$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220328e4-e74c-349f-a9e9-27f2a57705bf.roa File: 220328e4-e74c-349f-a9e9-27f2a57705bf.roa (raw, json) Hash identifier: 3vpkyGtb41AcVcXSBBfA04klj2r3oJqXTKoz3xX4E6o= Subject key identifier: 4D:55:EB:F9:D3:BF:9D:E5:01:51:9A:95:8B:72:FD:60:FC:F1:D3:E4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A1EC183372BB62A3346C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220328e4-e74c-349f-a9e9-27f2a57705bf.roa Signing time: Thu 19 Jun 2025 14:46:56 +0000 ROA not before: Thu 19 Jun 2025 14:46:56 +0000 ROA not after: Wed 17 Sep 2025 14:46:56 +0000 asID: 22773 IP address blocks: 2600:8800:6180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:1e:c1:83:37:2b:b6:2a:33:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:46:56 2025 GMT Not After : Sep 17 14:46:56 2025 GMT Subject: CN=d60b2e89-4552-4dab-868b-d6e382c687f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:63:51:5a:b9:d1:6a:ad:d2:6e:6a:b3:36:d5: 2e:f9:45:20:89:00:53:0d:71:a2:66:bc:8d:75:fd: b2:63:df:b5:76:09:27:8c:44:d3:a7:00:5b:a9:7a: 26:93:ff:a2:05:a5:f6:16:4c:61:c9:94:b8:91:81: ab:f2:cf:ff:d2:c1:97:87:c6:0b:58:c4:68:35:6c: 39:4d:9e:e4:45:fb:cd:ba:fb:7d:a7:03:d6:81:6f: 8f:d9:29:d0:b6:5d:e3:9f:f5:f4:2a:30:2b:2a:00: 09:7f:86:6f:49:bd:de:1f:8d:0d:0b:00:f6:e3:a4: 0e:63:e7:fb:ab:01:8e:8c:ea:ba:d7:61:45:5c:d5: b5:41:1b:0e:3e:ec:ef:11:64:bf:5e:87:a3:ad:e2: e9:65:33:ba:90:5d:4e:e3:40:0c:a6:61:e0:b0:1c: 62:2d:04:22:b3:d4:25:f6:56:85:89:c6:8b:71:13: 00:87:6c:5f:ce:f9:80:dd:46:32:95:04:87:86:c1: 79:d3:da:6d:51:1f:c5:e0:55:30:08:3e:5a:66:66: 2c:09:aa:ce:50:9c:fc:2d:6d:5f:4a:2f:14:dd:b1: 7e:cd:ac:7d:23:01:cb:74:7d:a0:7b:11:93:f6:47: 29:b3:25:dc:d1:dd:c1:17:a5:f6:46:20:dc:9d:8d: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:55:EB:F9:D3:BF:9D:E5:01:51:9A:95:8B:72:FD:60:FC:F1:D3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220328e4-e74c-349f-a9e9-27f2a57705bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:6180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e0:e5:d6:02:13:5d:f4:23:11:38:c2:f8:55:97:88:6d:6a: fa:d5:8a:43:64:69:f1:84:8a:ae:cf:06:d0:3b:7d:c7:33:51: e1:e4:86:43:ab:a5:2e:4d:0c:c0:22:e2:08:37:06:48:e3:d8: 12:33:04:9b:2c:7e:e8:a3:0a:77:50:86:dd:a2:8c:96:4b:a5: 6c:d0:9a:2e:69:05:04:62:a9:03:ac:b1:78:a2:36:3e:e6:a7: db:13:40:e1:0f:e8:14:7e:76:f7:ec:1e:fe:3c:8b:d1:09:53: 73:e3:48:ce:ca:bb:88:58:1f:f3:45:e2:c4:96:19:79:65:ea: ac:7b:6c:f5:05:c1:38:31:b3:8f:47:d3:d3:b7:11:c2:59:68: ed:98:48:16:c5:40:0a:e7:ae:81:8d:47:a8:b1:5d:71:87:44: 11:83:52:f1:f5:71:3f:68:29:2e:92:c9:a3:80:88:4e:b4:69: 0d:8e:88:3c:c0:09:c6:e1:fb:cb:95:ee:04:27:2d:8c:28:b9: 8e:6c:3a:aa:04:e9:47:39:4f:85:b5:ce:03:a7:99:29:e3:ee: fe:58:b5:d3:07:54:c1:cb:15:7b:e6:ea:c2:de:1b:26:da:42: 52:c9:f9:0c:d2:97:8a:a2:3a:ce:d7:61:05:ba:cb:32:67:1d: 2a:cb:ad:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eh7BgzcrtiozRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDY1NloXDTI1MDkxNzE0NDY1NlowLzEtMCsGA1UEAxMk ZDYwYjJlODktNDU1Mi00ZGFiLTg2OGItZDZlMzgyYzY4N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WNRWrnRaq3SbmqzNtUu+UUgiQBTDXGiZryN df2yY9+1dgknjETTpwBbqXomk/+iBaX2FkxhyZS4kYGr8s//0sGXh8YLWMRoNWw5 TZ7kRfvNuvt9pwPWgW+P2SnQtl3jn/X0KjArKgAJf4ZvSb3eH40NCwD246QOY+f7 qwGOjOq612FFXNW1QRsOPuzvEWS/XoejreLpZTO6kF1O40AMpmHgsBxiLQQis9Ql 9laFicaLcRMAh2xfzvmA3UYylQSHhsF509ptUR/F4FUwCD5aZmYsCarOUJz8LW1f Si8U3bF+zax9IwHLdH2gexGT9kcpsyXc0d3BF6X2RiDcnY2v7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1V6/nTv53lAVGalYty/WD88dPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIwMzI4ZTQtZTc0Yy0z NDlmLWE5ZTktMjdmMmE1NzcwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAGGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXg5dYCE130IxE4wvhVl4htavrVikNkafGEiq7PBtA7fcczUeHk hkOrpS5NDMAi4gg3Bkjj2BIzBJssfuijCndQht2ijJZLpWzQmi5pBQRiqQOssXii Nj7mp9sTQOEP6BR+dvfsHv48i9EJU3PjSM7Ku4hYH/NF4sSWGXll6qx7bPUFwTgx s49H09O3EcJZaO2YSBbFQArnroGNR6ixXXGHRBGDUvH1cT9oKS6SyaOAiE60aQ2O iDzACcbh+8uV7gQnLYwouY5sOqoE6Uc5T4W1zgOnmSnj7v5YtdMHVMHLFXvm6sLe GybaQlLJ+QzSl4qiOs7XYQW6yzJnHSrLrWQ= -----END CERTIFICATE-----Generated at Mon Jun 30 17:23:53 2025 by rpki-client