$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bb3cace-ebdb-3e86-b900-53259a6de11b.roa File: 1bb3cace-ebdb-3e86-b900-53259a6de11b.roa (raw, json) Hash identifier: WDr3RKcITDImkpNTChVnPkN5BmlxQjs3+gYVOM8QA84= Subject key identifier: 5C:5F:40:EB:E4:03:13:52:5D:C0:B4:06:4B:BB:7E:F7:19:ED:D3:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E79EE542D17D53052243D48 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bb3cace-ebdb-3e86-b900-53259a6de11b.roa Signing time: Thu 19 Jun 2025 14:46:33 +0000 ROA not before: Thu 19 Jun 2025 14:46:33 +0000 ROA not after: Wed 17 Sep 2025 14:46:33 +0000 asID: 22773 IP address blocks: 2600:8800:564e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:ee:54:2d:17:d5:30:52:24:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:46:33 2025 GMT Not After : Sep 17 14:46:33 2025 GMT Subject: CN=2b044e80-23dd-41ad-8b98-5a3ae4642262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:64:57:44:69:a5:77:78:b1:81:0a:ba:f7: c9:82:75:5e:19:55:7c:80:a0:5b:63:e3:18:e2:b6: 6a:b5:4d:d6:c3:7a:d0:4f:6d:dc:f8:ab:de:ca:30: fe:e3:b9:02:2b:44:bf:fc:b2:2a:35:35:65:4e:5f: 43:23:bd:3e:28:2d:6b:6d:26:df:d1:4e:3a:26:11: 1d:cb:f8:39:8b:37:f9:25:39:49:dc:de:16:f8:8e: 60:93:38:d2:71:3e:47:6a:23:97:40:b6:b5:55:bc: 30:0d:ae:1e:a9:cb:f5:9d:86:19:00:3b:08:2b:97: b0:e5:8d:07:30:30:c0:3c:00:a0:f8:11:2c:1a:da: d0:b5:42:23:cf:cd:70:ff:53:a8:33:53:47:3d:ee: 5a:52:ec:c5:3b:0c:b6:97:6e:22:0c:81:94:ca:24: 21:26:19:2b:7c:ab:62:3e:07:d4:3e:f6:df:26:5f: 58:0c:99:7f:8d:d6:e4:39:15:33:2a:98:05:46:76: fd:a3:d2:c0:b4:14:f0:9a:ad:39:be:40:02:33:74: 97:19:56:33:cf:89:f0:c8:0f:83:01:d0:b6:72:7a: ff:de:d7:d0:a6:6a:e8:b0:67:a1:0a:21:de:92:50: 8f:52:d2:61:63:44:ac:03:88:5d:6a:5a:5d:90:9d: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:40:EB:E4:03:13:52:5D:C0:B4:06:4B:BB:7E:F7:19:ED:D3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bb3cace-ebdb-3e86-b900-53259a6de11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:564e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b3:69:e0:fe:52:36:5f:87:30:33:e3:79:dd:a3:94:8c:f7: b3:ae:ac:7d:3b:b2:40:a1:22:63:ab:1d:fa:a8:e2:08:cc:6b: 9d:75:33:fb:94:34:de:5b:a8:8a:1c:8b:68:8d:08:69:23:b1: 20:5b:42:61:c2:50:9f:b8:85:ae:26:c1:c1:66:c0:f7:91:a5: 86:b0:01:a7:73:f0:11:a0:2b:0f:07:44:08:75:e5:18:e0:46: 4b:ab:85:46:86:f7:e2:22:da:5a:1e:f9:82:ad:6f:3f:5b:5b: cc:09:ea:7d:3a:85:01:fa:fe:ae:b4:77:92:53:3a:b9:48:49: 22:47:18:ad:eb:5c:81:d7:a1:6b:40:76:a7:e9:d5:ab:ef:69: 62:1e:21:cf:c3:14:b1:d8:a5:c7:ea:1e:68:28:dc:79:af:b4: 63:88:b5:27:3d:a3:e3:54:ee:53:fc:6e:e2:4f:8f:ca:0f:9c: dd:59:4a:24:e4:84:7d:89:5d:be:6a:0a:ef:b6:a3:3e:e4:0c: 1a:fe:bd:20:88:90:b3:9b:3b:98:e0:1f:c1:43:29:c0:fe:8c: cc:57:b1:3c:5b:5e:29:32:f4:42:32:1a:7c:35:3e:fd:20:94: 8f:cd:d8:4d:b5:23:a5:84:e3:d4:a9:52:ef:f2:d3:7b:6e:85: 43:ca:77:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ee5ULRfVMFIkPUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDYzM1oXDTI1MDkxNzE0NDYzM1owLzEtMCsGA1UEAxMk MmIwNDRlODAtMjNkZC00MWFkLThiOTgtNWEzYWU0NjQyMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj21kV0RppXd4sYEKuvfJgnVeGVV8gKBbY+MY 4rZqtU3Ww3rQT23c+KveyjD+47kCK0S//LIqNTVlTl9DI70+KC1rbSbf0U46JhEd y/g5izf5JTlJ3N4W+I5gkzjScT5HaiOXQLa1VbwwDa4eqcv1nYYZADsIK5ew5Y0H MDDAPACg+BEsGtrQtUIjz81w/1OoM1NHPe5aUuzFOwy2l24iDIGUyiQhJhkrfKti PgfUPvbfJl9YDJl/jdbkORUzKpgFRnb9o9LAtBTwmq05vkACM3SXGVYzz4nwyA+D AdC2cnr/3tfQpmrosGehCiHeklCPUtJhY0SsA4hdalpdkJ0NswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFxfQOvkAxNSXcC0Bku7fvcZ7dOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWJiM2NhY2UtZWJkYi0z ZTg2LWI5MDAtNTMyNTlhNmRlMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFZO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+zaeD+UjZfhzAz43ndo5SM97OurH07skChImOrHfqo4gjMa511 M/uUNN5bqIoci2iNCGkjsSBbQmHCUJ+4ha4mwcFmwPeRpYawAadz8BGgKw8HRAh1 5RjgRkurhUaG9+Ii2loe+YKtbz9bW8wJ6n06hQH6/q60d5JTOrlISSJHGK3rXIHX oWtAdqfp1avvaWIeIc/DFLHYpcfqHmgo3HmvtGOItSc9o+NU7lP8buJPj8oPnN1Z SiTkhH2JXb5qCu+2oz7kDBr+vSCIkLObO5jgH8FDKcD+jMxXsTxbXiky9EIyGnw1 Pv0glI/N2E21I6WE49SpUu/y03tuhUPKd+w= -----END CERTIFICATE-----Generated at Tue Jul 1 21:10:27 2025 by rpki-client