$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/412f26d2-6b34-37b5-a2a0-236c8a74836c.roa File: 412f26d2-6b34-37b5-a2a0-236c8a74836c.roa (raw, json) Hash identifier: /iWhLoWyMOv5FjkCRCA8+2ERBgsgW7G2rlyDlntXENw= Subject key identifier: 30:EA:4E:04:E8:7E:F2:FC:8C:C6:94:C8:1C:AB:FF:B8:8F:54:C3:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B95C11785EFB1815607C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/412f26d2-6b34-37b5-a2a0-236c8a74836c.roa Signing time: Thu 19 Jun 2025 14:49:53 +0000 ROA not before: Thu 19 Jun 2025 14:49:53 +0000 ROA not after: Wed 17 Sep 2025 14:49:53 +0000 asID: 22773 IP address blocks: 2600:880a::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:95:c1:17:85:ef:b1:81:56:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:53 2025 GMT Not After : Sep 17 14:49:53 2025 GMT Subject: CN=5aac0a2a-9a2e-4ef3-9f1a-d5095c04e0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:4e:44:ce:72:14:ec:d4:1a:79:80:b4:3f: 10:74:d4:c5:14:10:8d:19:4f:c7:e9:b1:43:30:a3: 2e:30:90:62:c5:0e:98:5a:0e:26:09:f6:2b:6f:d9: 15:01:f5:51:82:4b:29:3a:bb:06:ac:b1:fb:3f:53: 41:28:a8:7a:86:07:e1:ca:37:61:7d:0c:06:fa:83: 2c:49:44:69:40:7d:58:7e:87:03:b3:b5:5d:31:60: b7:0b:c2:a9:ba:17:eb:21:24:fb:4a:6e:72:24:33: 85:90:6b:e5:0b:74:3e:01:9c:0a:c2:b1:d8:cf:c7: af:86:c8:8b:c4:28:ea:cf:2e:03:8a:52:5c:85:dd: ca:33:0f:52:2c:33:3c:6c:92:76:1e:39:55:25:bb: 79:37:6a:a2:4f:71:e6:0a:04:e5:43:60:0f:e3:56: 7a:f5:91:c9:05:49:4c:47:df:e6:cc:19:7a:71:c8: a7:66:b7:0b:0f:27:e4:b8:d0:5f:2c:72:1f:18:06: b9:53:e6:d7:ca:a8:f4:d2:1e:e3:46:63:69:f0:65: f3:96:4b:ac:c0:b7:92:1e:3b:ff:32:c0:89:ce:ab: d9:25:e9:cf:38:c1:9f:1d:86:e7:62:a5:27:4d:7b: dd:0f:c3:74:54:44:e4:d3:8c:4e:0b:ab:22:6e:be: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EA:4E:04:E8:7E:F2:FC:8C:C6:94:C8:1C:AB:FF:B8:8F:54:C3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/412f26d2-6b34-37b5-a2a0-236c8a74836c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0a:57:ba:1a:bd:32:c4:c6:94:37:00:be:58:94:6a:8d:62: 3d:e3:85:da:62:ee:98:56:9f:2c:70:5c:72:58:a6:76:34:ec: 74:c9:6c:a8:ca:a5:15:19:6f:27:47:4c:18:66:60:8c:52:26: 8b:f1:30:f4:d8:40:5f:2e:28:65:fa:54:5c:fa:16:61:f4:fd: 0e:f8:d5:18:6d:31:c0:89:ea:0d:f1:dc:2d:e6:01:3b:de:e9: f7:10:9f:d7:bb:24:a8:7a:a0:d6:f6:e9:9a:f5:ad:06:8e:ae: 71:aa:2a:11:4e:aa:88:39:49:c5:98:01:67:e1:7e:86:db:43: eb:7d:3c:45:2f:8c:c2:38:e6:2d:6a:eb:9e:31:70:c9:18:bd: df:c6:b6:4a:2a:62:92:5f:7c:59:9a:bf:5e:8d:a9:49:f9:b7: 80:d8:2a:2e:aa:0b:35:07:65:be:14:97:e2:7e:49:0b:64:14: 8f:fa:a8:c2:84:27:c1:a6:40:0f:24:67:9c:f5:1e:22:67:bd: d8:b4:7a:20:8d:95:49:96:3e:fa:55:02:1b:a3:72:e9:56:f6: 70:3e:9d:a4:35:5d:84:1c:9f:e1:9d:d3:7e:59:ae:f2:84:a7: 12:63:e6:f8:a7:24:cc:08:33:b7:92:be:1c:67:85:b1:ac:78: d5:0a:4d:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e5XBF4XvsYFWB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDk1M1oXDTI1MDkxNzE0NDk1M1owLzEtMCsGA1UEAxMk NWFhYzBhMmEtOWEyZS00ZWYzLTlmMWEtZDUwOTVjMDRlMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+RORM5yFOzUGnmAtD8QdNTFFBCNGU/H6bFD MKMuMJBixQ6YWg4mCfYrb9kVAfVRgkspOrsGrLH7P1NBKKh6hgfhyjdhfQwG+oMs SURpQH1YfocDs7VdMWC3C8KpuhfrIST7Sm5yJDOFkGvlC3Q+AZwKwrHYz8evhsiL xCjqzy4DilJchd3KMw9SLDM8bJJ2HjlVJbt5N2qiT3HmCgTlQ2AP41Z69ZHJBUlM R9/mzBl6ccinZrcLDyfkuNBfLHIfGAa5U+bXyqj00h7jRmNp8GXzlkuswLeSHjv/ MsCJzqvZJenPOMGfHYbnYqUnTXvdD8N0VETk04xOC6sibr5W2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDqTgTofvL8jMaUyByr/7iPVMO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDEyZjI2ZDItNmIzNC0z N2I1LWEyYTAtMjM2YzhhNzQ4MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYKV7oavTLExpQ3AL5YlGqNYj3jhdpi7phWnyxwXHJYpnY07HTJ bKjKpRUZbydHTBhmYIxSJovxMPTYQF8uKGX6VFz6FmH0/Q741RhtMcCJ6g3x3C3m ATve6fcQn9e7JKh6oNb26Zr1rQaOrnGqKhFOqog5ScWYAWfhfobbQ+t9PEUvjMI4 5i1q654xcMkYvd/GtkoqYpJffFmav16NqUn5t4DYKi6qCzUHZb4Ul+J+SQtkFI/6 qMKEJ8GmQA8kZ5z1HiJnvdi0eiCNlUmWPvpVAhujculW9nA+naQ1XYQcn+Gd035Z rvKEpxJj5vinJMwIM7eSvhxnhbGseNUKTUI= -----END CERTIFICATE-----Generated at Tue Jul 1 20:38:34 2025 by rpki-client