$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa File: a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa (raw, json) Hash identifier: yTqQ3YKLFy1UmwtI3up4osmBo6XvDX8U5EySdmhWRiQ= Subject key identifier: C6:26:2B:04:E1:48:A6:EB:00:60:AE:DF:19:7A:D6:7E:D1:7C:14:5C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EDDB2677104647ECDD00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ed:db:26:77:10:46:47:ec:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=a5621106-9b4b-403f-a2ee-f2ee13e6acab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:68:c3:8b:12:53:0e:24:86:67:89:9b:36:52: 1f:5d:83:0e:64:91:70:ed:f1:85:f4:32:00:c2:15: 0d:db:62:d0:59:04:cb:0d:29:ec:bd:2e:06:19:08: 80:01:7e:61:a1:80:7e:66:58:8e:da:03:e1:4d:85: c3:11:1c:29:fe:1b:6b:34:50:25:a1:60:fe:e8:b8: 64:50:6c:ef:e9:94:66:55:cb:e2:60:ae:a5:7c:52: 72:f5:a7:d6:55:4d:b0:e7:69:f6:87:92:f1:6a:38: ef:45:3c:a8:54:c4:58:ef:a5:c7:8a:30:64:38:02: 45:a6:cb:8f:a8:f2:fa:ef:ad:18:97:82:fd:b7:42: 98:3c:dc:f5:95:49:30:70:f2:19:50:3a:a4:9d:8d: 8b:68:c7:82:e9:c5:94:35:67:f1:a1:63:6d:55:38: e5:e2:3b:f8:74:c0:89:a3:de:44:b1:76:f3:4a:62: 94:46:0e:fd:ac:8e:6a:a2:f9:60:38:49:43:51:4b: 74:f4:3e:f3:48:89:b3:77:4a:af:70:4a:aa:8a:37: 42:c7:b9:af:97:30:94:01:e6:0c:75:75:db:da:62: f4:06:85:db:f7:91:52:2a:0e:8e:74:6a:1d:c8:d6: 21:02:8a:d1:8d:4a:b5:13:b1:b5:c1:08:cd:56:b9: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:2B:04:E1:48:A6:EB:00:60:AE:DF:19:7A:D6:7E:D1:7C:14:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a7:79:06:61:6c:af:51:b0:5b:08:12:7e:8a:57:a5:c8:23: a5:91:40:3f:f7:f5:30:95:44:30:f4:f5:16:25:de:11:c8:d5: 9e:2b:fa:92:6e:59:ff:ee:3a:94:6f:15:8f:b3:57:41:86:d7: e0:d9:ff:64:84:a6:76:96:50:84:0f:cf:10:73:b4:82:76:b3: 2a:d8:b4:b0:dd:ba:8d:c6:41:44:5c:86:fd:57:bd:2a:cd:45: 00:aa:ed:14:4d:f5:32:56:f7:eb:65:a6:30:6a:73:9d:e1:a5: a2:39:dc:05:7c:b7:aa:f8:a0:6c:29:b2:fc:a1:6e:c6:1b:e3: 30:03:89:ab:45:1f:4e:40:42:1c:ec:5a:28:cf:76:43:73:67: 37:bf:21:99:ee:0c:6d:47:fa:51:6a:ee:a3:03:db:ad:78:86: 32:ec:af:d6:35:40:81:bb:2c:46:4f:f4:67:ec:a2:eb:7d:8a: 3d:60:c1:1f:4c:db:96:4f:9d:5e:a2:8a:68:54:b3:ba:45:51: ce:ca:80:68:20:28:0f:da:e6:25:3c:a4:da:a5:b4:30:d7:7b: 40:da:0c:68:2c:50:4a:0b:43:29:71:96:0d:de:69:ae:56:38: 84:0a:42:08:e5:f9:e9:cd:10:4c:14:7a:ea:26:42:69:db:ee: fd:0d:5e:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEke1u3bJncQRkfs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YTU2MjExMDYtOWI0Yi00MDNmLWEyZWUtZjJlZTEzZTZhY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmjDixJTDiSGZ4mbNlIfXYMOZJFw7fGF9DIA whUN22LQWQTLDSnsvS4GGQiAAX5hoYB+ZliO2gPhTYXDERwp/htrNFAloWD+6Lhk UGzv6ZRmVcviYK6lfFJy9afWVU2w52n2h5LxajjvRTyoVMRY76XHijBkOAJFpsuP qPL6760Yl4L9t0KYPNz1lUkwcPIZUDqknY2LaMeC6cWUNWfxoWNtVTjl4jv4dMCJ o95EsXbzSmKURg79rI5qovlgOElDUUt09D7zSImzd0qvcEqqijdCx7mvlzCUAeYM dXXb2mL0BoXb95FSKg6OdGodyNYhAorRjUq1E7G1wQjNVrmVUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMYmKwThSKbrAGCu3xl61n7RfBRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTFlY2FlYmEtOTU4MC0z ZGNjLTllMmQtMWIzZjkzZjk1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdqd5BmFsr1GwWwgSfopXpcgjpZFAP/f1MJVEMPT1FiXeEcjVniv6 km5Z/+46lG8Vj7NXQYbX4Nn/ZISmdpZQhA/PEHO0gnazKti0sN26jcZBRFyG/Ve9 Ks1FAKrtFE31Mlb362WmMGpzneGlojncBXy3qvigbCmy/KFuxhvjMAOJq0UfTkBC HOxaKM92Q3NnN78hme4MbUf6UWruowPbrXiGMuyv1jVAgbssRk/0Z+yi632KPWDB H0zblk+dXqKKaFSzukVRzsqAaCAoD9rmJTyk2qW0MNd7QNoMaCxQSgtDKXGWDd5p rlY4hApCCOX56c0QTBR66iZCadvu/Q1e3A== -----END CERTIFICATE-----Generated at Mon Apr 7 14:12:00 2025 by rpki-client