$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa File: c090b3b8-860c-3590-89f4-cdcee08adef5.roa (raw, json) Hash identifier: wgh5ZajYec9H0u1U7cIo6ots0XHyFwQ+xZoVjFhYyuA= Subject key identifier: 79:90:13:E7:71:DB:00:5C:44:1F:92:ED:40:3A:85:7D:2E:8B:3C:D1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6F2738ADF357B8B254880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f2:73:8a:df:35:7b:8b:25:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=58361bfa-4fea-4924-ae7c-aae08a3ef56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:1d:fb:62:e3:74:41:d1:c4:9c:cb:7e:2a: 79:27:f6:0c:a0:20:4c:0b:5d:89:44:4d:90:a5:42: a0:71:80:91:a2:4e:84:e6:a0:92:5d:18:43:55:47: c1:4c:67:74:ee:38:88:c0:5e:cc:17:32:91:e7:36: 71:a2:69:5e:b9:0a:c6:c8:9c:d4:56:21:ea:6c:5a: 9a:ce:88:47:13:d3:72:cc:07:8a:74:35:91:57:4a: b1:24:57:2a:fc:b4:09:aa:28:ca:9e:cd:95:a6:56: 25:df:6f:dc:e2:1c:10:8e:1f:0f:72:16:db:1e:03: 09:37:5a:84:99:58:ba:3e:d1:d3:2e:d3:17:e8:90: cf:dc:34:1a:37:8e:80:e5:a9:ec:1d:a9:65:00:8d: c4:b0:ec:e0:f3:9e:f3:38:07:8a:a4:9c:c0:66:88: b8:fc:ad:5c:2a:b9:ea:e2:7f:7d:7c:03:e0:bb:54: 14:ab:ce:a9:ba:2d:32:b1:e5:c6:bf:91:41:f2:c0: 9c:92:9f:b7:71:76:e3:76:ce:9e:d1:b0:31:48:d7: 82:a2:ac:6f:1c:b0:43:b7:c5:d4:27:ac:02:44:f6: 42:43:14:3c:fa:4b:9b:f2:16:30:ef:cd:1a:18:ff: 0d:f3:14:94:96:a6:76:24:20:7e:0f:ab:af:18:84: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:90:13:E7:71:DB:00:5C:44:1F:92:ED:40:3A:85:7D:2E:8B:3C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:08:45:4f:90:74:36:32:4c:50:b9:bf:dd:ce:d4:4d:35:c9: 2a:4f:93:fe:49:66:a3:f4:21:94:03:cd:37:06:01:d6:9f:03: a3:d3:56:38:8f:74:a9:4c:c1:0b:85:03:5e:a0:26:5d:af:c2: 47:01:5f:9d:df:57:27:29:4e:bb:3c:b9:ed:e5:8f:f3:10:07: f0:35:8f:a8:5f:4b:ea:c0:28:4d:82:bd:d1:13:76:f2:a3:50: bb:0e:0b:fe:4f:69:55:3a:2f:60:aa:36:52:bc:bf:b3:6b:c9: b6:3d:d6:c4:01:ee:60:32:a6:2b:3b:1b:97:87:b3:d0:9b:f3: 92:ec:2a:18:42:85:25:8d:c3:d2:eb:27:21:ae:70:db:a7:23: 4f:5e:3f:7e:f1:ec:c0:07:fa:9a:af:1a:0f:d5:91:62:91:cc: 50:8e:c8:47:c2:dd:ea:21:04:68:35:71:62:77:a4:21:01:dc: 11:3d:b9:3e:71:5f:ef:56:c6:20:4d:9e:3a:2a:3a:b1:25:da: 90:1a:33:33:51:42:b7:83:75:d8:37:1e:bd:68:0b:cc:13:3b: dc:6c:65:3c:d0:59:6d:6f:99:84:4a:6e:aa:d4:0a:71:46:a5: 5a:2c:8b:ef:c3:20:07:4d:d0:77:38:75:61:97:e2:d0:60:2e: a1:95:7f:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1vJzit81e4slSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTgzNjFiZmEtNGZlYS00OTI0LWFlN2MtYWFlMDhhM2VmNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0cd+2LjdEHRxJzLfip5J/YMoCBMC12JRE2Q pUKgcYCRok6E5qCSXRhDVUfBTGd07jiIwF7MFzKR5zZxomleuQrGyJzUViHqbFqa zohHE9NyzAeKdDWRV0qxJFcq/LQJqijKns2VplYl32/c4hwQjh8PchbbHgMJN1qE mVi6PtHTLtMX6JDP3DQaN46A5ansHallAI3EsOzg857zOAeKpJzAZoi4/K1cKrnq 4n99fAPgu1QUq86pui0yseXGv5FB8sCckp+3cXbjds6e0bAxSNeCoqxvHLBDt8XU J6wCRPZCQxQ8+kub8hYw780aGP8N8xSUlqZ2JCB+D6uvGIQZzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHmQE+dx2wBcRB+S7UA6hX0uizzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzA5MGIzYjgtODYwYy0z NTkwLTg5ZjQtY2RjZWUwOGFkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMIRU+QdDYyTFC5v93O1E01ySpPk/5JZqP0IZQDzTcGAdafA6PT VjiPdKlMwQuFA16gJl2vwkcBX53fVycpTrs8ue3lj/MQB/A1j6hfS+rAKE2CvdET dvKjULsOC/5PaVU6L2CqNlK8v7NrybY91sQB7mAypis7G5eHs9Cb85LsKhhChSWN w9LrJyGucNunI09eP37x7MAH+pqvGg/VkWKRzFCOyEfC3eohBGg1cWJ3pCEB3BE9 uT5xX+9WxiBNnjoqOrEl2pAaMzNRQreDddg3Hr1oC8wTO9xsZTzQWW1vmYRKbqrU CnFGpVosi+/DIAdN0Hc4dWGX4tBgLqGVf3c= -----END CERTIFICATE-----Generated at Mon Apr 7 14:13:46 2025 by rpki-client