$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6afc1ab6-4d86-34ce-beae-099c9303d34a.roa File: 6afc1ab6-4d86-34ce-beae-099c9303d34a.roa (raw, json) Hash identifier: 0xnC0BUyNuKQ54vaG2pd/QdOOSyfMnAJA0faZ5DsvJI= Subject key identifier: C9:E6:0E:96:F0:72:DA:F2:57:2A:BE:9F:17:81:77:5D:61:CE:98:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A3D13DB7303A8958DB4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6afc1ab6-4d86-34ce-beae-099c9303d34a.roa Signing time: Thu 19 Jun 2025 14:47:11 +0000 ROA not before: Thu 19 Jun 2025 14:47:11 +0000 ROA not after: Wed 17 Sep 2025 14:47:11 +0000 asID: 22773 IP address blocks: 2600:8800:6e20::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:3d:13:db:73:03:a8:95:8d:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:47:11 2025 GMT Not After : Sep 17 14:47:11 2025 GMT Subject: CN=7e8db699-dde7-4775-8b0a-d0c4fe99604c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:e1:4c:f9:9e:13:a6:5c:5b:32:04:b4:cb: bc:76:e5:03:34:e1:57:36:8d:4e:a1:31:1c:02:90: 2c:ca:44:8c:52:83:a6:33:a0:22:d7:55:3d:41:80: c5:b9:32:ac:52:e2:c2:c9:09:7b:4e:62:da:49:2a: 68:6c:d1:13:35:cb:c4:69:31:0d:e7:31:6e:10:63: d5:e0:5a:3f:7f:c7:02:88:0b:11:4e:63:bc:ea:ac: 57:7f:d2:1c:ff:66:68:6b:b2:07:fa:09:ea:e4:b1: 05:af:96:43:81:72:31:48:20:52:09:8e:54:53:af: f9:9b:ad:f6:2e:bf:34:e4:f3:b2:28:03:01:11:4b: 31:cf:95:43:e0:3f:aa:81:c7:ce:83:a2:1b:f4:61: 10:7b:8d:dc:83:3e:a4:2a:2e:c2:38:b3:3a:16:0e: 9b:8a:f3:c5:e4:84:e7:04:a7:b1:30:91:12:07:81: 02:7a:34:f6:a5:33:25:9d:2a:47:3a:0c:51:cb:ad: a7:3f:39:b3:df:7a:39:be:ef:b7:75:70:df:0e:9f: d8:6c:aa:fd:8b:7f:bd:f6:8e:64:e9:23:76:24:13: 83:61:f2:75:4f:d1:2f:90:9d:4c:8c:e7:c3:c6:78: 28:be:34:ea:bd:3f:d4:69:aa:4e:4e:fb:28:62:a1: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E6:0E:96:F0:72:DA:F2:57:2A:BE:9F:17:81:77:5D:61:CE:98:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6afc1ab6-4d86-34ce-beae-099c9303d34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:6e20::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:e9:4f:15:ae:d9:d7:e5:7d:e1:47:05:6e:e2:19:fd:0d: 3a:1f:6b:42:68:69:bb:1b:0e:c1:cb:3c:02:98:a1:be:67:74: d8:68:0d:d0:fe:6c:fa:4d:8a:3b:e5:ee:99:c4:e1:a0:5d:84: d4:33:39:49:1c:c4:23:54:2e:0a:fd:79:86:5e:33:d1:be:e4: 10:2d:b9:b2:bd:3e:72:d6:32:1c:fd:55:4e:cf:bf:b4:a8:89: c9:4a:01:c7:1e:5b:5f:d5:c3:1a:ba:7a:ad:a4:b7:72:63:52: 0b:aa:f6:3c:f1:08:e6:d8:ba:15:5b:6f:21:38:e9:18:be:14: 2a:97:c0:98:d8:d8:ad:4c:07:08:ab:46:95:5c:a1:35:7f:58: de:43:1b:3e:e6:9e:ad:85:d6:73:21:77:50:0b:91:3f:9e:f6: 06:8e:1f:ed:02:f8:7a:9c:1a:79:41:84:2f:4f:ea:06:e9:dd: 7d:a6:e4:9f:52:9f:3c:64:e8:2d:7a:f3:5e:b0:da:39:ec:7f: 87:f0:74:fa:ee:4f:44:e8:4c:c9:88:8e:aa:d7:3f:61:8a:e3: 41:0a:91:a1:05:01:3d:51:d1:5e:c6:4f:e1:9c:5b:17:27:a1: bd:4d:1a:fe:32:2e:e7:35:01:b8:50:e8:53:5c:eb:4b:69:3b: 05:e8:96:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ej0T23MDqJWNtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDcxMVoXDTI1MDkxNzE0NDcxMVowLzEtMCsGA1UEAxMk N2U4ZGI2OTktZGRlNy00Nzc1LThiMGEtZDBjNGZlOTk2MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqALhTPmeE6ZcWzIEtMu8duUDNOFXNo1OoTEc ApAsykSMUoOmM6Ai11U9QYDFuTKsUuLCyQl7TmLaSSpobNETNcvEaTEN5zFuEGPV 4Fo/f8cCiAsRTmO86qxXf9Ic/2Zoa7IH+gnq5LEFr5ZDgXIxSCBSCY5UU6/5m632 Lr805POyKAMBEUsxz5VD4D+qgcfOg6Ib9GEQe43cgz6kKi7COLM6Fg6bivPF5ITn BKexMJESB4ECejT2pTMlnSpHOgxRy62nPzmz33o5vu+3dXDfDp/YbKr9i3+99o5k 6SN2JBODYfJ1T9EvkJ1MjOfDxngovjTqvT/UaapOTvsoYqHp8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnmDpbwctryVyq+nxeBd11hzphWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmFmYzFhYjYtNGQ4Ni0z NGNlLWJlYWUtMDk5YzkzMDNkMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAG4g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQq6U8VrtnX5X3hRwVu4hn9DTofa0JoabsbDsHLPAKYob5ndNho DdD+bPpNijvl7pnE4aBdhNQzOUkcxCNULgr9eYZeM9G+5BAtubK9PnLWMhz9VU7P v7SoiclKAcceW1/Vwxq6eq2kt3JjUguq9jzxCObYuhVbbyE46Ri+FCqXwJjY2K1M BwirRpVcoTV/WN5DGz7mnq2F1nMhd1ALkT+e9gaOH+0C+HqcGnlBhC9P6gbp3X2m 5J9Snzxk6C16816w2jnsf4fwdPruT0ToTMmIjqrXP2GK40EKkaEFAT1R0V7GT+Gc Wxcnob1NGv4yLuc1AbhQ6FNc60tpOwXolk0= -----END CERTIFICATE-----Generated at Fri Jul 4 02:18:53 2025 by rpki-client