$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c99b419-f95a-3b6b-8882-8f6969b680b8.roa File: 1c99b419-f95a-3b6b-8882-8f6969b680b8.roa (raw, json) Hash identifier: 3xWX6TL03stR2DfN6MlOdVF/2M0OYnMOPYiz/tfzzkM= Subject key identifier: 0D:B4:92:91:6B:28:49:A0:95:4C:A2:17:96:CA:F2:0C:FF:29:BE:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7BB7C228743CC9BAF03400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c99b419-f95a-3b6b-8882-8f6969b680b8.roa Signing time: Thu 19 Jun 2025 14:50:09 +0000 ROA not before: Thu 19 Jun 2025 14:50:09 +0000 ROA not after: Wed 17 Sep 2025 14:50:09 +0000 asID: 22773 IP address blocks: 2600:880a:704::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:b7:c2:28:74:3c:c9:ba:f0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:50:09 2025 GMT Not After : Sep 17 14:50:09 2025 GMT Subject: CN=7f7a4688-c2ea-4e3b-b1d6-cf0bc6adf86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:ad:64:1f:bd:9b:4a:b1:91:ba:b0:05:67: 7b:74:77:41:4d:51:31:4e:04:c4:24:73:59:c4:ed: 0c:1b:ee:08:60:d9:43:6d:fa:06:61:cd:5a:0d:3f: f0:35:77:35:44:4e:99:22:ff:fa:ce:66:a8:4d:a3: b8:35:ad:8b:d5:f5:38:33:0b:9a:73:d3:68:6b:ae: f5:34:75:0c:bf:21:9a:2a:54:92:35:d8:3d:af:cc: 86:59:5c:cf:f4:7a:32:60:ba:25:1c:6c:a3:11:03: 05:fd:65:89:c0:e3:b2:81:38:1a:45:71:18:48:05: bf:26:01:c6:57:31:29:65:93:89:75:38:33:22:e7: 83:49:fa:f6:9c:e6:de:3b:7c:b5:d9:d4:0e:ba:a8: 8c:90:7f:d1:58:10:e1:98:05:02:bc:aa:b7:84:c0: f9:17:3c:8e:97:f0:6e:9b:fa:b6:ce:2b:61:f1:39: de:83:52:79:02:80:2c:0f:e6:ba:00:18:63:72:6e: 63:f4:24:05:c0:f3:8c:42:a4:b1:b2:61:c4:fb:3b: 73:19:81:33:b3:42:7f:3e:9a:2b:37:19:71:ca:1b: a3:c6:25:d8:5a:3d:33:72:53:af:5c:0e:8e:b7:08: 9b:86:06:12:f4:ac:c9:cf:54:09:df:f6:d3:82:92: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B4:92:91:6B:28:49:A0:95:4C:A2:17:96:CA:F2:0C:FF:29:BE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c99b419-f95a-3b6b-8882-8f6969b680b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:704::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7a:c7:46:fa:c3:79:0e:66:83:15:cb:f9:a8:7a:c6:66:f7: a5:be:01:2f:ab:6e:12:cd:37:29:0f:fb:fe:b6:c9:a5:52:4f: 25:25:9b:99:72:27:04:70:a3:e2:8f:09:c9:48:33:63:1d:3d: 05:5b:1e:d4:e3:d1:00:b8:4e:a0:2e:ad:d8:71:f4:4c:80:5f: bb:51:4f:24:48:9c:94:43:76:07:4e:1c:30:6b:09:17:f3:bd: a5:41:42:29:7b:6a:f6:c0:a4:8e:76:1a:32:9b:27:06:f1:9c: 63:6c:32:a9:29:8f:21:43:6a:a2:b1:72:f8:19:fa:d3:71:f1: 45:b4:e2:1b:cf:bc:97:22:9c:c3:d2:ce:71:6b:d6:c9:5b:a6: 0c:86:5b:da:7f:ad:12:63:cb:d2:a1:ff:ff:a3:d7:3b:a6:db: a8:cb:00:3c:57:22:be:fa:e0:f9:05:34:83:a5:f8:fb:96:b0: c0:83:1d:55:18:d1:b6:d3:9d:71:78:3b:26:01:c0:b2:5d:ec: aa:30:42:f9:65:a2:c5:d4:b5:e2:14:20:ca:c0:c1:a4:72:b4: 3d:f9:6c:c2:d6:09:e6:b4:a6:e7:5b:8f:c0:fc:7c:c9:5a:c5: a2:5f:5f:93:3f:db:dc:16:4a:94:78:fd:d4:f6:20:ff:b1:59: 08:c4:d5:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e7fCKHQ8ybrwNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NTAwOVoXDTI1MDkxNzE0NTAwOVowLzEtMCsGA1UEAxMk N2Y3YTQ2ODgtYzJlYS00ZTNiLWIxZDYtY2YwYmM2YWRmODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4GtZB+9m0qxkbqwBWd7dHdBTVExTgTEJHNZ xO0MG+4IYNlDbfoGYc1aDT/wNXc1RE6ZIv/6zmaoTaO4Na2L1fU4Mwuac9Noa671 NHUMvyGaKlSSNdg9r8yGWVzP9HoyYLolHGyjEQMF/WWJwOOygTgaRXEYSAW/JgHG VzEpZZOJdTgzIueDSfr2nObeO3y12dQOuqiMkH/RWBDhmAUCvKq3hMD5FzyOl/Bu m/q2zith8Tneg1J5AoAsD+a6ABhjcm5j9CQFwPOMQqSxsmHE+ztzGYEzs0J/Ppor NxlxyhujxiXYWj0zclOvXA6OtwibhgYS9KzJz1QJ3/bTgpKwWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA20kpFrKEmglUyiF5bK8gz/Kb4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWM5OWI0MTktZjk1YS0z YjZiLTg4ODItOGY2OTY5YjY4MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgcE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABd6x0b6w3kOZoMVy/moesZm96W+AS+rbhLNNykP+/62yaVSTyUl m5lyJwRwo+KPCclIM2MdPQVbHtTj0QC4TqAurdhx9EyAX7tRTyRInJRDdgdOHDBr CRfzvaVBQil7avbApI52GjKbJwbxnGNsMqkpjyFDaqKxcvgZ+tNx8UW04hvPvJci nMPSznFr1slbpgyGW9p/rRJjy9Kh//+j1zum26jLADxXIr764PkFNIOl+PuWsMCD HVUY0bbTnXF4OyYBwLJd7KowQvllosXUteIUIMrAwaRytD35bMLWCea0pudbj8D8 fMlaxaJfX5M/29wWSpR4/dT2IP+xWQjE1Z4= -----END CERTIFICATE-----Generated at Tue Jul 1 09:33:11 2025 by rpki-client