:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNU6KusJIyHkMGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MTNiNzA4MDYtNGVjNy00NmI4LTk2MGQtNDYwZmVjOTZiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvKNJmmMx3dgKVMIZXI0zXXi+59itEnkn6FL YLiUgD4cpDy9TFz4LAacThV+/oRO+nuGz2cWYV3CxJ86pGyvFrSaVmGvW//s94OW adL2MyxwLuvZTwQb18K+65g2/OQPsJRemNMnsvAXClnZ+lk/b/pgaY+mKsNsn7jv 2VTrx31+xclykzXf0U0Z45wQBHK6d8lgL/sm4ud0Tm0Aa1MRi8g1ys3LhgK6RanE j4TFMOiCKkttczeNPnrVwdUUl7SIelc3YTTen1WKHnMd5NHeQEe/5Q+IU9fiOHuH C+VXDDdoIzjQfNx72VGEX0ordpZ8L3uA6JmZK906440DKSY20QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNB2kx8ytg7Ao6Ptq0yT0W4V8uSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODkwZjljMmUtNDI0Ni0z MTJiLWE4NjktZWJiMmNmYmRkN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1hjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDtNhWqq8hXd/WHvPd2Bl1Srx118ce4hbnGlBAn0DTdE9uYudOuU1Z Il6ESeUybwjH5GPVRb5a8x31D/EbTQu2hMb1evt/p41UsOcE+MjQzMGkLh9FOuy1 /FoBEnhnFMgvXRDWY924PjCRoc6Wd+EIGuKorvRzwtwEQH08jiOYmuBIFQbhHEqI WqGEDBM9sZnyVGsK8hLrYSbVRVGjh6tlgsXwNKniKPBO5PokvIHCxjEo+F1NceLM JRCaBjvdPlnd3vhzOD7yMaEKHumJxo5dyeI5CJqO1mIbrDgGzGp+0M9V3iF3o1oW DcJ+7gil+bcX+RGQKa0D6gl72/ok1DKJ -----END CERTIFICATE-----Generated at Mon Jun 30 14:01:35 2025 by rpki-client