$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64ced400-1fa0-3bf8-b4cd-de0d181eb548.roa File: 64ced400-1fa0-3bf8-b4cd-de0d181eb548.roa (raw, json) Hash identifier: rYaMyJDBk64sd0RUH/LCVeLmi5wjp/eMp0JB4li771U= Subject key identifier: 87:8C:E6:17:15:13:E8:69:61:40:D1:74:C8:93:A9:17:04:68:FA:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B9DC8327BEB018589A940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64ced400-1fa0-3bf8-b4cd-de0d181eb548.roa Signing time: Thu 19 Jun 2025 14:49:57 +0000 ROA not before: Thu 19 Jun 2025 14:49:57 +0000 ROA not after: Wed 17 Sep 2025 14:49:57 +0000 asID: 22773 IP address blocks: 2600:880a:28::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:9d:c8:32:7b:eb:01:85:89:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:57 2025 GMT Not After : Sep 17 14:49:57 2025 GMT Subject: CN=19053cc3-77b2-4306-8eb8-2a55dcf11cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:6a:38:49:e5:8a:21:6e:09:01:a9:25:27: 7c:9a:c5:38:79:9a:5f:69:2e:71:e9:62:1e:1f:32: 6e:13:82:77:e0:93:97:2f:b9:94:68:69:19:32:ba: 2a:19:d0:17:bc:fd:58:e0:ff:f4:29:98:b6:f1:00: 43:f7:e6:40:f5:e7:bb:6e:5c:40:18:a5:4e:d2:06: ed:89:29:ec:0f:6c:00:c2:89:b3:49:41:0b:39:ba: 98:74:72:c7:db:10:d0:16:6c:73:ce:0b:7f:68:7d: 03:ad:ee:a3:53:ea:4c:aa:1b:12:95:f7:ad:27:60: e4:6d:b8:02:e5:18:19:db:3c:e4:b8:97:5c:7b:25: 0b:25:ce:18:a3:5a:58:77:58:1a:fc:d8:13:6f:cb: 08:c3:ac:69:1e:a3:4d:b7:94:8e:ce:89:ef:a9:b7: 25:e6:59:00:40:89:8a:73:47:d0:10:a9:e9:c8:ab: bc:05:dd:91:fb:57:68:60:8a:78:60:c4:07:ba:a7: 93:5e:22:4e:3f:31:2a:03:ce:4c:c3:0f:01:d2:98: b3:42:48:ac:bd:c3:31:b1:35:f0:fa:6f:62:45:45: 21:e5:19:6e:5f:4c:79:48:4f:50:c2:25:48:70:95: 3e:01:dc:98:86:ed:9c:1c:79:fd:0c:ec:29:98:b3: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8C:E6:17:15:13:E8:69:61:40:D1:74:C8:93:A9:17:04:68:FA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64ced400-1fa0-3bf8-b4cd-de0d181eb548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:28::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bb:47:45:57:db:49:39:95:50:a2:16:b3:f3:7b:4a:13:21: 2f:39:2b:8f:18:10:aa:c4:be:f0:1f:45:fa:e5:bb:1f:5e:31: e0:81:90:bf:04:78:4e:13:a1:9d:2f:9c:24:fa:e2:ca:66:6c: f8:51:34:e7:37:f0:bd:c6:da:ff:7a:d3:93:80:68:ed:cd:2b: 8b:b6:7c:09:15:3e:16:e1:de:bc:3a:38:6f:bb:80:49:bb:78: d2:8e:d6:09:d5:9e:1f:33:4a:44:15:5e:2c:46:5c:db:9b:66: 8d:9d:3e:38:df:13:ae:a0:91:43:9c:c0:f2:92:f6:3a:fb:99: 40:fe:7d:ba:0e:95:93:88:6f:cf:27:5a:73:47:99:c7:f8:d7: c7:cd:76:27:ba:b3:0a:3a:c1:e4:e2:7b:2c:5e:86:46:cf:6c: 21:8a:97:14:9f:dd:f5:bf:e4:59:60:9f:dd:eb:88:18:19:50: 8a:35:e9:f5:6a:1a:0b:10:a5:45:21:d2:b3:06:ea:e7:05:e2: 2d:7d:da:77:9a:ff:d9:e3:60:41:36:97:e8:7f:2e:7f:fb:92: 66:71:99:d2:39:57:6f:4e:86:dc:99:36:ad:dd:26:b4:cb:c5: b8:3d:70:31:9f:a5:ea:7e:24:86:7a:0d:8d:22:8c:22:a5:15: 12:74:9e:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e53IMnvrAYWJqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDk1N1oXDTI1MDkxNzE0NDk1N1owLzEtMCsGA1UEAxMk MTkwNTNjYzMtNzdiMi00MzA2LThlYjgtMmE1NWRjZjExY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7lqOEnliiFuCQGpJSd8msU4eZpfaS5x6WIe HzJuE4J34JOXL7mUaGkZMroqGdAXvP1Y4P/0KZi28QBD9+ZA9ee7blxAGKVO0gbt iSnsD2wAwomzSUELObqYdHLH2xDQFmxzzgt/aH0Dre6jU+pMqhsSlfetJ2DkbbgC 5RgZ2zzkuJdceyULJc4Yo1pYd1ga/NgTb8sIw6xpHqNNt5SOzonvqbcl5lkAQImK c0fQEKnpyKu8Bd2R+1doYIp4YMQHuqeTXiJOPzEqA85Mww8B0pizQkisvcMxsTXw +m9iRUUh5RluX0x5SE9QwiVIcJU+AdyYhu2cHHn9DOwpmLMuwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeM5hcVE+hpYUDRdMiTqRcEaPqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjRjZWQ0MDAtMWZhMC0z YmY4LWI0Y2QtZGUwZDE4MWViNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABG7R0VX20k5lVCiFrPze0oTIS85K48YEKrEvvAfRfrlux9eMeCB kL8EeE4ToZ0vnCT64spmbPhRNOc38L3G2v9605OAaO3NK4u2fAkVPhbh3rw6OG+7 gEm7eNKO1gnVnh8zSkQVXixGXNubZo2dPjjfE66gkUOcwPKS9jr7mUD+fboOlZOI b88nWnNHmcf418fNdie6swo6weTieyxehkbPbCGKlxSf3fW/5Flgn93riBgZUIo1 6fVqGgsQpUUh0rMG6ucF4i192nea/9njYEE2l+h/Ln/7kmZxmdI5V29OhtyZNq3d JrTLxbg9cDGfpep+JIZ6DY0ijCKlFRJ0nsI= -----END CERTIFICATE-----Generated at Wed Jul 2 02:01:49 2025 by rpki-client