$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa File: 04dbe57b-abe5-37c5-9c22-633c31b5d406.roa (raw, json) Hash identifier: xXgypVi6v7m7zwM2tsvneeWy1s1uxNJnB2Om4xGQVbg= Subject key identifier: 08:22:DD:06:AF:50:C9:C8:41:27:B4:CE:9E:6A:42:1F:22:2D:B2:B9 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285849CE9A3FE02CE3928DA5C100C0 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6639 IP address blocks: 2606:600::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:e0:2c:e3:92:8d:a5:c1:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=b135126f-606a-415e-80d2-2a43e6d7a7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:97:88:e4:be:dd:88:b7:0e:d2:a3:30:fc: 4c:77:ee:04:3c:aa:e2:cf:2c:47:a8:b8:28:41:49: 6a:be:8a:a2:a3:28:17:db:71:d9:33:ba:81:23:1f: d2:79:fb:25:2b:d4:a2:47:ff:38:ce:2a:9e:5d:56: 24:d2:ae:76:84:d4:32:ad:18:c7:09:44:3c:75:a4: da:96:6e:fb:0a:63:e6:f9:cc:83:cd:10:1f:86:11: c0:0a:e2:bc:2d:ba:c7:f7:d4:b8:1a:c1:16:17:88: 0b:38:ad:ca:76:60:02:c6:2d:22:49:69:08:ed:21: 45:f4:dd:40:1c:4d:9f:92:36:b8:e6:c2:e8:79:b2: 18:30:26:71:e9:f9:42:b4:6b:24:04:c7:13:03:d9: 5e:06:ee:bb:1c:b1:ce:a1:49:0c:c2:17:0a:48:f4: a4:af:c2:be:24:dd:31:79:c9:b6:5d:ba:7b:e0:47: e1:7b:e1:84:19:16:49:28:88:1f:fa:37:7f:e6:12: 68:02:db:43:c1:17:c4:4e:03:24:de:a2:0a:52:0d: df:07:ee:cc:b7:ce:a7:9a:2d:e7:9c:e1:d2:cd:42: c2:da:91:e1:88:30:91:5a:6a:54:13:e4:d6:f7:21: 37:b6:97:52:78:32:b5:56:3f:44:63:e6:ac:51:32: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:22:DD:06:AF:50:C9:C8:41:27:B4:CE:9E:6A:42:1F:22:2D:B2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv6: 2606:600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:8c:d4:d7:af:a3:0c:35:cf:1b:03:e7:e5:e4:17:d1:73: 1b:2b:d2:cc:37:30:45:c5:00:b9:91:d3:89:6b:75:c8:fc:b6: 7a:86:6f:56:fe:50:75:d7:ab:4b:6b:e3:da:45:a9:7c:e8:a5: 70:a6:4f:4b:b7:25:68:63:19:df:a8:9c:df:c1:a2:62:81:fe: 0b:67:e3:64:65:31:29:46:86:54:06:a8:2b:13:6b:05:85:ec: aa:11:d7:10:8f:37:fb:1a:31:0a:70:5a:bc:51:83:cc:cc:e2: 4d:b3:22:07:4c:f1:38:2b:d6:44:8c:40:1a:71:43:e1:7f:0f: 15:cb:59:49:35:f9:96:4e:86:e6:d9:f5:d6:e9:4e:87:fa:0c: d3:89:e9:a2:1c:f9:16:64:d9:27:10:15:c9:7d:e0:f9:11:ef: 89:4f:31:af:d9:20:97:35:c8:2c:2c:bc:1d:f5:6a:25:a4:55: c1:7d:b0:c4:6e:ff:dc:cf:e8:bd:4b:c1:9d:8e:ff:1e:3d:e8: 09:54:21:8c:09:cf:9c:fb:1b:3a:f8:77:20:02:08:38:c8:1d: a4:66:b5:be:67:f3:5b:c7:72:dd:26:53:e3:00:7d:87:b6:a3: ce:c1:79:1e:bb:12:a0:19:b4:30:32:f2:ca:cb:96:d6:90:3b: 19:20:fb:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnOmj/gLOOSjaXBAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YjEzNTEyNmYtNjA2YS00MTVlLTgwZDItMmE0M2U2ZDdhN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrqXiOS+3Yi3DtKjMPxMd+4EPKrizyxHqLgo QUlqvoqioygX23HZM7qBIx/SefslK9SiR/84ziqeXVYk0q52hNQyrRjHCUQ8daTa lm77CmPm+cyDzRAfhhHACuK8LbrH99S4GsEWF4gLOK3KdmACxi0iSWkI7SFF9N1A HE2fkja45sLoebIYMCZx6flCtGskBMcTA9leBu67HLHOoUkMwhcKSPSkr8K+JN0x ecm2Xbp74Efhe+GEGRZJKIgf+jd/5hJoAttDwRfETgMk3qIKUg3fB+7Mt86nmi3n nOHSzULC2pHhiDCRWmpUE+TW9yE3tpdSeDK1Vj9EY+asUTLSwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgi3QavUMnIQSe0zp5qQh8iLbK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMDRkYmU1N2ItYWJlNS0z N2M1LTljMjItNjMzYzMxYjVkNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYGADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQZ4zU16+jDDXPGwPn5eQX0XMbK9LMNzBFxQC5kdOJa3XI/LZ6hm9W /lB116tLa+PaRal86KVwpk9LtyVoYxnfqJzfwaJigf4LZ+NkZTEpRoZUBqgrE2sF heyqEdcQjzf7GjEKcFq8UYPMzOJNsyIHTPE4K9ZEjEAacUPhfw8Vy1lJNfmWTobm 2fXW6U6H+gzTiemiHPkWZNknEBXJfeD5Ee+JTzGv2SCXNcgsLLwd9WolpFXBfbDE bv/cz+i9S8Gdjv8ePegJVCGMCc+c+xs6+HcgAgg4yB2kZrW+Z/Nbx3LdJlPjAH2H tqPOwXkeuxKgGbQwMvLKy5bWkDsZIPvg -----END CERTIFICATE-----Generated at Mon Jun 30 10:36:06 2025 by rpki-client