$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: rRgjAbGcqLGJScF5fj/1AZHWrjjctI7t+VE2uO7oUlE= Subject key identifier: B9:E3:EC:56:AE:29:43:FF:8C:35:CC:4B:1A:3E:FC:3C:59:B1:37:62 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584A2ABAE656C6212CA406509580 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e6:56:c6:21:2c:a4:06:50:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=30c1e978-3ed3-4ace-bbaf-66e00d1fb130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:fa:8e:d8:31:43:49:14:ff:7d:aa:0c:2d: e7:12:b1:de:45:49:7f:fe:5e:52:2d:2f:e4:73:3c: c8:47:17:18:df:ec:2f:19:a7:36:b3:99:0a:12:95: d3:bf:ea:d1:8d:6c:bb:bb:8f:1c:bb:a5:00:df:e4: cf:fe:f5:b0:07:6d:b0:aa:52:a2:fc:42:f5:90:0e: f0:aa:46:a0:e1:f4:7c:b9:99:34:a8:76:05:f8:2d: cd:2a:77:06:a9:02:fe:58:30:57:14:7a:99:d4:d7: f5:73:08:c6:93:83:af:f0:04:00:b0:68:9a:eb:75: 7e:fe:ff:e4:a0:04:ed:1f:69:53:81:11:ea:b2:fe: 08:3f:11:c7:74:c3:f7:f8:0c:ef:55:16:70:26:33: b3:f4:d4:50:ec:4b:3b:53:d5:70:cb:a7:d1:df:35: 3f:53:e7:44:01:ce:08:a0:74:60:ae:6e:28:ed:7a: 64:fd:91:ed:b4:c8:be:9b:79:1b:08:ec:98:20:6b: 2f:d4:a2:6d:92:fd:47:a5:4d:ac:1b:40:f1:19:a8: b2:03:06:3d:fc:ef:70:5a:43:bc:c1:cc:f2:94:9f: 1f:cf:91:07:5a:8a:8c:51:26:7e:de:87:13:b3:f9: 80:80:fb:b1:38:dc:06:b2:6c:36:58:41:a9:ec:78: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E3:EC:56:AE:29:43:FF:8C:35:CC:4B:1A:3E:FC:3C:59:B1:37:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:85:9a:5c:4b:72:03:f8:47:0d:eb:e9:7e:c0:79:79:fe:31: 8b:8c:da:fa:2b:f0:35:31:ff:a0:1d:46:32:67:fd:24:02:e8: 0d:7e:51:78:12:3e:0d:f4:fa:73:92:79:d4:ea:f2:7b:24:2c: 57:8c:10:ff:45:38:d4:d4:6f:9d:4e:24:45:83:44:fb:b6:52: 1a:c7:07:15:e8:fd:cd:2a:7e:a6:8d:0d:15:6f:b0:f3:60:a7: b9:7e:13:94:5e:db:81:35:bb:3d:2d:92:6a:ea:4d:70:8b:2c: cf:e7:1f:8b:16:31:9a:c5:d4:08:e6:11:15:5c:b8:b7:de:2d: ad:2b:7f:fa:c6:03:6c:1c:a7:d8:f9:93:1e:21:6f:f6:5f:96: 6b:4b:54:7e:90:b4:cf:df:07:6b:9a:32:da:81:9e:d1:55:a9: 10:5e:68:01:b2:c4:f6:4e:82:b0:d5:0c:77:62:e6:28:bf:3a: d0:4a:c9:a7:fb:d8:7a:5e:0c:48:f6:18:f5:8c:b4:00:0a:19: 19:0e:e7:5a:3a:53:3a:a7:67:96:50:60:78:08:95:da:0c:ba: c9:45:1a:f1:de:84:ae:3a:20:7b:3d:c5:f2:25:e4:27:92:89: c2:4f:30:06:2f:8b:66:01:7b:98:21:e8:ec:65:c7:09:8a:76: 5f:2c:95:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquuZWxiEspAZQlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MzBjMWU5NzgtM2VkMy00YWNlLWJiYWYtNjZlMDBkMWZiMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+36jtgxQ0kU/32qDC3nErHeRUl//l5SLS/k czzIRxcY3+wvGac2s5kKEpXTv+rRjWy7u48cu6UA3+TP/vWwB22wqlKi/EL1kA7w qkag4fR8uZk0qHYF+C3NKncGqQL+WDBXFHqZ1Nf1cwjGk4Ov8AQAsGia63V+/v/k oATtH2lTgRHqsv4IPxHHdMP3+AzvVRZwJjOz9NRQ7Es7U9Vwy6fR3zU/U+dEAc4I oHRgrm4o7Xpk/ZHttMi+m3kbCOyYIGsv1KJtkv1HpU2sG0DxGaiyAwY9/O9wWkO8 wczylJ8fz5EHWoqMUSZ+3ocTs/mAgPuxONwGsmw2WEGp7Hjm1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLnj7FauKUP/jDXMSxo+/DxZsTdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAshZpcS3ID+EcN6+l+wHl5/jGLjNr6K/A1Mf+gHUYyZ/0kAugNflF4 Ej4N9PpzknnU6vJ7JCxXjBD/RTjU1G+dTiRFg0T7tlIaxwcV6P3NKn6mjQ0Vb7Dz YKe5fhOUXtuBNbs9LZJq6k1wiyzP5x+LFjGaxdQI5hEVXLi33i2tK3/6xgNsHKfY +ZMeIW/2X5ZrS1R+kLTP3wdrmjLagZ7RVakQXmgBssT2ToKw1Qx3YuYovzrQSsmn +9h6XgxI9hj1jLQAChkZDudaOlM6p2eWUGB4CJXaDLrJRRrx3oSuOiB7PcXyJeQn konCTzAGL4tmAXuYIejsZccJinZfLJWE -----END CERTIFICATE-----Generated at Sun Jun 15 15:58:36 2025 by rpki-client