$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa File: 843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa (raw, json) Hash identifier: 7VjeCq1k7XwXEAJP5H/o1j0MHwMLhXJtpwFKJX7VG6Y= Subject key identifier: 6F:33:CE:E7:B3:C8:0F:BB:84:D5:4A:05:0B:F2:F0:A1:E7:34:35:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A2ABB00901D9633B911429DA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 2001:579:a01d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:bb:00:90:1d:96:33:b9:11:42:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2016aedf-47c4-4335-9847-bef1a22a84ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:9d:90:5d:64:af:ac:20:49:b8:f6:4a:20: d6:86:fe:07:7f:4d:5c:68:2b:86:c5:55:c1:3b:02: 3d:9d:e7:f6:66:b4:12:5c:44:51:88:0b:60:e0:40: ff:37:36:3d:59:3a:ff:3e:19:88:bb:27:59:5f:4a: 8d:c2:83:12:02:e2:8b:1d:78:78:d9:68:01:5e:b9: f1:79:4e:1f:79:99:a4:d3:07:7a:be:e9:18:01:f1: 86:98:1d:ef:e9:ae:40:9b:73:dc:bc:1c:e0:7e:0e: 53:96:d5:23:f6:a1:93:bf:70:c1:9a:fe:dd:67:3b: c9:5d:6c:f5:a1:93:05:68:96:c2:e0:38:8c:47:5b: 86:36:c7:1e:a3:53:71:7a:9f:e7:fa:83:42:43:f0: 36:e7:96:ac:3f:3f:a5:79:99:2b:2d:56:d1:e0:2f: b8:44:d4:3a:52:a8:26:16:46:d9:4a:9f:cc:3e:95: 15:15:57:77:b9:ce:77:c1:42:62:3f:a9:23:e3:ac: 07:ff:a3:dd:8a:10:e5:b3:4b:c3:8f:b5:61:fe:b5: 09:6b:f4:8a:96:43:5f:ac:48:ad:a3:92:b9:e6:96: 64:d8:ea:99:54:ea:0e:68:48:ae:7b:48:8c:10:c9: 94:25:96:e2:2b:ad:27:db:74:57:28:49:9b:aa:fb: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:CE:E7:B3:C8:0F:BB:84:D5:4A:05:0B:F2:F0:A1:E7:34:35:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:a01d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ce:bb:73:23:a9:d8:ab:4f:9d:c9:b3:93:7f:75:f9:90:e1: eb:a3:e4:c7:77:54:5b:51:84:c0:90:02:90:7e:b7:cf:70:0b: 2c:70:80:18:9e:5d:8e:9a:85:a2:39:ff:0f:4e:18:ef:5d:81: 63:ca:49:da:09:9c:c8:a6:66:76:d5:71:62:85:64:61:37:53: d0:ab:fa:77:d0:49:2a:69:2b:53:ff:f8:c4:19:01:e9:37:c0: 82:34:c3:6d:15:90:3b:4c:66:4e:64:40:74:e6:53:40:12:2d: 18:b2:de:29:ec:91:9b:cd:7f:22:b8:d7:15:ed:d7:ba:6c:39: e3:e5:56:26:0a:94:28:36:c1:0b:5e:db:c1:b5:b7:fb:31:83: dc:74:6d:2c:6a:66:55:24:81:5d:ad:3a:71:b2:3a:f8:a6:ba: a3:1c:05:c5:c6:91:5c:fd:a8:7e:87:cd:86:7d:f4:23:38:35: 31:e1:5a:17:af:0a:10:58:9b:01:5f:7e:42:ed:f7:87:8b:c2: 26:1e:ab:c8:56:44:43:65:17:08:46:ea:cf:46:86:1c:67:e1: d4:9d:7d:2c:7c:e5:f7:eb:41:6b:9d:7e:45:74:6a:f1:b3:76: 72:f5:26:da:7a:ae:08:cf:d6:0b:35:7c:83:6d:a9:32:53:f7: 88:b7:be:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoquwCQHZYzuRFCnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MjAxNmFlZGYtNDdjNC00MzM1LTk4NDctYmVmMWEyMmE4NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIidkF1kr6wgSbj2SiDWhv4Hf01caCuGxVXB OwI9nef2ZrQSXERRiAtg4ED/NzY9WTr/PhmIuydZX0qNwoMSAuKLHXh42WgBXrnx eU4feZmk0wd6vukYAfGGmB3v6a5Am3PcvBzgfg5TltUj9qGTv3DBmv7dZzvJXWz1 oZMFaJbC4DiMR1uGNsceo1Nxep/n+oNCQ/A255asPz+leZkrLVbR4C+4RNQ6Uqgm FkbZSp/MPpUVFVd3uc53wUJiP6kj46wH/6PdihDls0vDj7Vh/rUJa/SKlkNfrEit o5K55pZk2OqZVOoOaEiue0iMEMmUJZbiK60n23RXKEmbqvveVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8zzuezyA+7hNVKBQvy8KHnNDUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQzZGJlNWQtMGYyMy0z NDQ5LTk4ZDktN2Q3NjdhOWVmYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeaAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7Ou3MjqdirT53Js5N/dfmQ4euj5Md3VFtRhMCQApB+t89wCyxw gBieXY6ahaI5/w9OGO9dgWPKSdoJnMimZnbVcWKFZGE3U9Cr+nfQSSppK1P/+MQZ Aek3wII0w20VkDtMZk5kQHTmU0ASLRiy3inskZvNfyK41xXt17psOePlViYKlCg2 wQte28G1t/sxg9x0bSxqZlUkgV2tOnGyOvimuqMcBcXGkVz9qH6HzYZ99CM4NTHh WhevChBYmwFffkLt94eLwiYeq8hWRENlFwhG6s9Ghhxn4dSdfSx85ffrQWudfkV0 avGzdnL1Jtp6rgjP1gs1fINtqTJT94i3vj0= -----END CERTIFICATE-----Generated at Mon Jun 30 20:56:55 2025 by rpki-client