$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa File: 0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa (raw, json) Hash identifier: Wocqi88aU7h2cKnmEnMFwlwNHcctVVrZhqwpIno3/jY= Subject key identifier: 28:E9:46:CC:D1:0D:F1:10:90:55:46:72:10:A8:87:2E:07:22:4A:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7ACB8D7BAF7EE003D16880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa Signing time: Thu 19 Jun 2025 14:48:18 +0000 ROA not before: Thu 19 Jun 2025 14:48:18 +0000 ROA not after: Wed 17 Sep 2025 14:48:18 +0000 asID: 22773 IP address blocks: 2600:8800:8e3c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:cb:8d:7b:af:7e:e0:03:d1:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:48:18 2025 GMT Not After : Sep 17 14:48:18 2025 GMT Subject: CN=1fc94a66-db51-4485-9d2f-45fb44161739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:ed:42:67:fc:4d:b8:65:29:d3:c3:4f:30: 18:21:87:60:34:d7:fa:9b:92:f4:20:00:19:ed:19: 83:ea:58:6c:43:c6:6b:f6:cb:39:e9:f3:9e:6b:1b: 66:2d:2b:c7:0d:3a:b7:58:b2:12:ae:33:04:f7:e9: 71:66:9a:05:0d:ec:16:0f:0d:ca:87:c6:05:26:03: 20:aa:be:ae:d0:3b:06:ca:9c:e6:66:8e:db:90:46: d3:53:a0:15:8d:cb:ec:cd:17:49:c0:75:8d:63:f8: 27:8f:b9:c8:9c:ad:4a:6f:32:98:93:6a:de:aa:60: 6d:57:5e:86:4c:5e:45:53:42:d6:b2:7a:6e:28:ab: 65:87:36:dd:17:bc:d2:63:11:5c:b5:26:74:17:d2: 92:bb:ee:78:8f:ca:a2:1f:1a:29:29:db:45:26:50: 12:d6:32:0d:b9:37:60:b7:22:a0:d7:94:fd:bf:34: ee:6a:b5:7e:7e:cd:c7:bc:5a:6a:5e:69:33:0f:f8: cc:26:18:33:d5:22:ff:2b:05:12:45:39:2f:4e:40: 49:bc:1f:70:ca:0b:5e:d2:9b:1f:44:ed:60:41:0f: bc:da:13:06:83:80:98:a3:b7:0e:8d:9f:d0:be:78: d7:c8:cd:c3:eb:c1:11:95:54:49:d2:63:83:b8:88: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:46:CC:D1:0D:F1:10:90:55:46:72:10:A8:87:2E:07:22:4A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8e3c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6a:b3:eb:0b:45:e5:6e:c0:58:c2:c3:6b:c6:21:f8:70:6f: e8:91:26:e3:96:03:14:52:d5:18:76:14:73:90:e9:0a:92:21: 91:aa:51:dd:4b:48:e7:8a:09:7a:f4:f2:31:de:66:cb:83:62: 9d:15:f5:a2:91:49:e2:77:8b:a5:ea:6d:a1:1d:cb:18:87:8a: ad:0a:44:7d:25:3a:ff:59:d6:68:21:72:b6:49:8c:cc:b4:25: b7:24:18:58:a6:c0:fd:77:e1:b2:6c:d9:4a:36:c5:21:85:50: e3:e9:4f:32:63:ad:47:dd:07:2b:0c:4e:f9:ae:51:00:4a:6c: 83:8f:22:d8:ad:75:70:70:88:93:93:83:68:6e:8c:e0:ff:78: 59:e1:85:aa:ce:21:3d:ec:70:a7:63:04:f4:14:81:7a:3d:10: 40:da:a6:25:57:33:ce:a3:ed:88:b9:5b:ae:a0:38:00:da:2b: 27:8b:1a:a2:9f:b7:ca:a5:0e:47:bd:40:24:f3:ca:5a:3d:d7: ca:8a:21:db:22:6f:86:aa:11:8c:11:1d:e8:97:b8:26:2f:38: 81:d9:a7:b7:a5:58:9a:b8:2d:e7:8a:ad:5f:03:1f:09:04:20: 56:72:91:1c:41:6b:d8:33:22:24:c1:e1:e7:de:d4:13:cc:7f: 37:44:cd:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+esuNe69+4APRaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDgxOFoXDTI1MDkxNzE0NDgxOFowLzEtMCsGA1UEAxMk MWZjOTRhNjYtZGI1MS00NDg1LTlkMmYtNDVmYjQ0MTYxNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ntQmf8TbhlKdPDTzAYIYdgNNf6m5L0IAAZ 7RmD6lhsQ8Zr9ss56fOeaxtmLSvHDTq3WLISrjME9+lxZpoFDewWDw3Kh8YFJgMg qr6u0DsGypzmZo7bkEbTU6AVjcvszRdJwHWNY/gnj7nInK1KbzKYk2reqmBtV16G TF5FU0LWsnpuKKtlhzbdF7zSYxFctSZ0F9KSu+54j8qiHxopKdtFJlAS1jINuTdg tyKg15T9vzTuarV+fs3HvFpqXmkzD/jMJhgz1SL/KwUSRTkvTkBJvB9wygte0psf RO1gQQ+82hMGg4CYo7cOjZ/QvnjXyM3D68ERlVRJ0mODuIjXCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCjpRszRDfEQkFVGchCohy4HIkoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGIxYTE2MDgtN2UwYS0z YjZmLTk4MTUtODlmZTc0OGY3YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAI48 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKZqs+sLReVuwFjCw2vGIfhwb+iRJuOWAxRS1Rh2FHOQ6QqSIZGq Ud1LSOeKCXr08jHeZsuDYp0V9aKRSeJ3i6XqbaEdyxiHiq0KRH0lOv9Z1mghcrZJ jMy0JbckGFimwP134bJs2Uo2xSGFUOPpTzJjrUfdBysMTvmuUQBKbIOPItitdXBw iJOTg2hujOD/eFnhharOIT3scKdjBPQUgXo9EEDapiVXM86j7Yi5W66gOADaKyeL GqKft8qlDke9QCTzylo918qKIdsib4aqEYwRHeiXuCYvOIHZp7elWJq4LeeKrV8D HwkEIFZykRxBa9gzIiTB4efe1BPMfzdEzdg= -----END CERTIFICATE-----Generated at Tue Jul 1 21:18:36 2025 by rpki-client