$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa File: 28f0a707-e669-336f-addb-ee06fbd6ad78.roa (raw, json) Hash identifier: 2owhPa7+VsSSOpb8163nXOwsENKUoHP2ONDc6WyMDVs= Subject key identifier: E7:7E:C5:63:F9:67:65:10:28:D7:1A:84:C5:C1:6D:3B:8A:23:BD:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA8510C8C3F20F1A509C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 2600:880b:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:85:10:c8:c3:f2:0f:1a:50:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=611955ae-61b1-43f7-a5d4-4eda0e7af8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:31:47:e9:98:c4:e6:09:1a:ab:31:8b:cb: 62:2b:e3:16:2e:bc:99:39:1b:d3:66:a1:1e:79:b0: a1:24:b9:5c:39:01:58:f3:9f:7c:08:e3:d9:6b:96: 49:21:5b:57:a6:a8:24:b0:6c:2b:c9:7e:73:b5:34: 88:5c:65:2d:ec:6d:03:0d:f0:48:94:ad:d3:df:69: ae:e1:1c:e3:bd:36:4f:22:97:93:6f:f2:84:12:75: 1a:ba:3c:81:1b:ea:ae:3f:23:fe:fe:62:6c:4e:29: ac:b9:fd:35:03:98:fc:13:c0:3d:d9:5a:eb:f3:7c: 39:c0:e7:17:5a:d1:43:47:e4:4c:60:ed:88:80:71: 5a:0a:fe:18:39:87:f0:88:45:08:62:b2:ef:52:b7: 1a:29:77:3b:92:9d:fc:b2:7d:43:88:24:30:92:aa: f6:d8:a4:23:94:dc:bc:e6:d9:46:a8:73:27:12:f2: e9:ee:3e:36:b7:07:e9:34:97:8b:72:09:ec:63:3d: db:cf:05:2c:52:e5:12:85:73:9d:1c:d1:51:c5:3f: 88:a6:9d:38:73:aa:e5:50:3a:30:34:78:05:d2:e9: f6:4b:c8:c3:e7:7c:83:90:7b:d0:dc:47:53:a9:a9: d6:6d:69:1c:0f:3f:3a:c7:ce:74:1e:cb:06:aa:be: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7E:C5:63:F9:67:65:10:28:D7:1A:84:C5:C1:6D:3B:8A:23:BD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880b:2000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b2:05:d7:a4:48:16:71:e8:7f:46:39:e2:81:df:ea:72:58: 24:da:5c:3a:4c:ca:1c:fb:65:db:c6:3d:2a:ad:3b:68:f7:33: 5d:99:9d:1b:17:8e:d6:90:f1:7f:03:cf:70:0d:cb:61:5a:23: f3:17:7e:b9:39:f7:8b:32:87:ea:89:90:f7:55:1d:be:ca:de: 98:e9:5b:3a:b0:15:1c:08:e3:58:4c:de:be:bc:2c:57:2d:c8: 7f:0d:10:ca:ac:e6:b3:6b:13:ee:b9:4b:52:fc:50:71:34:64: b5:41:ec:fa:4b:0f:89:fd:07:94:59:54:80:26:db:41:c5:85: ef:b4:58:90:07:c8:7f:ec:c6:e3:0e:d7:f0:0a:0f:97:37:21: ba:f2:24:d5:fe:b6:ef:cb:87:76:8d:0c:f1:9c:ad:68:73:68: 24:fc:a2:7c:bb:6a:a4:5c:c1:05:a4:77:87:c6:4b:e1:c0:36: db:16:90:75:73:1d:3a:dc:87:f3:58:2f:b1:23:97:e9:c8:d3: f5:a1:a0:a8:83:02:9f:93:b5:64:1c:3e:e0:12:dd:04:44:92: 0a:6a:41:21:04:16:5e:eb:de:17:ce:13:bf:e0:04:c3:df:e4: 10:9e:ae:34:a4:d6:4f:46:28:f1:95:bf:2d:8e:e8:fa:38:65: 11:01:a6:c9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnr6oUQyMPyDxpQnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NjExOTU1YWUtNjFiMS00M2Y3LWE1ZDQtNGVkYTBlN2FmOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6QxR+mYxOYJGqsxi8tiK+MWLryZORvTZqEe ebChJLlcOQFY8598COPZa5ZJIVtXpqgksGwryX5ztTSIXGUt7G0DDfBIlK3T32mu 4RzjvTZPIpeTb/KEEnUaujyBG+quPyP+/mJsTimsuf01A5j8E8A92Vrr83w5wOcX WtFDR+RMYO2IgHFaCv4YOYfwiEUIYrLvUrcaKXc7kp38sn1DiCQwkqr22KQjlNy8 5tlGqHMnEvLp7j42twfpNJeLcgnsYz3bzwUsUuUShXOdHNFRxT+Ipp04c6rlUDow NHgF0un2S8jD53yDkHvQ3EdTqanWbWkcDz86x850HssGqr6KjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOd+xWP5Z2UQKNcahMXBbTuKI71kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmMGE3MDctZTY2OS0z MzZmLWFkZGItZWUwNmZiZDZhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOrIF16RIFnHof0Y54oHf6nJYJNpcOkzKHPtl28Y9Kq07aPczXZmd GxeO1pDxfwPPcA3LYVoj8xd+uTn3izKH6omQ91UdvsremOlbOrAVHAjjWEzevrws Vy3Ifw0Qyqzms2sT7rlLUvxQcTRktUHs+ksPif0HlFlUgCbbQcWF77RYkAfIf+zG 4w7X8AoPlzchuvIk1f6278uHdo0M8ZytaHNoJPyifLtqpFzBBaR3h8ZL4cA22xaQ dXMdOtyH81gvsSOX6cjT9aGgqIMCn5O1ZBw+4BLdBESSCmpBIQQWXuveF84Tv+AE w9/kEJ6uNKTWT0Yo8ZW/LY7o+jhlEQGmyQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:52:15 2025 by rpki-client