$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa File: 3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json) Hash identifier: nvrdfSro8xFhbw7Aw5eQApAR3Te8vNe6jEtva3oNmtY= Subject key identifier: 36:3B:EE:EC:05:44:57:8D:FA:2A:1D:D6:73:1D:08:A6:DE:C3:77:70 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584988CF261324FBC5865ED8DAB0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397182 IP address blocks: 2606:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:26:13:24:fb:c5:86:5e:d8:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=8c3b9654-b335-422a-85cf-33bdf9bd2178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:39:97:f6:6a:c0:7a:1c:ac:fe:08:ab:10: 0d:a0:f4:f8:24:cf:3f:1b:ff:8f:d1:02:89:08:e1: 4e:f1:0c:0e:db:84:84:f3:9b:af:dd:93:01:24:f9: 69:a9:5c:32:df:ed:e5:81:3c:ba:95:eb:c2:ed:11: 18:e3:41:da:b6:8b:6d:9d:28:6a:95:bd:e8:1b:b7: 7d:ff:24:1b:90:94:26:c1:ea:e0:f1:72:f7:97:bf: cd:95:3e:12:48:35:00:60:87:15:97:79:6a:ae:db: 73:98:16:b0:a0:44:07:0f:2a:6d:24:93:69:57:ce: ce:a0:e5:98:f6:43:e2:52:50:4f:eb:6c:f9:6a:09: 39:d2:fe:59:49:25:1a:1e:d3:4a:7c:57:6e:3d:b8: 0b:22:cf:07:eb:18:59:9e:3f:f4:8d:8b:42:5a:61: 3b:82:76:e7:92:21:79:98:22:ef:73:f2:48:83:83: 75:fd:ed:31:7c:1f:31:0c:a9:34:4f:d9:88:c7:c8: 7e:e5:e5:b8:80:00:49:99:47:11:a1:21:0d:fc:17: 70:9b:53:ad:72:26:75:aa:18:b0:07:55:2d:47:97: a2:27:93:e5:d3:ca:cc:ca:ff:2b:40:7c:34:55:16: bf:6b:5b:48:10:67:17:bb:50:86:c6:73:4c:c7:5b: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:EE:EC:05:44:57:8D:FA:2A:1D:D6:73:1D:08:A6:DE:C3:77:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f2:fe:5a:56:04:4c:ce:df:f8:9b:ba:dc:e7:c5:13:9b:7f: 4f:e9:c2:62:e1:5d:ab:7b:a9:62:34:39:54:b4:3e:7d:ff:2b: d7:67:72:73:56:74:6e:be:89:24:67:40:d2:41:40:e6:98:e5: f9:3f:52:ce:16:10:ab:39:89:f9:8a:87:3e:cb:b6:95:d9:85: 2b:4f:63:31:ed:f4:88:f9:63:fe:c9:0b:51:ff:68:9b:cc:9e: 7f:d5:8a:c2:11:fd:dd:59:88:e0:e0:e8:61:42:b5:df:0d:27: c1:80:46:b7:fb:ac:73:f0:4f:97:f2:aa:f1:e0:5d:be:9f:ca: f8:25:2d:b7:ea:b1:38:55:6f:6d:3c:3d:0c:30:41:83:bb:51: c4:cf:19:32:39:f0:af:d3:cc:c1:31:df:30:fb:fc:27:4e:fb: 62:a7:d8:95:64:6a:55:28:21:b5:f1:74:61:be:3b:81:f1:1c: 52:61:ae:ec:f8:da:b7:74:10:33:b3:2c:ae:19:dc:e2:91:ae: 7e:28:85:de:54:e3:45:6b:42:62:94:85:42:af:52:5e:1f:dd: ab:0c:2a:b6:f9:cf:d7:38:e6:c3:37:62:ff:fc:1e:c5:e8:bb: 87:80:43:ed:fc:78:e7:e2:f7:c5:62:be:34:fa:5d:94:e4:6b: 5e:7f:b1:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmIzyYTJPvFhl7Y2rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OGMzYjk2NTQtYjMzNS00MjJhLTg1Y2YtMzNiZGY5YmQyMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqs5l/ZqwHocrP4IqxANoPT4JM8/G/+P0QKJ COFO8QwO24SE85uv3ZMBJPlpqVwy3+3lgTy6levC7REY40HatottnShqlb3oG7d9 /yQbkJQmwerg8XL3l7/NlT4SSDUAYIcVl3lqrttzmBawoEQHDyptJJNpV87OoOWY 9kPiUlBP62z5agk50v5ZSSUaHtNKfFduPbgLIs8H6xhZnj/0jYtCWmE7gnbnkiF5 mCLvc/JIg4N1/e0xfB8xDKk0T9mIx8h+5eW4gABJmUcRoSEN/Bdwm1OtciZ1qhiw B1UtR5eiJ5Pl08rMyv8rQHw0VRa/a1tIEGcXu1CGxnNMx1u4LwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDY77uwFRFeN+iod1nMdCKbew3dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2IwZDRkNTAtMWNiNy0z YzczLWIwNTgtNjQxODU3MTdmOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAp8v5aVgRMzt/4m7rc58UTm39P6cJi4V2re6liNDlUtD59/yvXZ3Jz VnRuvokkZ0DSQUDmmOX5P1LOFhCrOYn5ioc+y7aV2YUrT2Mx7fSI+WP+yQtR/2ib zJ5/1YrCEf3dWYjg4OhhQrXfDSfBgEa3+6xz8E+X8qrx4F2+n8r4JS236rE4VW9t PD0MMEGDu1HEzxkyOfCv08zBMd8w+/wnTvtip9iVZGpVKCG18XRhvjuB8RxSYa7s +Nq3dBAzsyyuGdzika5+KIXeVONFa0JilIVCr1JeH92rDCq2+c/XOObDN2L//B7F 6LuHgEPt/Hjn4vfFYr40+l2U5Gtef7Gb -----END CERTIFICATE-----Generated at Sun Apr 27 19:53:12 2025 by rpki-client