$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa File: 2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa (raw, json) Hash identifier: KqExlvQMULb0J7fqSAG3Fy9ZQpRxfTcwJ2481KfR0Qo= Subject key identifier: E8:1D:9D:B3:35:8C:B9:50:88:89:A1:AD:93:92:4A:C0:59:BB:4B:1C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE10010F5ECA285517998040 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 2606:3600:160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:01:0f:5e:ca:28:55:17:99:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=cc40ae1d-847f-456e-8a7e-73a1707f3712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:03:93:74:7f:db:4e:0d:73:46:59:e9:7f: 14:c9:44:29:e3:6e:e5:1d:e8:23:8d:97:c2:a1:11: 3b:26:17:f5:7b:e5:78:cd:b3:49:dd:52:7a:f4:20: 72:dc:bc:4f:98:da:bc:3b:78:b4:2f:ab:2e:b6:fa: 84:eb:3d:4a:f7:62:2b:f3:8e:3d:05:01:10:72:bd: cc:8b:49:fe:f0:92:96:24:51:59:31:d8:ca:a5:c7: 21:ad:6d:55:43:d8:c3:dd:e8:7f:b8:ea:f9:b9:52: 66:14:96:20:31:ff:6c:f4:f0:1a:84:bf:f7:73:45: 02:14:7c:7b:f4:f1:d7:75:fe:68:1b:f3:17:70:41: 9b:61:7f:b8:fd:b8:68:a7:c8:8a:75:a5:70:1d:62: f6:8b:e1:e8:b9:96:99:33:7f:8c:e7:03:67:64:08: ec:7c:25:3b:42:57:57:78:8d:4f:7b:0f:69:69:bd: 64:54:0e:c6:bf:5f:ec:f4:06:b4:ef:f2:2b:c2:d3: a4:e1:38:e6:32:7a:03:2c:93:11:82:a7:41:f1:cd: 3a:ec:79:72:66:6d:e1:5a:da:fc:1b:f3:2a:59:0b: d7:11:24:ea:e2:87:75:23:16:21:fe:29:1a:0b:37: 1e:cc:d8:45:51:35:75:d1:3a:1d:5b:4f:4c:aa:b2: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1D:9D:B3:35:8C:B9:50:88:89:A1:AD:93:92:4A:C0:59:BB:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:160::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:69:a6:42:95:11:50:b3:d3:09:f6:7f:53:cd:0d:60:19:fd: 0e:54:99:2f:8d:98:48:e2:bb:6b:c4:ef:d4:d6:b4:5f:05:43: ee:b6:7a:4d:ef:2c:2c:da:86:7d:c5:63:28:42:30:e5:92:47: 8f:22:b4:05:ff:f2:6b:bc:83:63:53:46:23:ab:61:b8:71:c9: 5a:c5:11:7b:fe:77:b6:18:65:38:17:1a:f5:a1:c2:11:84:e8: cc:23:d5:ac:ef:7f:6b:bf:d7:e5:18:79:66:ca:6c:c5:58:e0: b6:99:0c:c9:26:6d:5a:66:47:89:5e:2c:d4:ad:c4:a4:f0:f1: 9b:76:c9:70:b8:bc:dc:bd:48:f3:0a:70:f5:4b:df:0e:8e:bd: 00:c7:97:27:87:75:a0:76:2a:ce:61:3b:02:ef:bf:90:32:62: c6:4e:db:a3:7f:e6:20:32:be:20:a4:dd:d2:7f:3b:34:2a:48: fb:06:0d:45:78:85:f8:d8:cb:46:08:7d:f1:a3:e8:79:52:20: 4b:3c:9f:ed:d5:9d:ab:9c:0b:2a:8e:fa:35:07:de:16:c9:32: 5b:82:af:91:c2:07:40:59:64:34:ad:69:27:07:68:fa:6c:92: d9:65:e5:f3:8c:79:7f:d1:cd:72:7a:38:ed:73:73:11:36:29: 41:e9:36:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+EAEPXsooVReZgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk Y2M0MGFlMWQtODQ3Zi00NTZlLThhN2UtNzNhMTcwN2YzNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZwDk3R/204Nc0ZZ6X8UyUQp427lHegjjZfC oRE7Jhf1e+V4zbNJ3VJ69CBy3LxPmNq8O3i0L6sutvqE6z1K92Ir8449BQEQcr3M i0n+8JKWJFFZMdjKpcchrW1VQ9jD3eh/uOr5uVJmFJYgMf9s9PAahL/3c0UCFHx7 9PHXdf5oG/MXcEGbYX+4/bhop8iKdaVwHWL2i+HouZaZM3+M5wNnZAjsfCU7QldX eI1Pew9pab1kVA7Gv1/s9Aa07/IrwtOk4TjmMnoDLJMRgqdB8c067HlyZm3hWtr8 G/MqWQvXESTq4od1IxYh/ikaCzcezNhFUTV10TodW09MqrJCiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOgdnbM1jLlQiImhrZOSSsBZu0scMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMmFmY2QzZDItNTA4ZS0z NzRkLThhNjMtNjJmOGUyY2ZkYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVppkKVEVCz0wn2f1PNDWAZ/Q5UmS+NmEjiu2vE79TWtF8FQ+62 ek3vLCzahn3FYyhCMOWSR48itAX/8mu8g2NTRiOrYbhxyVrFEXv+d7YYZTgXGvWh whGE6Mwj1azvf2u/1+UYeWbKbMVY4LaZDMkmbVpmR4leLNStxKTw8Zt2yXC4vNy9 SPMKcPVL3w6OvQDHlyeHdaB2Ks5hOwLvv5AyYsZO26N/5iAyviCk3dJ/OzQqSPsG DUV4hfjYy0YIffGj6HlSIEs8n+3VnaucCyqO+jUH3hbJMluCr5HCB0BZZDStaScH aPpsktll5fOMeX/RzXJ6OO1zcxE2KUHpNoQ= -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:50 2025 by rpki-client