$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa File: c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa (raw, json) Hash identifier: 1ImzA7RA7aUcrzw6p6GrnAhSKcQDGWyHH07biAX4kY8= Subject key identifier: 3C:9B:17:CA:30:36:6D:78:61:85:60:DC:2E:76:B4:BE:0D:40:F9:4F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCD5A1CA74C35DEAF94B0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 2606:3600:115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cd:5a:1c:a7:4c:35:de:af:94:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=0a8d550d-8cbd-4280-b863-6b1b7b1913f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:a4:69:25:8b:fb:2a:cb:d0:de:df:a4:28: 5b:c2:03:00:01:89:01:c8:f0:81:2b:a1:56:7f:ad: 81:5a:cd:98:39:29:d4:d6:73:c0:8b:57:0c:ab:d2: 1f:aa:1e:93:ce:5e:17:a4:e4:c9:70:9f:bf:15:80: 33:75:ab:85:ad:b3:2c:cb:e7:1a:71:c6:59:8f:71: 56:06:71:04:4e:9d:45:91:5c:5f:e7:5e:89:a3:a5: 44:c8:31:7f:d7:16:d1:da:8b:d4:68:54:b0:e7:c2: 75:d2:55:df:8c:15:ae:13:4f:3d:77:9d:8f:d2:39: 95:2f:bf:a7:eb:ee:84:4d:13:17:dd:10:f4:7e:75: 5c:72:48:e0:0e:2c:30:22:ec:53:77:4a:56:56:a9: e0:95:a3:1d:ef:62:27:39:f3:e4:3c:6a:63:23:21: 61:a7:53:e2:ab:77:25:81:07:b1:a7:e2:37:66:7f: ca:f6:97:e7:26:e2:a2:c3:ac:ed:2f:2c:e1:29:42: d7:65:48:83:de:97:a3:e2:67:2e:64:85:a0:2a:5f: b0:08:92:e0:eb:a5:b5:ef:fd:37:96:5a:49:aa:13: 1f:e2:50:5f:12:92:17:7a:3b:40:7c:2f:2b:9b:b5: e2:c1:f2:92:47:ac:72:f2:ab:d7:97:b6:07:c9:9c: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9B:17:CA:30:36:6D:78:61:85:60:DC:2E:76:B4:BE:0D:40:F9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:115::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ff:0a:2b:57:6a:b5:8b:03:93:11:ce:75:95:20:41:45:eb: 9b:76:cf:31:24:a5:61:44:f9:25:d9:38:a8:da:71:fc:2d:9a: c3:45:6d:1b:e6:f6:22:ac:42:a5:eb:b5:9f:bd:6b:4b:16:36: a0:f7:d4:2d:96:ba:59:2f:05:e3:2a:98:bf:86:d0:bd:6b:cb: d9:20:c7:db:83:77:b9:91:ba:1b:42:29:8e:d3:9f:46:50:67: 3f:86:e2:c3:23:95:50:ba:75:0f:fb:e6:bd:7e:6e:77:01:b8: 5b:48:53:8e:3e:a4:83:7c:4b:54:ad:83:68:36:56:68:13:87: 72:85:31:35:e2:14:e5:76:7f:dd:79:d8:e2:96:1d:8f:9c:b8: a3:e2:c7:3d:4e:c3:7f:4f:e1:21:5b:6f:d1:a1:e3:db:30:69: 69:8c:c5:19:3f:8e:83:6c:33:c0:d2:d9:de:c0:46:8b:d5:b7: 4c:e1:b1:3c:06:44:5c:4b:d1:cf:47:aa:77:e6:2e:3b:58:c0: e7:06:34:95:1d:02:3b:ce:f0:86:e2:d7:f2:f2:eb:0e:d8:9d: 43:f5:18:49:a3:42:b2:59:e9:39:47:9d:01:66:3d:ec:a3:ac: 92:06:55:f4:ca:6e:c5:1b:78:4b:47:82:97:28:ab:8e:f0:81: a8:27:bb:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey81aHKdMNd6vlLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MGE4ZDU1MGQtOGNiZC00MjgwLWI4NjMtNmIxYjdiMTkxM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM+kaSWL+yrL0N7fpChbwgMAAYkByPCBK6FW f62BWs2YOSnU1nPAi1cMq9Ifqh6Tzl4XpOTJcJ+/FYAzdauFrbMsy+caccZZj3FW BnEETp1FkVxf516Jo6VEyDF/1xbR2ovUaFSw58J10lXfjBWuE089d52P0jmVL7+n 6+6ETRMX3RD0fnVcckjgDiwwIuxTd0pWVqnglaMd72InOfPkPGpjIyFhp1Piq3cl gQexp+I3Zn/K9pfnJuKiw6ztLyzhKULXZUiD3pej4mcuZIWgKl+wCJLg66W17/03 llpJqhMf4lBfEpIXejtAfC8rm7XiwfKSR6xy8qvXl7YHyZxn2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDybF8owNm14YYVg3C52tL4NQPlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzczZGIxMzctYTIwMy0z YTQzLWI1YTctNjA1MWMwZTlkZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE//CitXarWLA5MRznWVIEFF65t2zzEkpWFE+SXZOKjacfwtmsNF bRvm9iKsQqXrtZ+9a0sWNqD31C2WulkvBeMqmL+G0L1ry9kgx9uDd7mRuhtCKY7T n0ZQZz+G4sMjlVC6dQ/75r1+bncBuFtIU44+pIN8S1Stg2g2VmgTh3KFMTXiFOV2 f9152OKWHY+cuKPixz1Ow39P4SFbb9Gh49swaWmMxRk/joNsM8DS2d7ARovVt0zh sTwGRFxL0c9HqnfmLjtYwOcGNJUdAjvO8Ibi1/Ly6w7YnUP1GEmjQrJZ6TlHnQFm PeyjrJIGVfTKbsUbeEtHgpcoq47wgagnu2Q= -----END CERTIFICATE-----Generated at Sun Nov 2 22:53:46 2025 by rpki-client