$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa File: 89ff1085-ba92-36eb-a445-62bd838995f5.roa (raw, json) Hash identifier: xhauD6Cr1aEGGDykA858rbJ9svCjZap0HfRoFFQZTjY= Subject key identifier: 80:F1:42:6B:C1:23:37:34:01:58:B8:C4:38:4F:06:84:44:F3:A6:D3 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584A7A4B4A2B5A0E298E5A6E4980 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 400097 IP address blocks: 2606:3d40:5d03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4a:2b:5a:0e:29:8e:5a:6e:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=4b43475f-74bd-426a-9e58-c55569d2cfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:df:d8:c6:1b:d6:3f:98:c5:1f:1e:e6:23:ed: 87:3a:40:63:63:04:c9:91:fe:5b:f8:64:40:de:21: 5d:1b:cf:6d:31:eb:c0:5c:b9:7a:6e:d5:60:83:e8: 4b:2e:11:ba:f5:d0:2e:e1:df:2f:5a:b3:71:92:3a: 90:2e:8e:48:d7:16:2a:d4:8a:0b:ec:fd:a2:3b:34: 62:08:b9:4c:42:38:5a:10:db:5a:86:42:57:17:40: d2:95:ec:76:21:be:1c:12:32:8a:6a:bb:6d:56:d7: 4e:bf:a2:c1:36:20:36:7a:a4:6c:67:d9:29:36:18: b9:6a:ac:e8:3d:65:bb:7e:ad:c4:30:22:d2:57:79: 90:e2:65:56:6c:63:14:40:b9:0c:e1:19:04:18:2a: 75:7f:e8:3d:98:db:7f:14:18:51:39:70:f2:09:29: 5a:d5:ce:46:38:7b:39:b9:28:97:30:a0:aa:39:43: 42:e6:2e:95:b6:9b:4f:8f:a3:42:6c:47:78:b6:49: 87:db:3c:73:9f:c5:4f:15:f0:ab:41:c4:c1:ec:58: 68:f1:e1:c6:05:0d:b4:24:6e:ee:bd:f0:4f:8c:73: 5c:b0:56:f3:0d:97:9d:93:94:61:e5:63:bb:99:2f: c9:b1:b2:5d:64:4a:79:a0:4d:b8:a3:bd:a3:03:92: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F1:42:6B:C1:23:37:34:01:58:B8:C4:38:4F:06:84:44:F3:A6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f5:77:1b:6e:e2:59:cc:4d:05:a1:6e:e8:e4:a0:73:5d:03: 5e:4f:86:e6:17:b3:c5:3c:ca:37:0b:5f:28:78:8b:b3:4b:7d: 43:c5:f5:46:5c:9b:04:e9:9a:8b:6b:09:e6:7d:b6:6d:a0:e9: d3:bf:61:f2:de:fa:fe:71:09:ac:52:03:26:59:ce:a3:bf:5a: 50:9e:e3:ff:0f:09:be:e5:07:8b:c1:ff:65:9f:37:f9:c9:1f: 62:2a:19:64:15:54:e3:51:d4:3c:69:79:2d:c0:c7:aa:5d:45: fe:8e:4f:ce:64:47:16:91:3f:d9:99:b7:06:3f:03:ab:6c:c9: 3c:3a:99:df:71:9a:d0:f4:f1:ef:5b:cd:7b:2f:6d:9d:7e:45: ef:f9:3f:fc:e3:ea:d1:05:e8:40:dd:57:4f:ce:8c:fc:bd:9c: 55:91:01:44:c1:18:b7:6a:9f:fe:9f:51:cd:45:d7:17:90:6f: 90:53:15:16:28:ee:c9:c9:ec:cb:4a:15:1f:10:89:d3:37:6e: 4a:f3:54:6a:e5:e8:69:4f:ff:ce:cb:cf:11:4f:3f:3a:1a:12: b8:8e:43:06:8e:be:ac:e0:da:95:e2:04:0f:92:01:55:b9:41: 6a:c1:17:fe:3a:39:51:12:6d:c8:bf:56:f9:cb:a0:ba:71:1d: 23:de:5c:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp6S0orWg4pjlpuSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NGI0MzQ3NWYtNzRiZC00MjZhLTllNTgtYzU1NTY5ZDJjZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid/YxhvWP5jFHx7mI+2HOkBjYwTJkf5b+GRA 3iFdG89tMevAXLl6btVgg+hLLhG69dAu4d8vWrNxkjqQLo5I1xYq1IoL7P2iOzRi CLlMQjhaENtahkJXF0DSlex2Ib4cEjKKarttVtdOv6LBNiA2eqRsZ9kpNhi5aqzo PWW7fq3EMCLSV3mQ4mVWbGMUQLkM4RkEGCp1f+g9mNt/FBhROXDyCSla1c5GOHs5 uSiXMKCqOUNC5i6VtptPj6NCbEd4tkmH2zxzn8VPFfCrQcTB7Fho8eHGBQ20JG7u vfBPjHNcsFbzDZedk5Rh5WO7mS/JsbJdZEp5oE24o72jA5KTUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDxQmvBIzc0AVi4xDhPBoRE86bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvODlmZjEwODUtYmE5Mi0z NmViLWE0NDUtNjJiZDgzODk5NWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0D MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACn1dxtu4lnMTQWhbujkoHNdA15PhuYXs8U8yjcLXyh4i7NLfUPF 9UZcmwTpmotrCeZ9tm2g6dO/YfLe+v5xCaxSAyZZzqO/WlCe4/8PCb7lB4vB/2Wf N/nJH2IqGWQVVONR1DxpeS3Ax6pdRf6OT85kRxaRP9mZtwY/A6tsyTw6md9xmtD0 8e9bzXsvbZ1+Re/5P/zj6tEF6EDdV0/OjPy9nFWRAUTBGLdqn/6fUc1F1xeQb5BT FRYo7snJ7MtKFR8QidM3bkrzVGrl6GlP/87LzxFPPzoaEriOQwaOvqzg2pXiBA+S AVW5QWrBF/46OVESbci/VvnLoLpxHSPeXAo= -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:49 2025 by rpki-client