$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa File: f19b701f-4b64-3c06-9d45-c1e353da2929.roa (raw, json) Hash identifier: vAVFOiZ0AOXQCh/k0M+fZd4ZxG7ku4gk6Qo0LwMvZkk= Subject key identifier: 0D:42:49:6C:74:3A:C7:02:BB:0A:27:FC:29:6C:07:52:62:C1:7B:E7 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE10011E94F1BFEBF0C2D480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 2606:3600:180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:01:1e:94:f1:bf:eb:f0:c2:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=2094f677-b67b-4fb2-aa72-48e36ea2c66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:ba:ff:36:e8:0e:78:5d:93:c4:67:56:86: 83:c3:73:db:8c:2f:e4:a0:98:15:4a:b1:b9:7f:51: 1e:2d:50:08:cd:74:63:bb:37:77:2f:3a:73:23:ac: 47:45:1b:83:a1:7a:7a:cc:5b:65:b5:8f:06:80:5e: 0d:f0:9f:ba:62:84:01:4b:f2:dd:d2:d2:62:3d:50: d4:26:16:c3:d4:f6:05:24:ca:65:6f:21:ae:a6:7a: 45:f7:c1:12:38:41:35:b8:77:d2:8e:81:00:77:bf: b4:e9:a0:ab:b2:41:0e:ab:9a:47:11:e0:9b:fa:7d: 2c:ba:08:b5:9f:f0:65:dc:f0:c6:d1:15:1f:45:5e: 70:41:b2:85:7e:f2:25:15:9a:d6:ab:ad:99:6e:1d: 15:54:51:b7:10:0e:6e:60:af:40:9e:ee:48:63:88: 47:ba:25:87:cd:8f:45:9b:00:4e:3f:6c:36:47:cf: a9:da:18:48:a9:a4:e6:76:22:24:cb:f9:29:a1:45: 5a:90:9e:79:7d:a5:18:83:3b:db:69:24:e8:93:98: 27:0d:e2:c0:c2:e5:b3:b9:10:7d:e3:20:6f:80:86: 2c:36:bb:2a:a7:4f:e2:4e:3b:fe:e1:7a:ca:06:61: 91:ba:2d:7d:f7:29:20:2c:a2:f5:eb:21:7e:b4:68: 48:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:42:49:6C:74:3A:C7:02:BB:0A:27:FC:29:6C:07:52:62:C1:7B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:180::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9b:8e:a6:83:79:9f:ee:79:97:1d:60:82:a1:99:e1:47:26: ec:d6:36:18:e1:ec:ca:82:08:03:ee:80:f1:dc:6f:c0:ca:d4: 88:85:ba:6e:4c:57:84:18:9b:c7:21:67:41:0f:5a:88:c0:3a: ac:46:b8:98:3d:fb:59:5a:48:ef:e4:de:55:3f:59:da:87:cb: 05:d4:1c:e9:25:7d:79:a1:82:c8:34:f8:3a:ae:05:f8:66:24: ca:54:9d:77:b7:4b:8d:14:1f:a6:0a:02:2d:45:ce:3a:99:4e: 53:45:7c:76:d1:25:29:52:dc:0f:93:e9:5c:5b:ae:fc:55:0b: a5:e1:27:52:55:40:f5:e1:30:4a:d6:6a:d9:4d:a5:19:f0:df: 79:4c:7c:b9:4e:2d:63:af:67:fd:60:16:da:fc:63:73:6f:b0: 88:6c:48:ae:bd:1c:fd:a5:e7:74:9b:9b:ff:19:99:7d:87:b8: b5:93:5f:36:80:4a:a2:0b:dc:3d:a9:e0:84:01:c6:f9:6a:cf: 49:59:23:1e:8e:5f:ff:19:04:5d:93:44:36:99:8b:17:41:e5: c6:1a:ff:a4:4d:a1:ca:15:c7:61:b6:3c:7a:fb:7f:e6:8c:4b: 6a:bd:a1:93:30:ca:8c:d0:0b:2c:72:d9:da:f7:ce:53:36:f4: f5:53:d9:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+EAEelPG/6/DC1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MjA5NGY2NzctYjY3Yi00ZmIyLWFhNzItNDhlMzZlYTJjNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCy6/zboDnhdk8RnVoaDw3PbjC/koJgVSrG5 f1EeLVAIzXRjuzd3LzpzI6xHRRuDoXp6zFtltY8GgF4N8J+6YoQBS/Ld0tJiPVDU JhbD1PYFJMplbyGupnpF98ESOEE1uHfSjoEAd7+06aCrskEOq5pHEeCb+n0sugi1 n/Bl3PDG0RUfRV5wQbKFfvIlFZrWq62Zbh0VVFG3EA5uYK9Anu5IY4hHuiWHzY9F mwBOP2w2R8+p2hhIqaTmdiIky/kpoUVakJ55faUYgzvbaSTok5gnDeLAwuWzuRB9 4yBvgIYsNrsqp0/iTjv+4XrKBmGRui199ykgLKL16yF+tGhIMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1CSWx0OscCuwon/ClsB1JiwXvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjE5YjcwMWYtNGI2NC0z YzA2LTlkNDUtYzFlMzUzZGEyOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAabjqaDeZ/ueZcdYIKhmeFHJuzWNhjh7MqCCAPugPHcb8DK1IiF um5MV4QYm8chZ0EPWojAOqxGuJg9+1laSO/k3lU/WdqHywXUHOklfXmhgsg0+Dqu BfhmJMpUnXe3S40UH6YKAi1FzjqZTlNFfHbRJSlS3A+T6VxbrvxVC6XhJ1JVQPXh MErWatlNpRnw33lMfLlOLWOvZ/1gFtr8Y3NvsIhsSK69HP2l53Sbm/8ZmX2HuLWT XzaASqIL3D2p4IQBxvlqz0lZIx6OX/8ZBF2TRDaZixdB5cYa/6RNocoVx2G2PHr7 f+aMS2q9oZMwyozQCyxy2dr3zlM29PVT2bw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:22 2025 by rpki-client