$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4de2f01-f405-37af-9b63-a55577b0f500.roa File: f4de2f01-f405-37af-9b63-a55577b0f500.roa (raw, json) Hash identifier: sIyQTPcwOWZbQiSzpanBEhZ5Hzl2KcpaPK700CTIMxY= Subject key identifier: 1F:3F:46:60:FF:1F:D4:8C:01:D2:F0:08:70:8F:B1:76:28:F4:A7:5D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584A4E3CB5D676C63B6C26820A00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4de2f01-f405-37af-9b63-a55577b0f500.roa Signing time: Wed 25 Jun 2025 06:16:08 +0000 ROA not before: Wed 25 Jun 2025 06:16:08 +0000 ROA not after: Tue 23 Sep 2025 06:16:08 +0000 asID: 16839 IP address blocks: 2606:3600:156::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4e:3c:b5:d6:76:c6:3b:6c:26:82:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 25 06:16:08 2025 GMT Not After : Sep 23 06:16:08 2025 GMT Subject: CN=36a34b19-7034-443a-a837-399c1bdbb89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:63:22:e6:55:5c:3e:ad:f9:cb:f2:00:4a: 06:b1:5c:ff:ac:e3:de:a9:00:20:a4:29:d6:30:46: 9b:e6:88:36:bd:c4:bf:35:41:74:5f:5d:51:df:80: ca:c1:e6:34:aa:46:02:31:b5:bd:dd:9b:cb:a7:f0: 19:e8:d9:95:e0:cc:9c:9f:29:45:eb:8c:5b:a1:24: cc:ec:40:84:0f:e4:a3:48:82:34:01:17:c3:bb:46: 35:eb:9f:bd:c0:3e:c7:57:de:38:ba:6e:3b:37:0a: d9:83:36:4c:ce:be:75:9a:a5:7d:64:0c:2a:70:4a: 91:7e:b1:f1:52:95:0f:61:b4:c8:a2:0f:5a:12:65: 68:31:e4:a2:27:38:aa:08:58:be:e0:ba:02:40:70: e9:40:28:5c:3c:61:a6:4f:5b:4d:d9:cb:2f:db:a5: 15:2f:6b:b6:32:86:ee:0c:d8:ac:e6:bd:2d:e2:98: eb:67:7b:25:07:25:87:47:d7:c6:ed:1c:a8:87:9e: fb:29:dd:7f:cd:2b:6d:41:a2:30:d0:a1:d2:72:33: 6b:36:d3:19:7d:5a:7a:19:61:e4:21:13:9c:35:09: 58:9e:16:91:32:ca:d9:2a:2d:f4:94:cf:ff:e5:65: d1:7b:f2:72:27:89:33:15:d6:93:ef:d1:7c:91:3b: 9b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:46:60:FF:1F:D4:8C:01:D2:F0:08:70:8F:B1:76:28:F4:A7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4de2f01-f405-37af-9b63-a55577b0f500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:156::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:93:c9:93:cc:11:b5:a5:17:cb:76:96:80:41:df:d3:00:8a: ca:9a:e1:83:ac:c7:95:cf:58:af:8c:fa:68:17:4f:ec:36:0b: 1c:9b:b8:a2:6e:ee:0a:93:ed:27:f3:cd:3b:07:09:63:48:8c: 52:d5:bf:64:e2:51:4b:fb:8f:08:ce:06:c5:fe:9b:7e:71:ab: 2a:75:75:71:06:f9:7e:15:c4:d8:43:5e:77:10:74:81:5b:80: ce:99:fa:aa:14:e4:6e:49:54:c2:fa:28:1d:4e:06:b7:29:ff: 26:f3:5a:a7:1e:e7:c4:24:82:b9:d9:5a:8a:df:a7:36:10:c2: 4b:ea:64:6f:8a:18:db:79:e2:bc:55:df:76:0e:ad:28:3c:08: 7a:8c:10:15:0d:70:a6:06:e6:67:12:6d:35:3a:fd:41:db:fa: c3:b9:40:d2:08:39:8e:80:26:5c:ca:75:5d:fc:75:27:33:1e: 8a:c2:66:6c:5a:a3:91:b1:8d:1a:6f:f7:60:a6:54:b1:2a:d2: fc:e2:d2:7a:2a:11:b9:15:88:d9:ed:66:d1:77:9e:1a:f5:3d: d5:d7:d1:ba:f3:e1:83:99:6a:3e:7b:d4:4d:79:df:9a:c6:d3: 02:9f:4d:7c:f1:eb:dc:75:56:17:92:55:67:b2:61:fb:39:0c: 89:66:e7:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpOPLXWdsY7bCaCCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDYyNTA2MTYwOFoXDTI1MDkyMzA2MTYwOFowLzEtMCsGA1UEAxMk MzZhMzRiMTktNzAzNC00NDNhLWE4MzctMzk5YzFiZGJiODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo45jIuZVXD6t+cvyAEoGsVz/rOPeqQAgpCnW MEab5og2vcS/NUF0X11R34DKweY0qkYCMbW93ZvLp/AZ6NmV4MycnylF64xboSTM 7ECED+SjSII0ARfDu0Y165+9wD7HV944um47NwrZgzZMzr51mqV9ZAwqcEqRfrHx UpUPYbTIog9aEmVoMeSiJziqCFi+4LoCQHDpQChcPGGmT1tN2csv26UVL2u2Mobu DNis5r0t4pjrZ3slByWHR9fG7Ryoh577Kd1/zSttQaIw0KHScjNrNtMZfVp6GWHk IROcNQlYnhaRMsrZKi30lM//5WXRe/JyJ4kzFdaT79F8kTub7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB8/RmD/H9SMAdLwCHCPsXYo9KddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjRkZTJmMDEtZjQwNS0z N2FmLTliNjMtYTU1NTc3YjBmNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGTyZPMEbWlF8t2loBB39MAisqa4YOsx5XPWK+M+mgXT+w2Cxyb uKJu7gqT7SfzzTsHCWNIjFLVv2TiUUv7jwjOBsX+m35xqyp1dXEG+X4VxNhDXncQ dIFbgM6Z+qoU5G5JVML6KB1OBrcp/ybzWqce58QkgrnZWorfpzYQwkvqZG+KGNt5 4rxV33YOrSg8CHqMEBUNcKYG5mcSbTU6/UHb+sO5QNIIOY6AJlzKdV38dSczHorC Zmxao5GxjRpv92CmVLEq0vzi0noqEbkViNntZtF3nhr1PdXX0brz4YOZaj571E15 35rG0wKfTXzx69x1VheSVWeyYfs5DIlm5+A= -----END CERTIFICATE-----Generated at Sun Jul 20 14:24:55 2025 by rpki-client