$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: xTeyLA0qNKr7Rb8zQoehFppxOD7WwNpfGZTlhoZOesM= Subject key identifier: 50:8A:AE:16:6A:3B:05:20:0D:71:70:EC:6E:C6:28:05:31:2C:10:9C Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F43285849F71513FDBA88730F6FE56B80 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:13:fd:ba:88:73:0f:6f:e5:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=a03ad8c3-4db1-4465-b6e0-575565924abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:2d:0c:41:f6:28:4c:2b:79:75:33:e2:8f: 31:7d:9c:d1:0e:e4:80:70:a3:3e:37:a5:cb:d3:9e: 55:71:99:1f:ab:3d:89:76:7f:44:b6:00:ec:86:2e: ab:74:33:cc:d2:e6:93:c7:19:37:b6:21:38:be:b6: c7:67:c1:d5:b8:84:19:bd:7b:53:7c:29:52:40:09: 6c:c3:72:cb:61:d7:cb:45:ee:16:3b:8e:06:e2:46: 92:02:6c:13:fd:07:eb:71:d4:21:a9:ea:0b:cd:1e: a5:39:1c:59:48:c7:93:53:8d:06:d0:c3:25:33:85: a8:01:de:c4:fb:d7:55:30:f9:ed:ad:e2:18:56:d6: 03:75:73:d2:4e:a7:c3:86:90:6b:89:fd:53:ac:66: 5e:26:05:e3:56:98:2e:30:2c:cf:76:8f:71:a1:4c: a5:af:3f:3f:58:6f:99:76:29:13:21:0a:e3:34:6a: 4e:57:7c:03:c8:6d:c5:64:05:84:2d:32:b1:94:e9: 1f:2a:0a:43:25:be:b5:66:d7:9d:1d:21:34:05:e0: 86:be:2b:4f:56:b0:5d:58:0b:bc:f2:42:7c:35:e9: bd:5d:01:49:7e:f0:57:b6:68:ef:90:47:e0:2d:66: 1d:98:88:29:e9:67:36:0e:6f:fe:d4:ed:41:31:ee: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:AE:16:6A:3B:05:20:0D:71:70:EC:6E:C6:28:05:31:2C:10:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:20:08:3f:6b:0f:3f:4d:64:f3:2f:91:25:7d:e2:03:c7:40: 52:bb:d4:52:86:d7:3c:64:4c:62:2a:ae:ba:64:b2:b3:39:0c: b1:c6:40:d6:8d:4c:e3:7b:50:b8:7c:e6:fd:5b:ec:d0:92:af: a3:31:8a:f1:25:01:d4:40:f8:ce:dc:00:50:fc:70:ad:cd:44: d5:8b:28:b4:8a:ec:48:db:7c:a1:f4:96:08:07:4e:c9:dd:3a: ce:e8:c1:a0:c9:5e:cd:91:75:0d:ae:5c:8f:31:73:d7:32:01: 19:5c:a9:d0:eb:98:a8:53:41:ce:5b:14:27:a0:84:88:86:bc: d8:61:76:b2:5d:70:99:a7:d0:88:b3:c4:3a:b7:c2:b7:4b:8d: 55:a8:c6:c7:21:d8:5f:8a:71:b3:6d:82:16:53:65:21:57:13: 16:30:c1:85:6c:00:e2:9b:69:a8:37:b1:0e:ed:4b:bd:11:40: 88:1f:59:f9:79:87:af:fe:32:d0:1b:10:6d:ba:a1:da:b7:71: 82:11:65:9c:5a:83:57:9b:8a:0e:a8:ea:c2:4b:8d:9c:d3:77: be:80:5b:a3:38:03:59:f2:24:21:85:4d:40:44:52:6e:b6:46: 92:6a:83:34:04:90:0f:fc:3f:68:e6:70:f9:8a:32:51:d0:bf: 98:20:72:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FRP9uohzD2/la4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTAzYWQ4YzMtNGRiMS00NDY1LWI2ZTAtNTc1NTY1OTI0YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgctDEH2KEwreXUz4o8xfZzRDuSAcKM+N6XL 055VcZkfqz2Jdn9EtgDshi6rdDPM0uaTxxk3tiE4vrbHZ8HVuIQZvXtTfClSQAls w3LLYdfLRe4WO44G4kaSAmwT/QfrcdQhqeoLzR6lORxZSMeTU40G0MMlM4WoAd7E +9dVMPntreIYVtYDdXPSTqfDhpBrif1TrGZeJgXjVpguMCzPdo9xoUylrz8/WG+Z dikTIQrjNGpOV3wDyG3FZAWELTKxlOkfKgpDJb61ZtedHSE0BeCGvitPVrBdWAu8 8kJ8Nem9XQFJfvBXtmjvkEfgLWYdmIgp6Wc2Dm/+1O1BMe5+GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFCKrhZqOwUgDXFw7G7GKAUxLBCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkIAg/aw8/TWTzL5ElfeIDx0BSu9RShtc8ZExiKq66ZLKzOQyxxkDW jUzje1C4fOb9W+zQkq+jMYrxJQHUQPjO3ABQ/HCtzUTViyi0iuxI23yh9JYIB07J 3TrO6MGgyV7NkXUNrlyPMXPXMgEZXKnQ65ioU0HOWxQnoISIhrzYYXayXXCZp9CI s8Q6t8K3S41VqMbHIdhfinGzbYIWU2UhVxMWMMGFbADim2moN7EO7Uu9EUCIH1n5 eYev/jLQGxBtuqHat3GCEWWcWoNXm4oOqOrCS42c03e+gFujOANZ8iQhhU1ARFJu tkaSaoM0BJAP/D9o5nD5ijJR0L+YIHJi -----END CERTIFICATE-----Generated at Mon Jun 9 06:02:01 2025 by rpki-client