$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json) Hash identifier: YzVnm/TlL4JRbBm7esV/5J+Xb2eIft0BCTsq/Lz7NK4= Subject key identifier: 1B:AE:44:6E:C4:5D:A8:DC:C0:7F:52:DC:ED:CF:28:89:DD:1B:5D:3C Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584A2ABAE671DCE7AA1DA94F9080 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 19782 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e6:71:dc:e7:aa:1d:a9:4f:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=b1a31aa7-1bfa-402e-b696-d523f8f70de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:8e:17:ee:64:37:31:ab:20:46:f2:42:7f: 7a:4e:a7:41:b4:4f:57:15:9e:49:b7:9f:0b:95:bd: 14:bd:03:a5:03:c0:ce:50:7c:5c:04:25:1e:61:da: e6:9e:31:24:cd:90:ab:aa:02:6c:1a:3d:12:c8:61: 1d:46:d9:ab:ca:da:ea:1d:48:6e:1a:01:f6:a4:99: 74:ba:2e:94:0b:33:b5:48:99:d5:b6:5b:2d:b2:28: 3f:67:74:17:31:82:56:93:0d:cf:46:fd:1c:90:69: ed:cc:71:5e:19:de:22:91:8a:86:e5:2d:91:34:e1: 0e:39:9d:50:0b:0c:02:c4:b6:70:da:e3:e5:2d:cc: 67:fd:86:26:4a:2b:42:20:88:b8:54:34:d2:f8:6f: 6c:6b:d8:7d:ed:8d:85:db:a8:df:38:f5:fd:c2:14: 14:94:06:94:a7:a9:27:32:a9:6d:b4:9b:48:77:b7: b7:e2:2c:15:32:a6:f4:96:36:d0:73:18:17:29:02: d4:ad:f2:f8:9e:61:c3:e0:44:31:a6:aa:70:ae:1f: 15:13:d1:b9:6f:e2:1d:cb:9e:90:a3:77:5a:3f:59: 79:63:13:2e:2e:dc:dc:70:c8:32:73:8f:df:07:e8: f8:cf:2a:35:d4:5a:63:b2:aa:8f:24:94:df:cb:8e: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AE:44:6E:C4:5D:A8:DC:C0:7F:52:DC:ED:CF:28:89:DD:1B:5D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:83:41:d7:41:1a:97:f6:95:bd:a1:02:f8:ed:cd:38:20:4b: 9e:d9:2a:69:af:4f:31:fa:5c:3f:d4:9d:7b:a9:cf:b8:18:d1: be:80:a0:61:4e:31:33:0d:a9:0a:d8:84:d8:33:80:a0:f1:2b: be:39:30:a2:0e:36:02:1c:4d:23:a0:48:43:a9:0c:31:5f:c2: 23:97:4b:06:9c:68:14:41:27:fa:b9:a0:26:76:bc:3c:54:7e: 94:e4:0a:8b:de:95:06:df:48:8d:bd:86:95:29:67:8d:e1:e5: d9:35:0b:6b:d6:00:06:6d:01:ab:a6:00:e6:83:d3:77:88:22: 97:df:23:2c:bd:c4:20:8d:d9:5f:8d:6c:11:2f:ba:d1:07:05: 70:06:e8:89:d9:bd:a4:74:9e:c1:e1:57:f6:5f:99:0b:58:f3: d1:e4:b3:5a:90:5d:31:83:d2:3e:24:5b:d8:96:9f:19:fc:74: 57:e6:39:0d:f1:f6:2c:f0:3d:c6:22:70:82:86:a7:6c:9b:c7: fa:c3:67:44:8b:e5:5c:e3:67:b0:d8:31:39:f5:44:8e:17:47: f1:12:fd:ad:5b:1d:c8:89:73:9f:c9:99:5b:5a:b0:7a:5c:2d: a3:09:44:8f:d8:9a:c0:f9:26:ca:cd:9a:0c:99:27:e1:24:47: f4:91:dc:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquuZx3OeqHalPkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YjFhMzFhYTctMWJmYS00MDJlLWI2OTYtZDUyM2Y4ZjcwZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0qOF+5kNzGrIEbyQn96TqdBtE9XFZ5Jt58L lb0UvQOlA8DOUHxcBCUeYdrmnjEkzZCrqgJsGj0SyGEdRtmrytrqHUhuGgH2pJl0 ui6UCzO1SJnVtlstsig/Z3QXMYJWkw3PRv0ckGntzHFeGd4ikYqG5S2RNOEOOZ1Q CwwCxLZw2uPlLcxn/YYmSitCIIi4VDTS+G9sa9h97Y2F26jfOPX9whQUlAaUp6kn MqlttJtId7e34iwVMqb0ljbQcxgXKQLUrfL4nmHD4EQxpqpwrh8VE9G5b+Idy56Q o3daP1l5YxMuLtzccMgyc4/fB+j4zyo11FpjsqqPJJTfy45HIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBuuRG7EXajcwH9S3O3PKIndG108MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAg0HXQRqX9pW9oQL47c04IEue2Sppr08x+lw/1J17qc+4GNG+gKBh TjEzDakK2ITYM4Cg8Su+OTCiDjYCHE0joEhDqQwxX8Ijl0sGnGgUQSf6uaAmdrw8 VH6U5AqL3pUG30iNvYaVKWeN4eXZNQtr1gAGbQGrpgDmg9N3iCKX3yMsvcQgjdlf jWwRL7rRBwVwBuiJ2b2kdJ7B4Vf2X5kLWPPR5LNakF0xg9I+JFvYlp8Z/HRX5jkN 8fYs8D3GInCChqdsm8f6w2dEi+Vc42ew2DE59USOF0fxEv2tWx3IiXOfyZlbWrB6 XC2jCUSP2JrA+SbKzZoMmSfhJEf0kdyb -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:08 2025 by rpki-client