$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f61f162-5622-38f1-beed-6e70c8e3f2fd.roa File: 2f61f162-5622-38f1-beed-6e70c8e3f2fd.roa (raw, json) Hash identifier: BMcY2VKOvulyPB6zsNV/1gAy34jeMUTDLpI2Xeh/WVk= Subject key identifier: 5B:5D:73:30:12:AC:19:D3:04:E0:9D:7B:B7:D4:03:7D:0E:1C:49:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B63245CD0662A2E7E7C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f61f162-5622-38f1-beed-6e70c8e3f2fd.roa Signing time: Thu 19 Jun 2025 14:49:29 +0000 ROA not before: Thu 19 Jun 2025 14:49:29 +0000 ROA not after: Wed 17 Sep 2025 14:49:29 +0000 asID: 22773 IP address blocks: 2600:8800:b732::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:63:24:5c:d0:66:2a:2e:7e:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:29 2025 GMT Not After : Sep 17 14:49:29 2025 GMT Subject: CN=139ff86b-0c1a-4a99-ae7c-7acba22c860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:b9:87:11:06:07:e7:35:bd:30:8e:db:a5: 58:9b:1a:29:9e:bd:5e:12:c4:0c:0e:14:6e:32:fd: 28:71:a7:b2:55:a4:5a:17:eb:6e:e3:21:f1:42:71: b6:b4:bd:d1:d9:43:10:f7:05:9d:30:d4:8a:45:8a: 49:40:dd:c8:92:23:10:1f:ca:b1:9d:cc:3e:96:d8: e1:1b:35:99:f5:56:32:de:4e:be:89:3c:a1:46:4a: 23:3e:19:e5:2a:e4:29:56:cb:ec:93:ba:0f:a3:d9: e7:76:9a:92:84:1e:1e:5f:97:d8:4c:7e:0a:f2:a0: 8f:7b:ab:c5:bd:b4:84:49:6e:1c:66:97:f5:0d:35: d4:8f:b8:d5:9f:c9:44:32:36:92:27:60:f8:7e:92: 97:ee:ee:51:1f:02:83:ee:70:b3:d4:03:7f:97:c5: 52:6a:c9:ac:6a:b7:b0:cf:70:d6:b0:23:9d:81:22: 9f:6c:db:54:86:36:1f:b8:e6:bb:c1:92:19:08:82: a0:b3:de:63:4c:33:ce:82:bc:9e:d4:c7:93:10:74: ae:78:54:4a:8c:be:c4:8a:4f:da:5e:cc:bf:e4:c9: aa:73:eb:13:da:74:c7:51:85:c9:6f:cd:4f:21:82: 9f:ae:d4:77:68:b8:27:f2:49:55:da:ab:fc:da:15: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:73:30:12:AC:19:D3:04:E0:9D:7B:B7:D4:03:7D:0E:1C:49:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f61f162-5622-38f1-beed-6e70c8e3f2fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b732::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:33:df:2e:5e:b2:60:7b:76:57:3c:50:6a:41:0a:80:d5:83: 14:0f:2b:b4:05:cc:ab:5c:a8:69:09:f4:66:a6:21:90:23:b5: 10:28:a5:ca:f6:76:28:65:87:1b:17:53:da:b2:d8:4c:9d:d4: 89:4d:80:75:2d:a2:81:74:9b:bf:90:99:b5:2c:7f:5e:0c:ad: ae:18:65:40:02:1f:6a:6d:4d:c5:b0:39:1e:52:b8:e6:31:d7: c3:29:0c:44:aa:0b:6e:f0:8e:49:4d:af:76:ea:d0:e1:8e:22: c1:8c:34:11:83:ca:09:22:f5:87:d3:27:44:11:ea:cb:f5:41: 4a:b0:79:c5:25:79:80:7d:d2:4d:33:8e:dd:7b:d1:68:0e:7e: 88:b4:33:94:80:d5:6f:a7:eb:52:ca:4d:47:15:27:e0:7e:99: bb:fe:22:67:3b:99:59:87:76:51:03:85:b3:30:8a:25:1a:78: 94:2d:9e:6e:68:33:32:2d:e0:8f:b3:30:b7:7a:67:5a:91:f6: 40:4a:c8:a1:55:be:d9:44:85:b4:f7:5e:77:41:46:54:87:48: 43:de:3d:5c:b9:09:cb:45:e1:7e:5d:0f:5f:58:45:3f:fe:a5: 54:13:02:48:19:5f:fa:d5:55:2c:fe:6c:ba:25:c5:6a:b6:90: e8:8d:62:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e2MkXNBmKi5+fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDkyOVoXDTI1MDkxNzE0NDkyOVowLzEtMCsGA1UEAxMk MTM5ZmY4NmItMGMxYS00YTk5LWFlN2MtN2FjYmEyMmM4NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn+5hxEGB+c1vTCO26VYmxopnr1eEsQMDhRu Mv0ocaeyVaRaF+tu4yHxQnG2tL3R2UMQ9wWdMNSKRYpJQN3IkiMQH8qxncw+ltjh GzWZ9VYy3k6+iTyhRkojPhnlKuQpVsvsk7oPo9nndpqShB4eX5fYTH4K8qCPe6vF vbSESW4cZpf1DTXUj7jVn8lEMjaSJ2D4fpKX7u5RHwKD7nCz1AN/l8VSasmsarew z3DWsCOdgSKfbNtUhjYfuOa7wZIZCIKgs95jTDPOgrye1MeTEHSueFRKjL7Eik/a Xsy/5Mmqc+sT2nTHUYXJb81PIYKfrtR3aLgn8klV2qv82hXAwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtdczASrBnTBOCde7fUA30OHEmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY2MWYxNjItNTYyMi0z OGYxLWJlZWQtNmU3MGM4ZTNmMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALcy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQz3y5esmB7dlc8UGpBCoDVgxQPK7QFzKtcqGkJ9GamIZAjtRAo pcr2dihlhxsXU9qy2Eyd1IlNgHUtooF0m7+QmbUsf14Mra4YZUACH2ptTcWwOR5S uOYx18MpDESqC27wjklNr3bq0OGOIsGMNBGDygki9YfTJ0QR6sv1QUqwecUleYB9 0k0zjt170WgOfoi0M5SA1W+n61LKTUcVJ+B+mbv+Imc7mVmHdlEDhbMwiiUaeJQt nm5oMzIt4I+zMLd6Z1qR9kBKyKFVvtlEhbT3XndBRlSHSEPePVy5CctF4X5dD19Y RT/+pVQTAkgZX/rVVSz+bLolxWq2kOiNYpo= -----END CERTIFICATE-----Generated at Tue Jul 1 21:19:47 2025 by rpki-client