$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa File: 38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa (raw, json) Hash identifier: 01u10JbW8YuUZnFLCneRkalH2RoKYe8LOf/wuRCwn7I= Subject key identifier: B5:EA:A5:DC:74:CE:C5:61:07:BC:29:89:3B:DA:D1:97:81:86:73:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E781F2B505E190ECB06D780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa Signing time: Thu 19 Jun 2025 14:42:55 +0000 ROA not before: Thu 19 Jun 2025 14:42:55 +0000 ROA not after: Wed 17 Sep 2025 14:42:55 +0000 asID: 22773 IP address blocks: 2001:578:8aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:1f:2b:50:5e:19:0e:cb:06:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:55 2025 GMT Not After : Sep 17 14:42:55 2025 GMT Subject: CN=ef38d85d-07a1-4317-9965-7ba7166a171c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:85:ee:22:ba:67:f8:be:b2:e1:2f:ce:85: 6b:c2:32:9f:c0:c8:22:b7:f5:dd:bd:e6:c8:05:de: d6:02:e9:09:18:b6:07:6b:3b:c8:d3:34:1b:31:15: 08:c2:e2:cd:d7:d0:a0:fe:e6:f6:75:75:ad:d1:19: a5:65:eb:10:e4:a7:ed:38:df:1a:d6:af:76:bb:09: 98:6b:e6:9a:d0:04:97:0e:b4:36:9a:ba:33:0c:b1: 9c:35:0c:62:2b:20:07:3c:0d:f1:28:7c:67:4f:c4: c5:5f:b8:14:0a:8d:65:27:cf:18:d2:6a:4a:53:f6: a6:bc:46:08:a6:94:6e:d2:02:fc:ba:e0:04:22:9a: 15:ed:4a:81:ee:23:6c:42:c0:40:46:5a:9a:e0:19: 5b:5c:26:5e:b3:cd:49:a3:ce:f8:dd:fe:5f:9b:f3: 45:ae:5f:f5:f9:aa:80:30:b3:13:2f:86:14:99:93: 29:cd:ee:58:65:10:67:3b:f4:5c:7e:ee:81:28:e2: 87:41:6e:cf:22:77:dc:90:a1:8f:c4:ba:24:04:7b: c4:bc:90:73:06:d3:c8:21:27:88:5d:a0:5c:73:5c: 22:b2:0e:c6:a8:8c:14:54:f6:88:01:c8:f8:de:9c: 70:30:f3:47:38:51:51:c5:f8:ca:98:53:8c:0b:ad: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EA:A5:DC:74:CE:C5:61:07:BC:29:89:3B:DA:D1:97:81:86:73:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:26:16:ce:af:98:d7:c1:00:11:c2:15:cb:7d:a1:5c:ab:01: 37:cf:ad:db:66:10:b6:1f:70:63:2b:94:00:f0:c5:31:8e:a5: 68:b8:ba:f3:a4:d3:d3:f5:92:49:22:14:bb:be:bb:93:19:f0: 25:30:76:27:64:23:7b:c3:73:fd:e4:d7:3f:24:7b:17:be:a6: e2:fe:3d:92:67:53:e4:6e:9c:6a:24:b3:6e:ed:88:b4:45:27: 72:19:c1:4f:30:64:6d:47:cb:c7:52:56:08:9d:27:67:96:62: 10:92:9c:fc:27:21:03:35:8e:21:ca:ec:d5:d4:b7:a9:f7:14: 43:6f:bd:02:dd:55:be:0d:85:f2:5b:d8:95:6a:f8:dc:bc:c5: 8c:56:b8:f0:f6:2d:eb:4e:1c:b4:2b:bd:bc:2b:70:11:ed:2f: cf:55:ad:ac:29:bb:e1:41:00:c8:78:86:ea:5d:6f:0b:d2:bc: c2:90:aa:1f:fa:33:04:f6:b3:3d:c3:44:f7:d1:38:9e:ef:ab: bc:cf:0b:98:69:b5:76:be:5f:99:db:d7:b3:5d:4f:31:06:b0: 1e:83:df:b2:8d:9c:6b:36:43:38:10:48:3a:c0:4a:24:60:15: 25:84:de:52:e2:ae:5f:c9:74:eb:c0:ed:be:6b:6a:fd:00:85: 8c:16:e3:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eB8rUF4ZDssG14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI1NVoXDTI1MDkxNzE0NDI1NVowLzEtMCsGA1UEAxMk ZWYzOGQ4NWQtMDdhMS00MzE3LTk5NjUtN2JhNzE2NmExNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ2F7iK6Z/i+suEvzoVrwjKfwMgit/XdvebI Bd7WAukJGLYHazvI0zQbMRUIwuLN19Cg/ub2dXWt0RmlZesQ5KftON8a1q92uwmY a+aa0ASXDrQ2mrozDLGcNQxiKyAHPA3xKHxnT8TFX7gUCo1lJ88Y0mpKU/amvEYI ppRu0gL8uuAEIpoV7UqB7iNsQsBARlqa4BlbXCZes81Jo8743f5fm/NFrl/1+aqA MLMTL4YUmZMpze5YZRBnO/Rcfu6BKOKHQW7PInfckKGPxLokBHvEvJBzBtPIISeI XaBcc1wisg7GqIwUVPaIAcj43pxwMPNHOFFRxfjKmFOMC61WRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXqpdx0zsVhB7wpiTva0ZeBhnOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhmNjU5NjQtMjA5Ni0z ZDZiLWJjNGMtYTdiYzUxMGM4ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAiq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEmFs6vmNfBABHCFct9oVyrATfPrdtmELYfcGMrlADwxTGOpWi4 uvOk09P1kkkiFLu+u5MZ8CUwdidkI3vDc/3k1z8kexe+puL+PZJnU+RunGoks27t iLRFJ3IZwU8wZG1Hy8dSVgidJ2eWYhCSnPwnIQM1jiHK7NXUt6n3FENvvQLdVb4N hfJb2JVq+Ny8xYxWuPD2LetOHLQrvbwrcBHtL89Vrawpu+FBAMh4hupdbwvSvMKQ qh/6MwT2sz3DRPfROJ7vq7zPC5hptXa+X5nb17NdTzEGsB6D37KNnGs2QzgQSDrA SiRgFSWE3lLirl/JdOvA7b5rav0AhYwW434= -----END CERTIFICATE-----Generated at Tue Jul 1 00:57:53 2025 by rpki-client