$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fc343b6-8c32-3c72-894d-2343f54a7eb4.roa File: 4fc343b6-8c32-3c72-894d-2343f54a7eb4.roa (raw, json) Hash identifier: +dCHhBFQ4RjXuzbnhAQaxHtdByusBA//pLxMzGLKUh8= Subject key identifier: C0:81:06:E7:CC:AE:78:C7:0B:78:83:5E:C6:79:BB:E3:13:A7:67:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B1ECC0B92E4DE5D4CBF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fc343b6-8c32-3c72-894d-2343f54a7eb4.roa Signing time: Thu 19 Jun 2025 14:48:57 +0000 ROA not before: Thu 19 Jun 2025 14:48:57 +0000 ROA not after: Wed 17 Sep 2025 14:48:57 +0000 asID: 22773 IP address blocks: 2600:8800:af12::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:1e:cc:0b:92:e4:de:5d:4c:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:48:57 2025 GMT Not After : Sep 17 14:48:57 2025 GMT Subject: CN=f20e623d-feb0-447e-a34d-1d7b28e45ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:b7:fd:07:bd:0e:fc:63:81:c1:2b:78:1b: 8e:c6:77:31:ce:7b:1d:00:4f:20:12:a2:df:89:e2: 1e:0a:9b:c4:91:fd:f5:71:42:c9:43:84:b9:3c:05: 29:67:c8:a4:6b:5d:64:83:b1:3f:67:2e:ba:b6:65: 81:46:bf:79:dc:3b:83:1c:c0:94:32:d0:39:0c:59: d3:0a:b0:5f:c9:a8:63:b0:d7:e6:62:a0:46:bb:87: 1f:df:fa:59:4c:a7:59:2c:f0:8d:1f:fe:72:3f:c9: 32:ef:6c:78:be:80:c6:94:21:c1:08:ee:aa:56:81: 79:d7:82:a9:4d:3d:31:85:38:50:27:96:99:42:a4: c3:db:35:62:d7:03:53:a9:90:a5:f0:53:56:d2:a4: cd:c9:ac:ba:c0:45:18:65:d6:34:63:93:79:e4:6a: 77:fe:0d:3c:47:62:dd:60:7e:80:da:93:23:15:51: 30:da:93:cf:82:ed:85:12:9e:71:6d:5d:94:95:8b: df:44:3f:ac:af:2b:6c:af:4f:3b:95:19:b6:d5:11: c5:d4:57:a4:2d:89:f5:8f:1e:11:a6:50:8a:bf:11: 82:d8:62:c8:8e:53:54:a6:b3:c6:7d:dc:71:27:08: 50:a3:98:01:8f:01:d3:32:6e:07:c0:03:32:33:d4: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:81:06:E7:CC:AE:78:C7:0B:78:83:5E:C6:79:BB:E3:13:A7:67:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fc343b6-8c32-3c72-894d-2343f54a7eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:af12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ae:67:56:da:8b:ae:ac:1e:bb:80:6a:fb:d7:05:30:ae:79: 26:ae:e1:fe:45:fe:99:8e:79:be:64:19:70:4c:1a:49:41:c9: 2a:79:6d:4a:06:cb:d3:fc:c0:36:eb:25:4a:ce:d8:21:01:80: 95:2f:96:f0:01:22:db:44:12:0f:e0:13:ec:40:87:8f:76:96: 78:14:88:75:8c:a1:5a:b3:f7:b9:f1:80:1c:99:35:d2:55:4e: 9c:68:51:a1:48:1f:3f:f6:7f:02:b9:14:e8:d9:f2:51:8e:cf: 23:df:20:d9:cb:11:3c:35:cd:ff:c4:a0:8d:16:62:f7:8a:a9: ae:70:23:78:31:64:28:2d:72:ad:5a:77:77:36:b5:c8:4b:63: cf:0e:1e:eb:e9:96:f2:0d:46:00:7d:0e:57:b9:19:a4:79:c9: c7:ab:20:fe:7a:5f:c1:c1:2f:a4:74:c8:55:f0:4e:1e:ac:b7: d3:f5:1b:0f:ff:b4:23:91:5c:fe:c0:76:fa:8d:20:09:60:7b: 99:77:25:60:2e:2e:8e:9c:cc:c8:ad:f6:3d:ee:25:e8:58:f6: 59:5e:79:31:64:9e:1a:a9:bf:49:af:c8:59:9f:10:c2:cc:ae: de:6d:58:a1:0b:64:e2:aa:3d:f4:af:86:5e:aa:7d:e2:8a:0d: 52:83:a2:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ex7MC5Lk3l1MvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDg1N1oXDTI1MDkxNzE0NDg1N1owLzEtMCsGA1UEAxMk ZjIwZTYyM2QtZmViMC00NDdlLWEzNGQtMWQ3YjI4ZTQ1YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJK3/Qe9DvxjgcEreBuOxncxznsdAE8gEqLf ieIeCpvEkf31cULJQ4S5PAUpZ8ika11kg7E/Zy66tmWBRr953DuDHMCUMtA5DFnT CrBfyahjsNfmYqBGu4cf3/pZTKdZLPCNH/5yP8ky72x4voDGlCHBCO6qVoF514Kp TT0xhThQJ5aZQqTD2zVi1wNTqZCl8FNW0qTNyay6wEUYZdY0Y5N55Gp3/g08R2Ld YH6A2pMjFVEw2pPPgu2FEp5xbV2UlYvfRD+srytsr087lRm21RHF1FekLYn1jx4R plCKvxGC2GLIjlNUprPGfdxxJwhQo5gBjwHTMm4HwAMyM9ROIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCBBufMrnjHC3iDXsZ5u+MTp2dqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZjMzQzYjYtOGMzMi0z YzcyLTg5NGQtMjM0M2Y1NGE3ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAK8S MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuuZ1bai66sHruAavvXBTCueSau4f5F/pmOeb5kGXBMGklBySp5 bUoGy9P8wDbrJUrO2CEBgJUvlvABIttEEg/gE+xAh492lngUiHWMoVqz97nxgByZ NdJVTpxoUaFIHz/2fwK5FOjZ8lGOzyPfINnLETw1zf/EoI0WYveKqa5wI3gxZCgt cq1ad3c2tchLY88OHuvplvINRgB9Dle5GaR5ycerIP56X8HBL6R0yFXwTh6st9P1 Gw//tCORXP7AdvqNIAlge5l3JWAuLo6czMit9j3uJehY9lleeTFknhqpv0mvyFmf EMLMrt5tWKELZOKqPfSvhl6qfeKKDVKDos8= -----END CERTIFICATE-----Generated at Tue Jul 1 21:11:31 2025 by rpki-client