$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70b95f99-11ed-395d-8a59-ba6602d3e63e.roa File: 70b95f99-11ed-395d-8a59-ba6602d3e63e.roa (raw, json) Hash identifier: yOcbWY8ojD3iAg62vZG6buSZ5LEX02fCQns/VKE6rqg= Subject key identifier: 57:84:71:B1:83:9D:22:AF:30:0F:87:AE:37:C4:CD:80:2C:FA:77:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E789A26E98D4356F2B958C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70b95f99-11ed-395d-8a59-ba6602d3e63e.roa Signing time: Thu 19 Jun 2025 14:43:53 +0000 ROA not before: Thu 19 Jun 2025 14:43:53 +0000 ROA not after: Wed 17 Sep 2025 14:43:53 +0000 asID: 22773 IP address blocks: 2001:579:8428::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:9a:26:e9:8d:43:56:f2:b9:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:43:53 2025 GMT Not After : Sep 17 14:43:53 2025 GMT Subject: CN=843eb38c-d17f-4ecc-b2e7-f62e9ccbd4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:0c:ff:95:1a:72:3e:c0:71:4a:8b:ae:93: bb:53:63:ff:3b:44:53:a4:3f:e1:20:17:88:83:5c: 98:0c:4e:0b:5a:48:92:56:2d:c3:4b:ef:63:2e:24: 70:52:17:36:11:79:81:36:55:9c:e1:72:7c:26:f9: de:91:4f:3c:aa:c8:bb:dd:91:d0:45:85:3a:54:06: 40:f5:2d:42:c0:31:e8:84:5b:68:22:38:7b:4e:9f: 62:54:3f:4c:28:78:f7:0c:99:cf:9a:dd:80:63:0a: 9c:c8:e3:ed:16:d5:04:f0:f2:72:d5:37:e4:1d:b1: 68:1d:00:ae:a0:45:cd:39:a5:e3:18:3b:74:f1:5e: 76:a8:7b:5c:87:88:20:16:a1:f4:3f:58:66:38:18: e2:53:8a:f5:55:e3:fe:44:ca:f4:12:b0:eb:42:18: e9:1e:df:48:a9:bf:c1:97:5e:16:49:81:ea:c8:5f: f1:4c:c2:9c:44:64:ff:eb:8d:a7:11:72:11:6a:33: b9:c8:01:7c:8c:57:52:04:e5:32:f2:8f:5b:5c:29: 4d:45:e8:bb:52:ce:78:14:e5:6b:1f:74:ab:ff:d8: cf:db:b4:92:72:22:5d:3c:11:a6:1f:1b:f8:de:90: f1:da:56:cf:be:97:a3:3c:91:fb:51:5e:6a:c5:fc: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:84:71:B1:83:9D:22:AF:30:0F:87:AE:37:C4:CD:80:2C:FA:77:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70b95f99-11ed-395d-8a59-ba6602d3e63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:8428::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a3:5b:be:30:8d:4d:34:03:72:63:d4:e5:b6:33:bd:55:b6: 5b:44:79:7d:31:80:16:26:56:f5:11:12:b8:73:ec:e8:9e:5a: 4c:98:3f:dc:cb:58:a5:71:d9:3e:14:c8:7f:07:e2:22:60:48: 6a:13:73:fb:95:75:c0:60:5a:10:29:8e:28:39:46:c7:61:81: 5b:14:7f:03:b6:fb:a7:a3:da:bc:83:6e:b2:a8:6e:c7:09:c4: 1d:35:32:4c:0a:c8:bf:b1:2d:00:8b:da:9b:03:c9:bf:ed:36: 1f:2b:2e:04:d1:6b:cd:7b:4f:e3:e4:7e:15:27:5e:f0:c7:93: 8b:ec:1f:ac:63:6d:ad:78:a0:93:fe:46:c0:50:6f:5c:68:72: 32:6a:0c:d6:e1:59:c9:e1:91:84:96:97:1d:33:7d:bf:0f:78: 99:e4:d5:d5:d2:dd:28:5b:f0:88:98:93:5e:cd:b0:d9:51:99: 69:34:d2:bc:f1:7c:40:12:57:c2:17:62:b1:27:07:6c:fa:e5: e0:f5:2e:af:4c:b2:d2:3c:71:a6:8e:93:98:c3:1d:da:91:ab: f1:14:11:be:32:31:95:b4:75:1c:70:2c:89:83:58:39:3b:fd: d2:cb:bf:bc:04:0c:6a:7e:5f:4b:de:56:b7:00:58:07:19:06: 14:18:89:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eJom6Y1DVvK5WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDM1M1oXDTI1MDkxNzE0NDM1M1owLzEtMCsGA1UEAxMk ODQzZWIzOGMtZDE3Zi00ZWNjLWIyZTctZjYyZTljY2JkNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKAM/5Uacj7AcUqLrpO7U2P/O0RTpD/hIBeI g1yYDE4LWkiSVi3DS+9jLiRwUhc2EXmBNlWc4XJ8JvnekU88qsi73ZHQRYU6VAZA 9S1CwDHohFtoIjh7Tp9iVD9MKHj3DJnPmt2AYwqcyOPtFtUE8PJy1TfkHbFoHQCu oEXNOaXjGDt08V52qHtch4ggFqH0P1hmOBjiU4r1VeP+RMr0ErDrQhjpHt9Iqb/B l14WSYHqyF/xTMKcRGT/642nEXIRajO5yAF8jFdSBOUy8o9bXClNRei7Us54FOVr H3Sr/9jP27SSciJdPBGmHxv43pDx2lbPvpejPJH7UV5qxfyEFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFeEcbGDnSKvMA+HrjfEzYAs+ndDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBiOTVmOTktMTFlZC0z OTVkLThhNTktYmE2NjAyZDNlNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYQo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyjW74wjU00A3Jj1OW2M71VtltEeX0xgBYmVvURErhz7OieWkyY P9zLWKVx2T4UyH8H4iJgSGoTc/uVdcBgWhApjig5RsdhgVsUfwO2+6ej2ryDbrKo bscJxB01MkwKyL+xLQCL2psDyb/tNh8rLgTRa817T+PkfhUnXvDHk4vsH6xjba14 oJP+RsBQb1xocjJqDNbhWcnhkYSWlx0zfb8PeJnk1dXS3Shb8IiYk17NsNlRmWk0 0rzxfEASV8IXYrEnB2z65eD1Lq9MstI8caaOk5jDHdqRq/EUEb4yMZW0dRxwLImD WDk7/dLLv7wEDGp+X0veVrcAWAcZBhQYifg= -----END CERTIFICATE-----Generated at Wed Jul 2 13:14:22 2025 by rpki-client