$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa File: 85653d51-6ced-3488-b5c4-6bd643dc06d8.roa (raw, json) Hash identifier: tnMxIZ8a4dtqOh2wknlO55/rq2aVUCN/wVjmOjE8ngY= Subject key identifier: 95:E0:15:EA:49:40:BE:31:21:2F:25:5A:B0:32:4B:29:09:16:54:27 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6F25639D17A92E6C4EC5D Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f2:56:39:d1:7a:92:e6:c4:ec:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=85187b8d-109e-411a-bcb1-cff9636b25d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:9a:8c:5d:4f:67:d2:e0:9c:f6:4b:e3:77: ec:b0:48:ec:f4:c9:20:d8:30:6f:8e:1d:c8:20:30: e8:79:c7:60:6e:e5:c2:d7:fe:3a:58:e2:7d:32:8b: c7:19:1c:2e:c3:42:fe:69:01:e4:f5:38:9d:b6:7e: 47:32:f5:42:51:34:b2:b9:49:be:26:db:12:f7:c9: f3:ab:c6:81:de:48:c0:bf:f5:8f:f5:fc:e4:97:a9: f2:35:fd:54:f5:3d:81:ea:eb:75:2b:b8:57:d9:5e: ad:1e:d8:5e:4a:66:3f:2e:f1:5d:40:b9:e5:f9:ac: d7:cd:f1:d5:18:49:c2:cd:a8:74:59:ad:fe:8b:be: 76:7f:64:b1:03:cf:de:44:16:fb:c5:f9:8b:65:47: e8:b2:53:a7:5f:bc:1d:ea:6f:53:f4:51:e8:bf:25: 38:b0:5b:1d:61:f4:11:17:eb:52:d4:fb:c5:93:05: a9:55:31:14:b6:52:f0:25:bc:d4:21:b0:35:2b:65: 8c:17:1b:b9:5b:9b:95:16:bb:f1:d0:fe:0b:b4:81: 2f:0a:11:bb:99:44:dc:01:21:a3:91:9d:f4:f8:05: f3:4d:26:13:fa:b6:62:5a:35:2c:51:70:5e:07:f0: a2:15:da:95:0f:31:89:ab:e5:46:86:8c:07:1d:e1: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E0:15:EA:49:40:BE:31:21:2F:25:5A:B0:32:4B:29:09:16:54:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:96:a0:0b:d8:1e:7a:9d:54:c2:69:97:ad:7e:b1:69:14:a8: 3d:7f:b3:16:c8:ee:8d:55:11:fb:14:b1:2a:50:2a:61:ab:bc: ba:e9:ff:0e:3f:e2:78:3b:1b:c2:62:df:ef:37:8b:38:b7:cf: fa:38:c1:cb:9e:ce:dc:3e:3a:6a:59:53:0c:e1:53:2b:b5:2e: 11:c3:8c:36:2e:34:03:dc:e3:5e:a9:57:5e:a3:69:76:81:d5: 4b:39:ab:82:17:7c:67:36:83:27:f2:ac:82:7c:dc:07:a9:85: fa:fe:22:b0:cc:d0:77:05:79:2d:ed:e0:e6:e4:81:12:a9:ce: 34:fc:7f:c4:ed:18:18:65:53:48:c1:15:85:dd:c9:ae:9d:8d: 88:06:17:37:4e:9a:7f:f6:1e:94:b6:2b:6f:41:f5:e2:82:70: cc:ad:ac:e4:04:3e:4c:a2:9a:c7:bc:68:36:44:5b:14:8c:9e: 30:04:8b:ec:bd:64:f7:8d:4d:06:fa:8c:bc:b9:f2:51:19:f1: f1:ea:57:ab:81:3b:5b:35:fb:2b:38:07:6e:6c:47:1a:37:a4: 10:70:72:50:86:e2:62:be:5c:f2:6b:b8:a4:43:eb:7e:22:7e: 9d:ab:ca:c1:fc:6a:56:27:f2:7f:e9:72:3e:46:59:a2:14:d4: ab:56:5b:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEke1vJWOdF6kubE7F0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ODUxODdiOGQtMTA5ZS00MTFhLWJjYjEtY2ZmOTYzNmIyNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZOajF1PZ9LgnPZL43fssEjs9Mkg2DBvjh3I IDDoecdgbuXC1/46WOJ9MovHGRwuw0L+aQHk9Tidtn5HMvVCUTSyuUm+JtsS98nz q8aB3kjAv/WP9fzkl6nyNf1U9T2B6ut1K7hX2V6tHtheSmY/LvFdQLnl+azXzfHV GEnCzah0Wa3+i752f2SxA8/eRBb7xfmLZUfoslOnX7wd6m9T9FHovyU4sFsdYfQR F+tS1PvFkwWpVTEUtlLwJbzUIbA1K2WMFxu5W5uVFrvx0P4LtIEvChG7mUTcASGj kZ30+AXzTSYT+rZiWjUsUXBeB/CiFdqVDzGJq+VGhowHHeHI4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJXgFepJQL4xIS8lWrAySykJFlQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODU2NTNkNTEtNmNlZC0z NDg4LWI1YzQtNmJkNjQzZGMwNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhlqAL2B56nVTCaZetfrFpFKg9f7MWyO6NVRH7FLEqUCphq7y66f8O P+J4OxvCYt/vN4s4t8/6OMHLns7cPjpqWVMM4VMrtS4Rw4w2LjQD3ONeqVdeo2l2 gdVLOauCF3xnNoMn8qyCfNwHqYX6/iKwzNB3BXkt7eDm5IESqc40/H/E7RgYZVNI wRWF3cmunY2IBhc3Tpp/9h6UtitvQfXignDMrazkBD5MoprHvGg2RFsUjJ4wBIvs vWT3jU0G+oy8ufJRGfHx6lergTtbNfsrOAdubEcaN6QQcHJQhuJivlzya7ikQ+t+ In6dq8rB/GpWJ/J/6XI+RlmiFNSrVluy -----END CERTIFICATE-----Generated at Mon Apr 7 14:23:39 2025 by rpki-client