$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa File: 732291c2-9541-3833-8b8b-32de6384bc20.roa (raw, json) Hash identifier: oGG1iwRrdrovGLFCeMwEEArvN2MRo23T0TF76bUECKc= Subject key identifier: EE:A1:A3:2F:62:F4:74:5B:B2:53:19:06:F7:74:D9:05:6F:A9:9E:70 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000DF1F53599AD02E7B80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 2606:3600:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:df:1f:53:59:9a:d0:2e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=b397f847-b1d2-405f-a078-2dfae27f1756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:78:eb:08:4b:4d:0e:df:11:2c:20:91:eb: 73:aa:95:87:e9:8f:0e:22:e6:e0:b1:87:cb:dd:e2: 32:c0:cf:e0:06:6c:7e:4a:95:fb:0a:35:77:15:b4: e8:c5:57:0e:25:26:f2:db:e3:92:e0:60:ba:4d:16: 76:25:17:81:4b:7c:84:d5:c6:45:48:34:df:ad:ce: 4c:c2:82:b3:8a:79:bd:42:2d:4b:a0:b9:64:3d:86: 07:7b:f0:be:ce:7d:d6:dc:e6:7d:cc:1d:8e:79:e4: dc:bc:fc:93:34:bc:92:38:f2:35:43:8f:6b:35:5b: 51:48:b4:c9:52:d7:e7:c4:ba:ca:d5:eb:37:62:b9: 19:93:80:dd:2e:80:20:aa:b8:31:8f:0c:c3:3b:c2: ae:38:e6:e8:70:74:14:f3:fd:cc:e7:c9:a8:4b:17: 4d:49:67:0d:f7:d7:47:7d:ed:f7:61:cb:7a:c7:79: 49:84:c4:e9:d7:3d:2a:fa:d8:f5:c5:9a:0a:5b:23: ba:83:b4:45:35:7e:74:47:10:3e:1d:dc:4c:12:5a: aa:1b:2f:c5:7e:60:57:21:7a:a6:d8:18:d7:5f:41: 33:20:21:59:f0:a9:31:20:b0:ed:c2:e4:0e:fe:b1: bc:dc:25:8c:20:72:b7:49:32:24:e8:1f:fb:b8:07: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A1:A3:2F:62:F4:74:5B:B2:53:19:06:F7:74:D9:05:6F:A9:9E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:105::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0c:e4:7d:c5:fc:57:d4:bf:e7:9a:f7:79:36:f0:b2:81:57: 63:93:4c:22:d9:54:13:df:80:d8:8f:d7:84:ae:97:77:a8:ec: 31:c1:21:7f:75:1f:30:6d:7a:d9:6d:eb:fa:f1:53:12:f8:da: 70:ee:7d:3f:79:ca:39:99:12:6e:aa:f0:e2:4a:f4:04:4a:37: cc:55:f2:34:68:53:c5:66:5f:cc:a3:e9:40:34:fd:87:54:e8: f4:93:00:eb:62:c1:50:26:a7:d3:25:11:ef:fe:c6:37:85:57: 63:a5:59:7c:19:45:c8:4d:46:07:c7:b1:51:3f:02:9c:28:34: 54:05:36:b2:23:71:37:e5:d2:94:39:0e:03:01:40:3f:4b:2a: 75:9f:26:34:f4:9d:36:e8:1e:b3:56:4e:60:bb:e4:4b:b8:1e: 81:6c:2d:88:5a:e6:d8:81:57:0e:5f:ac:57:ea:81:e5:51:93: f9:cc:df:f6:93:98:28:c2:d1:db:de:9d:fd:71:9a:f9:3a:90: 8c:5b:5b:18:64:97:b5:c1:f0:2e:86:70:7b:07:7a:21:d4:81: d0:26:17:64:b4:6e:86:58:a0:fd:29:9b:a4:a2:a1:91:f0:9d: 09:5b:15:a4:e9:06:66:a5:70:bc:e5:27:9e:03:cb:2d:29:00: 81:5e:bb:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+EADfH1NZmtAue4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YjM5N2Y4NDctYjFkMi00MDVmLWEwNzgtMmRmYWUyN2YxNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtad46whLTQ7fESwgketzqpWH6Y8OIubgsYfL 3eIywM/gBmx+SpX7CjV3FbToxVcOJSby2+OS4GC6TRZ2JReBS3yE1cZFSDTfrc5M woKzinm9Qi1LoLlkPYYHe/C+zn3W3OZ9zB2OeeTcvPyTNLySOPI1Q49rNVtRSLTJ UtfnxLrK1es3YrkZk4DdLoAgqrgxjwzDO8KuOObocHQU8/3M58moSxdNSWcN99dH fe33Yct6x3lJhMTp1z0q+tj1xZoKWyO6g7RFNX50RxA+HdxMElqqGy/FfmBXIXqm 2BjXX0EzICFZ8KkxILDtwuQO/rG83CWMIHK3STIk6B/7uAcMaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6hoy9i9HRbslMZBvd02QVvqZ5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzMyMjkxYzItOTU0MS0z ODMzLThiOGItMzJkZTYzODRiYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMM5H3F/FfUv+ea93k28LKBV2OTTCLZVBPfgNiP14Sul3eo7DHB IX91HzBtetlt6/rxUxL42nDufT95yjmZEm6q8OJK9ARKN8xV8jRoU8VmX8yj6UA0 /YdU6PSTAOtiwVAmp9MlEe/+xjeFV2OlWXwZRchNRgfHsVE/ApwoNFQFNrIjcTfl 0pQ5DgMBQD9LKnWfJjT0nTboHrNWTmC75Eu4HoFsLYha5tiBVw5frFfqgeVRk/nM 3/aTmCjC0dvenf1xmvk6kIxbWxhkl7XB8C6GcHsHeiHUgdAmF2S0boZYoP0pm6Si oZHwnQlbFaTpBmalcLzlJ54Dyy0pAIFeu3U= -----END CERTIFICATE-----Generated at Sun Jun 8 19:56:51 2025 by rpki-client