$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf80023-4a50-3d3e-9168-bd5226b9d564.roa File: 4bf80023-4a50-3d3e-9168-bd5226b9d564.roa (raw, json) Hash identifier: /rK0gd+hrHARuzEcl+geWpbA2U72218jd3tqGTxqDZk= Subject key identifier: 56:E8:09:F7:4E:49:26:9B:0F:57:AF:15:5C:7C:69:79:20:3F:CC:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A409C38737C8FA7256671A740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf80023-4a50-3d3e-9168-bd5226b9d564.roa Signing time: Fri 20 Jun 2025 09:07:16 +0000 ROA not before: Fri 20 Jun 2025 09:07:16 +0000 ROA not after: Thu 18 Sep 2025 09:07:16 +0000 asID: 22773 IP address blocks: 2600:8800:5648::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:9c:38:73:7c:8f:a7:25:66:71:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:07:16 2025 GMT Not After : Sep 18 09:07:16 2025 GMT Subject: CN=4b5c484c-0c41-4e66-b6d8-8645ca402fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:75:32:78:a4:9a:ef:f9:fe:03:ef:88:24:67: 69:fe:e6:74:b3:22:f0:7c:43:d1:42:99:52:e7:2f: 53:d5:8d:c3:65:ca:b9:3e:fa:4f:74:88:b2:db:6c: 2a:c7:3e:67:9a:7b:2a:bf:2c:f2:86:cc:78:bf:69: 70:2a:ae:7d:b1:fa:b2:a0:91:89:4f:5c:a6:d0:2e: db:7b:84:e5:f8:6c:53:26:0e:51:f5:56:fb:ca:b1: a3:0d:ba:ae:49:3a:b8:f4:0d:46:32:7a:50:bb:50: 08:a8:84:6e:9d:0b:4a:e2:1b:4c:62:09:4c:aa:f9: ea:3b:85:ea:f2:01:dc:fe:03:44:9a:6a:6f:31:4c: 9c:9f:4b:7f:68:bf:60:b5:b0:d4:51:c3:15:5e:69: ee:19:7e:73:05:90:76:51:78:be:ba:d6:6e:d6:fa: 1d:d5:4e:35:27:6a:9c:79:3a:4d:40:75:4a:40:ed: c4:c5:f4:2a:5a:59:30:13:b3:01:ab:24:cb:ed:c2: 80:48:25:0f:6c:f8:dd:79:86:1f:40:2f:cc:3c:a8: e3:11:8a:12:7a:e3:b3:99:c3:c0:2c:f8:d9:fe:ae: 4f:07:85:b6:bf:49:32:c0:3c:94:27:0e:fb:5f:5f: 1b:f8:b7:95:52:a7:5e:13:df:65:da:d8:c1:34:18: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E8:09:F7:4E:49:26:9B:0F:57:AF:15:5C:7C:69:79:20:3F:CC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf80023-4a50-3d3e-9168-bd5226b9d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5648::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cc:5a:da:c2:af:42:8c:4f:15:67:40:61:00:ee:36:ca:c5: 61:bd:d5:91:2d:cf:1e:ff:57:8f:ac:a2:86:28:3f:ec:dc:3a: 33:b2:d3:48:99:a7:75:2a:88:55:67:29:0e:94:81:aa:4e:af: fb:a7:e3:98:5c:ac:fd:33:07:f3:e6:e7:86:03:4b:68:a4:39: 5a:32:36:dd:29:f8:4a:87:18:02:8a:d4:ff:30:9b:9c:f2:fe: 7e:44:9d:08:c2:b1:a8:db:9e:8d:bf:05:40:39:a5:ef:53:61: 93:30:f8:a1:6a:16:23:c3:fd:b2:73:0f:df:73:9b:b3:52:34: c2:c6:5e:36:44:1e:39:71:52:cd:a1:67:48:a8:51:6b:36:1a: 8a:bc:07:05:90:2a:52:20:79:c0:32:08:93:b7:56:f1:49:ae: 9f:28:c4:06:42:7d:7b:fc:f3:61:96:f9:e0:0d:2e:9d:96:a0: 47:f4:6c:84:08:78:93:c0:68:0c:c7:65:ab:a9:e7:2e:ce:8d: 6c:80:32:3e:c2:c3:af:a7:e0:c8:90:57:99:a2:e8:f1:05:c8: 55:21:d2:32:25:9a:fb:80:ab:6a:bc:df:86:7c:1c:74:bf:8d: e1:3d:4f:13:9f:e9:5d:3b:1b:03:a6:42:23:30:f2:6f:75:3c: de:63:db:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpAnDhzfI+nJWZxp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MDcxNloXDTI1MDkxODA5MDcxNlowLzEtMCsGA1UEAxMk NGI1YzQ4NGMtMGM0MS00ZTY2LWI2ZDgtODY0NWNhNDAyZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHUyeKSa7/n+A++IJGdp/uZ0syLwfEPRQplS 5y9T1Y3DZcq5PvpPdIiy22wqxz5nmnsqvyzyhsx4v2lwKq59sfqyoJGJT1ym0C7b e4Tl+GxTJg5R9Vb7yrGjDbquSTq49A1GMnpQu1AIqIRunQtK4htMYglMqvnqO4Xq 8gHc/gNEmmpvMUycn0t/aL9gtbDUUcMVXmnuGX5zBZB2UXi+utZu1vod1U41J2qc eTpNQHVKQO3ExfQqWlkwE7MBqyTL7cKASCUPbPjdeYYfQC/MPKjjEYoSeuOzmcPA LPjZ/q5PB4W2v0kywDyUJw77X18b+LeVUqdeE99l2tjBNBhWqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFboCfdOSSabD1evFVx8aXkgP8y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJmODAwMjMtNGE1MC0z ZDNlLTkxNjgtYmQ1MjI2YjlkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFZI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFPMWtrCr0KMTxVnQGEA7jbKxWG91ZEtzx7/V4+sooYoP+zcOjOy 00iZp3UqiFVnKQ6UgapOr/un45hcrP0zB/Pm54YDS2ikOVoyNt0p+EqHGAKK1P8w m5zy/n5EnQjCsajbno2/BUA5pe9TYZMw+KFqFiPD/bJzD99zm7NSNMLGXjZEHjlx Us2hZ0ioUWs2Goq8BwWQKlIgecAyCJO3VvFJrp8oxAZCfXv882GW+eANLp2WoEf0 bIQIeJPAaAzHZaup5y7OjWyAMj7Cw6+n4MiQV5mi6PEFyFUh0jIlmvuAq2q834Z8 HHS/jeE9TxOf6V07GwOmQiMw8m91PN5j208= -----END CERTIFICATE-----Generated at Wed Jul 2 03:41:44 2025 by rpki-client