$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43b9954a-7073-34f4-bb00-b3f0846a044d.roa File: 43b9954a-7073-34f4-bb00-b3f0846a044d.roa (raw, json) Hash identifier: iNTjiR+uDDvrDulrn4Sh9XtiyFZElimJb8ddGjMvGi8= Subject key identifier: 0F:3D:71:03:32:DE:BB:04:60:2C:19:0E:00:DA:F4:83:60:1C:DB:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7941EBF6C34AA5E2C62900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43b9954a-7073-34f4-bb00-b3f0846a044d.roa Signing time: Thu 19 Jun 2025 14:45:12 +0000 ROA not before: Thu 19 Jun 2025 14:45:12 +0000 ROA not after: Wed 17 Sep 2025 14:45:12 +0000 asID: 22773 IP address blocks: 2600:8800:2f8a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:41:eb:f6:c3:4a:a5:e2:c6:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:45:12 2025 GMT Not After : Sep 17 14:45:12 2025 GMT Subject: CN=17c96067-67f9-4639-ae19-46f9549a8ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:ed:ad:3a:6d:fe:cf:c7:f7:91:bb:1f:cf: 11:ec:60:b4:0a:ee:59:df:7e:1c:73:84:0e:b3:cb: 20:91:ea:fe:d4:28:fa:0b:3c:12:76:a8:35:6d:df: 63:12:9e:d9:ea:1d:0a:16:9a:82:4c:dd:aa:1a:b9: de:75:04:d7:84:10:a8:c4:5a:f1:c6:98:01:12:62: 30:2d:30:a8:5e:00:75:4e:74:1b:68:00:59:00:f5: 1f:ba:8a:38:5e:5f:3c:c8:23:10:ca:bc:3e:f4:6d: e4:fc:30:a9:90:58:44:bd:81:4b:cf:f2:68:9b:ba: 12:00:6c:68:6f:7c:ff:a2:5e:9b:c6:ce:f0:78:5b: 6d:ef:13:24:95:16:d9:e4:ef:91:06:b8:88:d7:8b: 1a:e8:d8:9f:b1:d3:b6:cf:11:5a:73:be:03:92:d0: 72:0a:bb:e0:75:e1:7d:8e:77:dc:e3:bf:89:33:80: 43:dd:9e:bc:45:d2:a9:15:ed:40:f2:46:17:22:17: dc:5b:76:b7:6c:12:e4:28:03:38:b3:d8:5d:f4:f7: 78:67:95:ce:f6:a5:2e:ea:38:4b:66:60:88:cd:98: e4:94:18:41:10:cf:5f:2d:c7:ca:68:02:32:87:2c: c0:f2:75:0e:1c:b8:ae:1d:02:04:70:4a:bb:ad:4f: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:71:03:32:DE:BB:04:60:2C:19:0E:00:DA:F4:83:60:1C:DB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43b9954a-7073-34f4-bb00-b3f0846a044d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2f8a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:33:12:49:61:1c:59:a0:ed:37:d2:bb:54:85:4d:52:5a:af: ff:17:4e:aa:bf:84:2b:ee:0e:9d:96:f6:ef:8a:22:55:53:eb: ae:1d:d6:ba:00:b2:9c:a2:77:9a:b6:16:d7:02:f1:d0:8c:dc: f8:3d:e2:14:fd:05:49:e5:6b:e3:9c:b4:1e:25:13:b7:34:6f: 5c:bd:77:11:f7:03:d0:0d:b1:42:8b:0d:c2:06:b6:f4:68:b7: 62:7e:e4:94:a7:50:f7:c6:f9:74:a4:f5:ae:99:98:be:6c:8d: 3b:aa:81:db:fa:98:0b:43:ce:a0:88:df:96:9e:bf:7d:91:85: a9:81:6c:3b:ed:5e:ae:37:ed:b6:de:58:e4:0e:fe:20:e5:1e: e9:98:bc:0e:0a:04:f9:f6:1a:dc:5b:6d:25:af:8f:5a:66:fe: e7:c5:e2:aa:65:66:da:29:00:26:47:ef:34:4e:bb:66:76:08: f3:08:c5:57:4c:86:99:2d:4e:83:f7:f4:83:99:c2:f0:c3:fc: ea:b1:bd:ca:0b:d4:13:be:8e:54:16:39:94:96:a6:91:a4:e0: 68:4f:40:23:7c:2e:ef:11:df:f2:45:f4:e6:a8:c6:ca:e8:4b: e5:a3:4f:dc:8e:99:d0:0f:0b:72:e1:4f:14:5e:62:04:e4:00: c4:bc:de:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eUHr9sNKpeLGKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDUxMloXDTI1MDkxNzE0NDUxMlowLzEtMCsGA1UEAxMk MTdjOTYwNjctNjdmOS00NjM5LWFlMTktNDZmOTU0OWE4ZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1jtrTpt/s/H95G7H88R7GC0Cu5Z334cc4QO s8sgker+1Cj6CzwSdqg1bd9jEp7Z6h0KFpqCTN2qGrnedQTXhBCoxFrxxpgBEmIw LTCoXgB1TnQbaABZAPUfuoo4Xl88yCMQyrw+9G3k/DCpkFhEvYFLz/Jom7oSAGxo b3z/ol6bxs7weFtt7xMklRbZ5O+RBriI14sa6NifsdO2zxFac74DktByCrvgdeF9 jnfc47+JM4BD3Z68RdKpFe1A8kYXIhfcW3a3bBLkKAM4s9hd9Pd4Z5XO9qUu6jhL ZmCIzZjklBhBEM9fLcfKaAIyhyzA8nUOHLiuHQIEcEq7rU8kVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA89cQMy3rsEYCwZDgDa9INgHNvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNiOTk1NGEtNzA3My0z NGY0LWJiMDAtYjNmMDg0NmEwNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAC+K MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMzEklhHFmg7TfSu1SFTVJar/8XTqq/hCvuDp2W9u+KIlVT664d 1roAspyid5q2FtcC8dCM3Pg94hT9BUnla+OctB4lE7c0b1y9dxH3A9ANsUKLDcIG tvRot2J+5JSnUPfG+XSk9a6ZmL5sjTuqgdv6mAtDzqCI35aev32RhamBbDvtXq43 7bbeWOQO/iDlHumYvA4KBPn2GtxbbSWvj1pm/ufF4qplZtopACZH7zROu2Z2CPMI xVdMhpktToP39IOZwvDD/OqxvcoL1BO+jlQWOZSWppGk4GhPQCN8Lu8R3/JF9Oao xsroS+WjT9yOmdAPC3LhTxReYgTkAMS83qc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:28:09 2025 by rpki-client