$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa File: 89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json) Hash identifier: yqAM6tC5pXpDlYkzEdvk1aq17IFMaB8L8nmUdpSy9xs= Subject key identifier: 64:E7:EB:AA:85:27:AE:58:07:D4:82:C1:74:61:E2:4D:F1:F9:DC:A0 Certificate issuer: /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Certificate serial: 010D0C9F4328584A2ABACEC2FAD725293CF5D520 Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 12243 IP address blocks: 2606:1040::/32 maxlen: 32 2620:11f:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ce:c2:fa:d7:25:29:3c:f5:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=970b0ba9-1d6a-4c68-9a29-e8916b489094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:1f:5e:87:de:be:0f:bf:60:6d:12:20:56: 8a:f9:45:e7:7b:0d:62:d6:87:e3:12:94:0b:8b:41: 07:2c:02:ab:bc:fe:7b:49:82:f0:da:22:0c:53:af: a3:c1:87:a8:1b:e6:8d:e3:5b:cf:d7:19:8a:20:8b: a3:4b:13:60:b8:4d:18:11:1b:9d:40:7e:cb:63:4e: 96:5d:66:c1:e5:c5:98:57:d7:41:f2:a5:32:0e:e1: a0:f1:14:d4:fc:5c:d4:19:27:6d:36:5f:45:b7:38: 42:de:d3:80:5b:86:d0:23:45:cd:2b:ca:8b:36:57: 14:df:06:ab:ab:e8:35:31:b5:a9:3f:a2:79:ef:b1: 28:c8:1d:25:df:9f:56:27:c4:99:2f:5e:6a:c3:68: 1d:fe:4e:c7:0e:21:6b:15:4c:7a:1e:58:5e:85:fd: c3:de:f6:3a:00:d7:a4:ac:c2:e7:74:f7:ac:83:4a: 4a:36:04:c4:9c:f4:98:8f:d0:00:b9:66:ec:b7:9e: aa:5a:91:7a:f9:95:62:2c:55:61:80:a6:c3:6c:29: e6:19:3e:95:4f:4e:0d:9d:31:37:b5:35:92:e1:7e: 5b:8c:4e:b2:3e:35:85:a2:7e:ee:96:43:50:8e:2e: 6c:c0:a3:9b:e4:f2:42:03:74:27:87:59:59:df:28: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:EB:AA:85:27:AE:58:07:D4:82:C1:74:61:E2:4D:F1:F9:DC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl X509v3 Authority Key Identifier: keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer sbgp-ipAddrBlock: critical IPv6: 2606:1040::/32 2620:11f:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:58:18:27:6b:9c:69:5c:95:19:f0:14:dd:02:de:4c:28:c3: 8b:71:a8:34:3d:f9:bc:cf:cd:96:18:5c:6a:a0:75:2f:f2:c3: c2:0b:19:39:2b:1e:2c:1e:8f:f2:f6:b0:7b:39:9f:76:5b:c4: ed:67:d9:44:68:eb:1a:3c:86:ef:97:39:09:24:ec:f1:6a:59: 57:5f:6d:d9:20:bc:a5:bf:32:73:07:de:d4:2c:6a:68:2b:32: 85:c9:be:2c:a0:21:5b:fc:fc:50:d4:ae:98:ed:a9:2b:8f:9c: 6a:bf:40:19:08:6f:54:8e:e4:bf:c0:3d:c2:05:3c:c8:0c:23: b8:4b:b9:4e:c3:f5:1d:dc:35:40:25:d1:45:3c:a9:ed:17:88: d9:4b:8c:b0:97:f6:ea:05:6c:3f:3d:3b:19:93:33:79:a5:ee: c3:f8:37:b0:09:ca:16:9a:fb:d3:8a:68:5c:36:85:60:f0:a5: 4a:aa:76:e7:84:43:d5:04:89:d6:9e:d6:9c:88:75:65:6f:d9: 76:3e:cc:ba:8c:d4:f8:97:32:f2:99:5c:54:ad:8b:da:55:8d: ae:08:19:ef:33:2c:56:46:37:3b:86:11:c1:04:bb:5f:8a:b4: 87:d0:fd:e1:32:0a:9d:5d:9a:eb:69:4f:cb:04:48:0e:de:31: 44:8c:b3:4a -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEoqus7C+tclKTz11SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNjNkNTItMjA5Yi00N2FjLWFhMjQtZjhjODZkMTFm Y2I5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OTcwYjBiYTktMWQ2YS00YzY4LTlhMjktZTg5MTZiNDg5MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIfXofevg+/YG0SIFaK+UXnew1i1ofjEpQL i0EHLAKrvP57SYLw2iIMU6+jwYeoG+aN41vP1xmKIIujSxNguE0YERudQH7LY06W XWbB5cWYV9dB8qUyDuGg8RTU/FzUGSdtNl9FtzhC3tOAW4bQI0XNK8qLNlcU3war q+g1MbWpP6J577EoyB0l359WJ8SZL15qw2gd/k7HDiFrFUx6Hlhehf3D3vY6ANek rMLndPesg0pKNgTEnPSYj9AAuWbst56qWpF6+ZViLFVhgKbDbCnmGT6VT04NnTE3 tTWS4X5bjE6yPjWFon7ulkNQji5swKOb5PJCA3Qnh1lZ3yhIbQIDAQABo4IDXjCC A1owHQYDVR0OBBYEFGTn66qFJ65YB9SCwXRh4k3x+dygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2 M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQxMWZjYjkvODlmYTcxNzEtYmNlMC0z Njg4LWFiNmUtMjdmM2NhYzY4OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEzNjNkNTItMjA5Yi00N2FjLWFh MjQtZjhjODZkMTFmY2I5L2FhMzYzZDUyLTIwOWItNDdhYy1hYTI0LWY4Yzg2ZDEx ZmNiOS5jcmwwHwYDVR0jBBgwFoAU8ryM6cwMCU9QK/Sq3s/OPbpAWDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4 NmQxMWZjYjkuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAJgYQQAMG ACYgAR/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAItYGCdrnGlclRnwFN0C3kwow4txqDQ9+bzPzZYYXGqg dS/yw8ILGTkrHiwej/L2sHs5n3ZbxO1n2URo6xo8hu+XOQkk7PFqWVdfbdkgvKW/ MnMH3tQsamgrMoXJviygIVv8/FDUrpjtqSuPnGq/QBkIb1SO5L/APcIFPMgMI7hL uU7D9R3cNUAl0UU8qe0XiNlLjLCX9uoFbD89OxmTM3ml7sP4N7AJyhaa+9OKaFw2 hWDwpUqqdueEQ9UEidae1pyIdWVv2XY+zLqM1PiXMvKZXFSti9pVja4IGe8zLFZG NzuGEcEEu1+KtIfQ/eEyCp1dmutpT8sESA7eMUSMs0o= -----END CERTIFICATE-----Generated at Tue Jun 17 12:20:02 2025 by rpki-client