$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa File: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (raw, json) Hash identifier: cWoVA5U3T1tN9pOISUwPQI28BXh/pQP+751RVrv+VHM= Subject key identifier: 8C:8C:7F:2F:93:C8:E2:FA:A2:6D:A3:9B:10:DC:04:6C:AA:5F:63:C4 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584A2ABAE648A919CB63C61EF480 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 17 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e6:48:a9:19:cb:63:c6:1e:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=da00f4f7-0e0b-43a0-9b4b-a6ff5c3aeacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:d0:fc:f1:23:86:25:b5:52:40:c3:52:da: b0:5f:35:af:71:bc:9a:70:7f:34:60:60:ec:21:1b: 3d:d7:2a:9d:0f:09:80:05:9f:fe:c0:28:c3:c8:f3: 84:33:d8:39:e6:1f:9f:b3:ff:2c:06:6e:77:a2:ad: 29:07:60:a1:d5:fc:9d:cf:53:ba:3d:83:b2:d6:24: aa:ef:2e:d2:b1:1e:03:c0:ab:80:67:8a:4e:ae:86: e0:c2:d0:c2:79:10:25:c5:43:6a:20:b6:73:5f:2a: 19:97:f1:f5:07:0e:d9:b7:0b:db:16:77:eb:a0:4b: 3c:30:03:a7:a3:16:a9:df:ad:74:3e:01:bb:92:41: 50:92:8b:85:e9:70:4c:6b:d7:39:a5:bf:bc:92:b3: 79:2d:64:cc:35:5f:77:5c:0d:c6:78:a6:cd:6f:89: 07:07:3b:d8:46:33:96:ce:eb:ec:63:5b:a7:69:17: ec:55:a5:a6:fd:6c:f8:c4:1d:e5:dd:9a:55:49:c2: 73:b9:48:a5:3f:c0:2e:a9:50:0f:73:c3:68:ab:fe: 11:5f:02:f1:68:e1:41:39:c2:52:3e:ad:a2:0d:e3: 37:01:eb:34:32:41:7e:43:b1:89:21:ca:66:08:a4: ff:4c:ad:05:6b:68:47:5d:d0:89:d7:2f:a8:4f:43: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:7F:2F:93:C8:E2:FA:A2:6D:A3:9B:10:DC:04:6C:AA:5F:63:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:eb:dc:b3:ce:dc:35:d6:16:47:17:67:cd:00:14:2c:6c:46: 3d:3f:3c:51:81:a0:40:38:1b:03:09:1f:df:c4:59:68:31:34: 5e:ed:3b:ce:6b:fc:2e:52:97:2f:a7:49:3e:9b:7c:63:da:91: b9:c0:53:a4:fa:c1:a3:97:25:87:49:24:67:3c:01:0e:6c:23: db:29:49:50:b6:e7:87:a8:12:32:11:b4:a7:87:4e:e8:69:87: 07:f8:c3:67:a8:ca:f6:ce:19:36:c4:c1:6f:7d:12:ad:d6:83: 50:63:cd:38:72:ae:a0:1d:dd:dd:48:f0:0e:8d:34:98:f6:3d: c9:55:da:5b:0b:b0:af:cb:da:7d:12:49:e2:99:2f:da:5d:d2: 0a:0c:5c:9c:5d:98:8a:5d:55:8e:79:b5:e1:5d:20:c5:99:97: 55:bd:1e:8b:86:d2:01:3d:17:65:22:81:b4:67:0a:bb:50:f1: 15:46:ad:eb:47:18:bb:5a:4d:70:c3:46:f5:dd:f3:ed:b6:05: 94:90:0b:cc:17:b4:76:34:0f:36:82:fd:70:4b:e4:91:94:ed: a4:8b:08:54:ed:d4:81:d4:c6:df:35:7b:b6:29:46:12:d7:49: d1:27:de:fe:65:58:37:82:3e:6c:5a:ae:82:4e:2e:dd:3e:97: c2:f4:c0:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquuZIqRnLY8Ye9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGEwMGY0ZjctMGUwYi00M2EwLTliNGItYTZmZjVjM2FlYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEvQ/PEjhiW1UkDDUtqwXzWvcbyacH80YGDs IRs91yqdDwmABZ/+wCjDyPOEM9g55h+fs/8sBm53oq0pB2Ch1fydz1O6PYOy1iSq 7y7SsR4DwKuAZ4pOrobgwtDCeRAlxUNqILZzXyoZl/H1Bw7ZtwvbFnfroEs8MAOn oxap3610PgG7kkFQkouF6XBMa9c5pb+8krN5LWTMNV93XA3GeKbNb4kHBzvYRjOW zuvsY1unaRfsVaWm/Wz4xB3l3ZpVScJzuUilP8AuqVAPc8Noq/4RXwLxaOFBOcJS Pq2iDeM3Aes0MkF+Q7GJIcpmCKT/TK0Fa2hHXdCJ1y+oT0NYQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIyMfy+TyOL6om2jmxDcBGyqX2PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvZTIzNGM1Y2YtNmFkNy0z NTBiLTkwMTgtYWVlZjQwMTk1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAW69yzztw11hZHF2fNABQsbEY9PzxRgaBAOBsDCR/fxFloMTRe7TvO a/wuUpcvp0k+m3xj2pG5wFOk+sGjlyWHSSRnPAEObCPbKUlQtueHqBIyEbSnh07o aYcH+MNnqMr2zhk2xMFvfRKt1oNQY804cq6gHd3dSPAOjTSY9j3JVdpbC7Cvy9p9 EknimS/aXdIKDFycXZiKXVWOebXhXSDFmZdVvR6LhtIBPRdlIoG0Zwq7UPEVRq3r Rxi7Wk1ww0b13fPttgWUkAvMF7R2NA82gv1wS+SRlO2kiwhU7dSB1MbfNXu2KUYS 10nRJ97+ZVg3gj5sWq6CTi7dPpfC9MAV -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:10 2025 by rpki-client