$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa File: 350e89e8-f525-316a-9d14-11c96a99c5a0.roa (raw, json) Hash identifier: F0UNCT+C6ZNOlgBl9o0xWJ/ogAFRVdgD1yyFfHpVDxI= Subject key identifier: 3D:93:74:D3:85:19:16:58:86:24:12:10:55:6D:F8:74:6A:A9:49:5E Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F43285849DC8FC8020986E4D3E3332080 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 63145 IP address blocks: 2606:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c8:02:09:86:e4:d3:e3:33:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=601a3b02-6981-4150-afc4-ca80aa4ffa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:fb:9f:2f:d7:e4:bc:0e:2f:7e:e4:15:a4: 62:9d:a4:fb:43:37:16:9e:37:95:51:ff:9e:49:70: 48:fb:5f:20:39:9d:54:2d:76:73:5b:31:7f:c6:14: ad:fc:3d:20:cc:1a:d1:6a:f2:ec:d6:d3:f8:43:1d: 32:28:02:e6:5a:f8:14:d1:4c:86:df:98:fd:5d:6e: 22:aa:85:f3:94:7e:59:45:4a:52:3b:a7:8e:8b:31: 4c:6c:a4:e5:d4:28:90:0c:e6:45:30:71:93:8f:ba: b5:4d:b1:8c:9c:ff:eb:ae:8a:66:0d:a4:85:02:c5: c5:1a:09:f2:e4:9b:5b:ed:b7:47:70:3e:b7:e9:47: e3:0d:ea:a1:e2:35:cc:65:a9:f2:9e:e5:9f:d2:72: 56:44:50:0b:02:57:c0:5e:ac:d8:34:34:9e:a4:7b: e5:8c:03:a4:19:34:db:12:45:c2:9f:de:da:51:02: 05:ae:c4:5c:73:12:d4:79:4f:98:e4:e7:7e:54:6b: b7:64:16:e5:55:43:68:6c:52:36:82:34:58:25:32: bc:b9:7e:ba:d0:c9:9c:02:84:8a:81:c0:ee:8f:71: 7f:ff:c2:16:b0:55:46:c1:72:8b:c2:0f:c2:a0:42: da:fa:1d:d6:1b:7e:cd:c5:0c:92:96:01:47:b7:12: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:93:74:D3:85:19:16:58:86:24:12:10:55:6D:F8:74:6A:A9:49:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv6: 2606:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:37:30:99:d9:55:89:3b:1a:db:f2:84:9c:9e:3f:c8:90:1b: 49:d4:37:6c:44:86:5c:8f:1f:a0:58:68:43:9b:f6:43:33:73: d2:75:14:a4:f3:2b:96:20:64:bb:89:5d:b2:d6:2a:ee:85:f1: 95:0b:bd:d0:da:b1:ed:d3:dc:cd:ce:1e:9f:57:e8:0b:25:a0: 5c:ee:64:28:8b:2b:fe:07:c9:f1:62:9e:f0:a0:3a:44:b8:bd: 1f:ea:7d:94:c1:69:1a:47:0e:49:ea:5a:9e:9b:c4:2d:96:87: cc:86:e0:bf:d7:26:26:23:6e:58:9a:88:de:93:6a:1f:5e:9a: 75:41:c5:e1:9e:98:f9:9e:16:5d:0a:f4:c8:7b:13:33:54:e7: 55:49:3c:6a:a3:4c:2b:fe:87:1f:0c:fb:ee:9e:84:7b:05:cf: 21:d7:50:4a:4e:bb:59:7a:87:ff:5d:9a:26:1f:58:cb:6b:c4: e0:aa:6c:16:e2:1f:5d:c1:9f:d8:14:ea:b4:13:b6:4e:8a:fb: 04:9c:1e:32:66:56:b5:1f:a6:e5:40:ad:88:6b:9c:92:fe:c6: 07:d1:5d:02:53:29:08:1a:fc:6c:a5:6a:5e:57:ce:74:e8:2d: e9:76:91:a4:e8:a3:fe:d8:f9:02:35:06:56:66:29:dc:c6:95: ca:42:06:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEncj8gCCYbk0+MzIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NjAxYTNiMDItNjk4MS00MTUwLWFmYzQtY2E4MGFhNGZmYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX77ny/X5LwOL37kFaRinaT7QzcWnjeVUf+e SXBI+18gOZ1ULXZzWzF/xhSt/D0gzBrRavLs1tP4Qx0yKALmWvgU0UyG35j9XW4i qoXzlH5ZRUpSO6eOizFMbKTl1CiQDOZFMHGTj7q1TbGMnP/rropmDaSFAsXFGgny 5Jtb7bdHcD636UfjDeqh4jXMZanynuWf0nJWRFALAlfAXqzYNDSepHvljAOkGTTb EkXCn97aUQIFrsRccxLUeU+Y5Od+VGu3ZBblVUNobFI2gjRYJTK8uX660MmcAoSK gcDuj3F//8IWsFVGwXKLwg/CoELa+h3WG37NxQySlgFHtxKSgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD2TdNOFGRZYhiQSEFVt+HRqqUleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMzUwZTg5ZTgtZjUyNS0z MTZhLTlkMTQtMTFjOTZhOTljNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgauQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8NzCZ2VWJOxrb8oScnj/IkBtJ1DdsRIZcjx+gWGhDm/ZDM3PSdRSk 8yuWIGS7iV2y1iruhfGVC73Q2rHt09zNzh6fV+gLJaBc7mQoiyv+B8nxYp7woDpE uL0f6n2UwWkaRw5J6lqem8QtlofMhuC/1yYmI25Ymojek2ofXpp1QcXhnpj5nhZd CvTIexMzVOdVSTxqo0wr/ocfDPvunoR7Bc8h11BKTrtZeof/XZomH1jLa8TgqmwW 4h9dwZ/YFOq0E7ZOivsEnB4yZla1H6blQK2Ia5yS/sYH0V0CUykIGvxspWpeV850 6C3pdpGk6KP+2PkCNQZWZincxpXKQgae -----END CERTIFICATE-----Generated at Tue Jul 1 19:56:01 2025 by rpki-client