$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa File: c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa (raw, json) Hash identifier: ENXZStfasRbNqxqwgeXVs6MwZ70yWtuOgO4EtTNVzqg= Subject key identifier: 76:6B:68:DB:C0:B6:54:99:1F:33:AE:37:37:7A:85:BD:29:88:B0:1C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6F263435810277CFCA2C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f2:63:43:58:10:27:7c:fc:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=63c14754-d1fb-4444-aac6-0ed7eafe3537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:ae:11:e7:ab:0d:cf:93:18:a9:b2:ae:60: ef:98:b5:cd:6a:4b:80:5e:ba:64:cc:1b:ab:2c:0a: 83:ff:3a:cf:da:6a:6e:87:3c:ca:5f:a1:0d:0f:6d: de:05:25:18:29:25:c9:d2:53:b5:0d:25:fa:ee:f8: 33:d1:47:ba:0d:cb:0f:94:3a:bb:94:cd:22:c0:64: 09:c3:ef:55:9e:e5:d9:4f:fa:2d:c7:f8:89:62:ae: 9b:d3:47:ec:a4:00:37:5c:f3:c7:79:06:3f:dc:21: cb:e5:d5:88:cd:ad:fd:a7:b2:53:38:db:d8:f2:56: 2a:41:52:94:82:b4:25:74:7f:17:eb:92:32:9f:af: 80:d4:58:da:67:9e:07:76:4a:f8:9c:8c:e1:9f:09: 77:37:2b:1e:e5:b1:26:88:ab:ef:9b:32:89:c9:2f: 07:ca:68:c4:4d:8d:da:98:ba:c2:cd:e2:34:6c:a7: 0b:a7:a8:97:cb:be:05:ad:a8:bf:0e:71:ce:cf:c3: 9b:f8:09:a6:66:fb:6c:98:f4:9a:cf:9b:d6:51:9c: 1a:4b:41:2f:bd:85:82:8d:3d:fe:f5:d3:a2:46:28: 77:cc:99:c2:28:4f:b6:d8:ab:07:d3:cb:e1:a6:4f: 47:bc:93:e9:27:bb:bd:51:ba:9b:92:02:d9:91:2d: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6B:68:DB:C0:B6:54:99:1F:33:AE:37:37:7A:85:BD:29:88:B0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:115::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ef:e4:f4:f4:ba:85:14:13:b2:2a:18:d6:0c:0b:52:62:3b: 29:fc:e0:9a:22:49:40:1a:b9:3e:88:01:eb:c4:cb:1a:3e:75: c8:c9:a5:2c:7c:41:08:20:34:b0:7a:d4:37:f7:50:0e:70:c1: e5:05:6a:b4:f6:f8:a4:be:f5:d3:51:05:22:f0:74:fd:1f:2a: ef:e6:1c:44:26:3e:5c:99:ef:88:78:ab:92:b9:f5:be:13:84: 86:6a:e9:07:ad:86:02:75:36:cf:93:5a:24:59:f3:7e:5d:6e: c0:8a:37:01:1a:5d:d3:f9:f3:c1:4f:1a:df:03:41:44:9b:84: 33:c6:89:fc:3c:9f:51:6b:5f:16:0e:42:1e:95:8e:45:b4:a4: 38:d5:1f:cc:68:d8:4e:b7:7b:af:b8:a5:f3:1f:81:ab:5f:f2: 08:a5:2d:13:5e:94:fb:75:07:12:a8:46:23:93:1e:4e:63:be: ff:58:68:3f:b9:d8:2b:a1:17:82:2d:25:ae:57:f0:30:92:4a: 11:b8:0c:40:ee:3a:91:5c:94:fb:9e:ae:05:45:e6:aa:20:b6: 16:9f:3c:5c:dd:91:e0:19:26:4c:ed:7e:68:6a:f2:a6:24:b1: 95:0e:a0:d8:f9:e9:9f:dc:35:8f:ae:3f:aa:37:93:7e:c5:16: f4:88:7d:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1vJjQ1gQJ3z8osAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NjNjMTQ3NTQtZDFmYi00NDQ0LWFhYzYtMGVkN2VhZmUzNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfuuEeerDc+TGKmyrmDvmLXNakuAXrpkzBur LAqD/zrP2mpuhzzKX6END23eBSUYKSXJ0lO1DSX67vgz0Ue6DcsPlDq7lM0iwGQJ w+9VnuXZT/otx/iJYq6b00fspAA3XPPHeQY/3CHL5dWIza39p7JTONvY8lYqQVKU grQldH8X65Iyn6+A1FjaZ54Hdkr4nIzhnwl3Nyse5bEmiKvvmzKJyS8HymjETY3a mLrCzeI0bKcLp6iXy74Frai/DnHOz8Ob+AmmZvtsmPSaz5vWUZwaS0EvvYWCjT3+ 9dOiRih3zJnCKE+22KsH08vhpk9HvJPpJ7u9UbqbkgLZkS2JyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZraNvAtlSZHzOuNzd6hb0piLAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzczZGIxMzctYTIwMy0z YTQzLWI1YTctNjA1MWMwZTlkZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA7v5PT0uoUUE7IqGNYMC1JiOyn84JoiSUAauT6IAevEyxo+dcjJ pSx8QQggNLB61Df3UA5wweUFarT2+KS+9dNRBSLwdP0fKu/mHEQmPlyZ74h4q5K5 9b4ThIZq6QethgJ1Ns+TWiRZ835dbsCKNwEaXdP588FPGt8DQUSbhDPGifw8n1Fr XxYOQh6VjkW0pDjVH8xo2E63e6+4pfMfgatf8gilLRNelPt1BxKoRiOTHk5jvv9Y aD+52CuhF4ItJa5X8DCSShG4DEDuOpFclPuergVF5qogthafPFzdkeAZJkztfmhq 8qYksZUOoNj56Z/cNY+uP6o3k37FFvSIfRU= -----END CERTIFICATE-----Generated at Mon Apr 7 14:13:48 2025 by rpki-client