$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa File: 20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa (raw, json) Hash identifier: d/T3kqwTJZpcVTUE8IF3pYsKPR0vF+g2UjkXCuQOZiA= Subject key identifier: 96:E0:31:3B:FE:12:F5:A9:9E:9F:BF:21:10:59:BD:D5:FF:BE:41:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B6E4D3D972C8D0D5FAB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa Signing time: Thu 19 Jun 2025 14:49:35 +0000 ROA not before: Thu 19 Jun 2025 14:49:35 +0000 ROA not after: Wed 17 Sep 2025 14:49:35 +0000 asID: 22773 IP address blocks: 2600:8800:c000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:6e:4d:3d:97:2c:8d:0d:5f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:35 2025 GMT Not After : Sep 17 14:49:35 2025 GMT Subject: CN=bb34a4c5-5936-4ece-b53c-4544ca271b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:c1:47:30:3e:c3:c6:7c:3d:12:ee:76:12: dc:d0:b2:41:c5:91:65:ea:c6:6a:b3:2d:7c:0a:6a: 4e:72:cc:a5:86:d2:74:74:17:c8:ba:4e:f6:ee:8b: 8f:fb:69:94:28:2a:f6:74:7a:5c:4a:76:27:5f:84: 9e:b9:d7:ff:ea:0b:a6:84:cf:6b:29:0c:68:0b:d6: 4e:2f:e7:29:42:66:30:d3:63:4c:50:95:a0:56:31: 6c:69:a5:0c:b4:0a:79:45:3c:be:fb:6b:00:f6:5d: fa:22:19:3c:47:e2:b2:a5:63:71:7f:7f:58:9f:d7: b5:fb:23:2d:4e:d3:8a:24:74:3e:ad:4c:55:34:aa: b0:0a:43:12:8b:dd:43:4b:ad:ca:cf:26:cd:3c:83: 69:70:43:f0:3f:75:1b:1a:69:7f:fa:1c:6e:df:24: 06:8c:dc:7d:0e:d6:ea:a6:88:dd:b1:6c:56:d0:61: a9:fa:3c:f4:0d:e9:fa:d4:28:17:a3:c7:04:a9:2f: 08:c3:12:90:82:03:57:61:b6:75:6b:2e:ac:ff:7a: 41:1c:05:34:31:7f:cd:3f:a1:c0:61:7e:10:3c:2d: 85:b7:cd:e7:dc:96:30:20:cd:d8:39:38:2b:72:1a: fc:35:37:ff:82:16:2f:27:9c:42:d9:38:a9:eb:0b: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:31:3B:FE:12:F5:A9:9E:9F:BF:21:10:59:BD:D5:FF:BE:41:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:c000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:34:d8:99:2d:cc:e5:05:6e:27:23:0a:e1:67:ea:9f:86:68: 5d:5e:2b:43:70:dc:cb:31:56:62:c4:16:55:34:af:32:d7:04: 25:e5:ba:26:35:da:61:fc:b6:af:d6:e9:a3:e0:04:df:aa:a4: f1:55:a8:77:8d:cc:27:5f:60:93:15:ae:72:05:46:58:a6:09: c0:1b:a2:0d:e1:36:0a:5d:20:af:8e:aa:4a:cc:4a:74:85:b1: a0:d3:13:fa:dd:4c:2a:f2:1b:45:d6:f1:ac:f3:aa:72:f9:9b: f5:c3:44:94:9e:7d:32:c0:be:f9:67:7d:db:9c:9b:e5:a1:75: 54:c4:c7:fa:3c:36:c3:35:ab:26:68:36:5a:f8:2a:27:07:27: 8f:fa:e1:f4:9b:5a:39:85:09:96:df:1b:f0:96:d9:20:bc:2e: 8d:87:61:3e:66:17:01:97:f4:e5:ff:b4:d7:02:34:57:09:84: 0b:c2:02:4c:d4:d1:d1:3c:7d:d7:9c:64:84:47:0d:5e:99:04: 88:b1:c6:d1:44:f8:87:90:70:b0:78:ee:b6:21:3a:fd:81:68: a4:01:f0:e1:25:aa:06:72:46:f3:63:8f:a9:fc:aa:63:c3:2a: a2:3e:e9:6d:c9:3f:29:a6:f3:bc:68:be:71:68:70:81:04:85: e1:3c:ed:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e25NPZcsjQ1fq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDkzNVoXDTI1MDkxNzE0NDkzNVowLzEtMCsGA1UEAxMk YmIzNGE0YzUtNTkzNi00ZWNlLWI1M2MtNDU0NGNhMjcxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXBRzA+w8Z8PRLudhLc0LJBxZFl6sZqsy18 CmpOcsylhtJ0dBfIuk727ouP+2mUKCr2dHpcSnYnX4Seudf/6gumhM9rKQxoC9ZO L+cpQmYw02NMUJWgVjFsaaUMtAp5RTy++2sA9l36Ihk8R+KypWNxf39Yn9e1+yMt TtOKJHQ+rUxVNKqwCkMSi91DS63KzybNPINpcEPwP3UbGml/+hxu3yQGjNx9Dtbq pojdsWxW0GGp+jz0Den61CgXo8cEqS8IwxKQggNXYbZ1ay6s/3pBHAU0MX/NP6HA YX4QPC2Ft83n3JYwIM3YOTgrchr8NTf/ghYvJ5xC2Tip6wsqbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbgMTv+EvWpnp+/IRBZvdX/vkFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBmYmRmNTgtYjQwZS0z YTZlLThkZGItNzZiZjA0MTNiZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF802JktzOUFbicjCuFn6p+GaF1eK0Nw3MsxVmLEFlU0rzLXBCXl uiY12mH8tq/W6aPgBN+qpPFVqHeNzCdfYJMVrnIFRlimCcAbog3hNgpdIK+OqkrM SnSFsaDTE/rdTCryG0XW8azzqnL5m/XDRJSefTLAvvlnfducm+WhdVTEx/o8NsM1 qyZoNlr4KicHJ4/64fSbWjmFCZbfG/CW2SC8Lo2HYT5mFwGX9OX/tNcCNFcJhAvC AkzU0dE8fdecZIRHDV6ZBIixxtFE+IeQcLB47rYhOv2BaKQB8OElqgZyRvNjj6n8 qmPDKqI+6W3JPymm87xovnFocIEEheE87Zo= -----END CERTIFICATE-----Generated at Tue Jul 1 20:30:59 2025 by rpki-client