$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a7fd5b5-8f19-3b30-9ae1-385a4ae0fe97.roa File: 9a7fd5b5-8f19-3b30-9ae1-385a4ae0fe97.roa (raw, json) Hash identifier: 5DbOJdAdxF4IKcogXp5ziz78MqEXEXoECUA70Y2KNVo= Subject key identifier: A3:35:28:36:D2:83:0C:9B:7C:B6:05:91:6F:39:A9:06:E2:76:61:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7963E8292C0580A4DA7480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a7fd5b5-8f19-3b30-9ae1-385a4ae0fe97.roa Signing time: Thu 19 Jun 2025 14:45:28 +0000 ROA not before: Thu 19 Jun 2025 14:45:28 +0000 ROA not after: Wed 17 Sep 2025 14:45:28 +0000 asID: 22773 IP address blocks: 2600:8800:3e0c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:63:e8:29:2c:05:80:a4:da:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:45:28 2025 GMT Not After : Sep 17 14:45:28 2025 GMT Subject: CN=0a676e28-5cbc-494b-999a-c0fcbbd0aabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:b5:28:d4:12:28:f9:3a:02:d9:26:c2:24: da:56:8b:a5:1e:d2:20:a0:fe:d7:c1:34:e4:66:47: 92:1d:d0:e6:0a:fb:6c:42:4d:45:02:2c:75:eb:77: 84:12:ad:ff:0a:bc:de:82:98:ca:9e:2f:e9:40:02: c9:85:d2:8e:ed:68:42:e6:10:68:87:29:b3:84:39: 87:de:f7:ab:23:43:42:a4:8f:10:f2:30:a5:d6:9b: 36:b7:61:36:53:a9:f2:43:6d:6a:68:2d:f1:a3:09: 2a:ea:ba:e9:ff:d0:ea:8a:6b:05:05:75:eb:5f:94: 36:f0:c2:ea:b6:b5:f4:19:f3:9d:74:f2:43:67:5c: b9:25:48:1f:db:f7:a6:9f:6c:1b:2c:8d:56:78:a8: ad:89:e9:4b:72:d3:1a:7b:10:80:b0:c9:82:de:44: 5e:7a:fe:e4:12:9c:9f:ee:95:75:d3:ee:36:34:43: 86:8b:f7:81:1a:2e:51:3a:a3:45:27:19:0d:2b:92: 19:bd:f8:05:25:39:d9:d5:16:22:89:65:29:f2:f8: b4:4b:6f:2c:72:b1:f8:2e:3a:2a:7f:33:39:aa:4a: dc:cc:87:35:3a:e1:a7:5c:da:86:50:15:66:3a:6b: c6:bc:40:ed:49:6f:fa:57:10:95:b2:b3:ee:bf:24: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:28:36:D2:83:0C:9B:7C:B6:05:91:6F:39:A9:06:E2:76:61:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a7fd5b5-8f19-3b30-9ae1-385a4ae0fe97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3e0c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6c:34:34:7f:fa:70:24:0f:55:a9:73:36:90:9f:09:f2:18: 92:0f:38:35:b8:dd:56:8e:97:0a:dc:7d:10:90:87:5c:47:d0: 3a:40:76:e0:b0:e9:d6:47:eb:e4:d2:5a:54:a1:0f:a1:0b:dd: bd:d8:87:dd:1d:76:b7:88:5b:44:db:b2:b7:b1:96:e3:59:56: f9:0a:21:cd:07:08:18:fa:01:82:49:48:d1:62:86:9f:13:db: 62:ed:f7:f3:8f:e0:f5:3d:e9:01:fa:7d:0e:35:07:9d:79:78: 81:53:45:90:46:2a:c2:88:68:33:84:f8:7b:dd:c6:eb:21:4d: 84:db:3d:11:9a:5d:11:59:17:d9:95:74:f0:a1:8b:fd:a3:b1: 9e:40:c9:2d:b3:29:c5:05:5a:78:53:19:c3:d4:23:3d:c6:84: 8c:47:eb:32:52:e1:aa:55:7d:c4:62:ae:a9:0f:c8:88:1b:4f: 63:c3:2e:95:ec:64:27:ae:41:fe:62:0a:11:64:b9:72:b4:54: 2a:75:01:e8:b7:6a:3f:f4:6d:13:c3:25:87:ed:41:05:30:74: 50:7e:38:81:ca:e8:30:55:3c:b2:ff:5e:8f:8c:c6:5a:ff:66: 47:22:4f:43:16:d1:fc:5c:94:73:29:80:d1:4b:42:00:a6:54: f7:ac:83:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eWPoKSwFgKTadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDUyOFoXDTI1MDkxNzE0NDUyOFowLzEtMCsGA1UEAxMk MGE2NzZlMjgtNWNiYy00OTRiLTk5OWEtYzBmY2JiZDBhYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7a1KNQSKPk6AtkmwiTaVoulHtIgoP7XwTTk ZkeSHdDmCvtsQk1FAix163eEEq3/CrzegpjKni/pQALJhdKO7WhC5hBohymzhDmH 3verI0NCpI8Q8jCl1ps2t2E2U6nyQ21qaC3xowkq6rrp/9DqimsFBXXrX5Q28MLq trX0GfOddPJDZ1y5JUgf2/emn2wbLI1WeKitielLctMaexCAsMmC3kReev7kEpyf 7pV10+42NEOGi/eBGi5ROqNFJxkNK5IZvfgFJTnZ1RYiiWUp8vi0S28scrH4Ljoq fzM5qkrczIc1OuGnXNqGUBVmOmvGvEDtSW/6VxCVsrPuvyRdKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKM1KDbSgwybfLYFkW85qQbidmFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWE3ZmQ1YjUtOGYxOS0z YjMwLTlhZTEtMzg1YTRhZTBmZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD4M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdsNDR/+nAkD1WpczaQnwnyGJIPODW43VaOlwrcfRCQh1xH0DpA duCw6dZH6+TSWlShD6EL3b3Yh90ddreIW0TbsrexluNZVvkKIc0HCBj6AYJJSNFi hp8T22Lt9/OP4PU96QH6fQ41B515eIFTRZBGKsKIaDOE+HvdxushTYTbPRGaXRFZ F9mVdPChi/2jsZ5AyS2zKcUFWnhTGcPUIz3GhIxH6zJS4apVfcRirqkPyIgbT2PD LpXsZCeuQf5iChFkuXK0VCp1Aei3aj/0bRPDJYftQQUwdFB+OIHK6DBVPLL/Xo+M xlr/ZkciT0MW0fxclHMpgNFLQgCmVPesg28= -----END CERTIFICATE-----Generated at Tue Jul 1 22:43:28 2025 by rpki-client