$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df2b324-1df4-3fd7-b14c-71cce3da9319.roa File: 9df2b324-1df4-3fd7-b14c-71cce3da9319.roa (raw, json) Hash identifier: MXfjH5XuTe2v/VCqAUuOVlEkmMAYcq4sms9zqyv2lqg= Subject key identifier: 46:4E:DF:63:89:8F:6B:B1:D4:02:F5:08:3C:DD:F4:6C:50:DD:40:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A5B3F2DCD397B7B890B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df2b324-1df4-3fd7-b14c-71cce3da9319.roa Signing time: Thu 19 Jun 2025 14:47:25 +0000 ROA not before: Thu 19 Jun 2025 14:47:25 +0000 ROA not after: Wed 17 Sep 2025 14:47:25 +0000 asID: 22773 IP address blocks: 2600:8800:7900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:5b:3f:2d:cd:39:7b:7b:89:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:47:25 2025 GMT Not After : Sep 17 14:47:25 2025 GMT Subject: CN=5691e471-fa8c-49df-a60d-250d9fe245d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:18:0c:1d:0d:5e:49:45:75:d8:6b:4e:5d: 26:32:96:fa:65:07:ec:28:f3:a2:8d:b8:2a:56:07: ff:c2:f2:2d:e8:82:e0:9c:67:cb:4d:e9:3f:a3:f3: 61:02:d2:3d:fb:20:6f:b2:e8:b7:41:9b:5b:49:92: 63:71:d9:0f:81:d2:72:18:e5:b5:fb:9b:48:19:a5: f5:88:0f:4c:d0:e3:f3:cc:83:7b:f9:7c:01:9f:70: 6b:06:d1:d4:ff:2c:31:72:13:3e:4b:82:5d:f6:06: 2d:7d:f1:6d:ba:87:b7:df:df:1b:71:4a:fa:6a:68: 8e:d9:47:8d:54:a2:21:b4:bc:32:67:93:2d:f0:f6: 3e:c5:7a:9a:3b:ae:63:5b:22:1d:4c:31:f8:db:eb: b2:0b:89:2d:25:ee:23:9b:82:63:30:47:1d:01:bf: 54:c0:de:b0:42:b3:0a:bd:d6:b2:03:fa:cc:fc:36: dc:16:1f:74:2e:95:e5:18:0a:d2:55:5f:d2:14:a6: 2e:b1:39:b8:32:48:f6:e1:04:16:3e:7b:32:7e:fb: 0e:6a:96:a1:73:6c:e5:e4:5b:e7:c3:f2:85:c4:d3: 72:4d:fd:fc:b5:41:9f:68:49:73:46:aa:17:1e:d6: 0a:c7:48:c8:ad:a3:8d:c1:50:13:73:c6:17:e4:e3: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4E:DF:63:89:8F:6B:B1:D4:02:F5:08:3C:DD:F4:6C:50:DD:40:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df2b324-1df4-3fd7-b14c-71cce3da9319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:02:04:5d:7d:e5:b2:71:a9:4b:11:4e:25:6a:17:f2:60:5a: ab:be:1e:7a:e8:de:05:47:da:9e:1c:36:59:ee:8b:2c:a3:6f: 9f:da:a5:2e:65:ec:5c:42:31:5e:1e:cb:11:00:5d:8e:aa:38: 29:b5:3e:98:6f:3b:26:31:d9:f9:1a:4d:03:a5:75:6b:f7:cd: 68:f1:1a:23:24:48:cc:2e:6f:94:2a:3d:a1:ac:d4:0b:da:07: a5:c4:3c:10:45:d0:26:ea:e1:fe:9a:37:cc:d2:4d:38:a6:f5: e5:06:ee:02:44:bc:13:08:8d:73:20:9a:e6:32:2f:00:8c:cb: b7:82:0e:a5:6f:45:d6:d8:99:fd:c0:1b:61:d2:2b:10:b0:e4: 73:46:fa:fa:ca:2d:56:00:29:07:46:4c:25:90:92:ea:3b:5f: 57:e6:f3:b2:4e:9a:87:dc:69:fa:8f:78:fb:91:e8:cf:28:81: 77:61:cf:93:22:09:3f:6c:8b:8a:e3:81:ad:b3:1e:f3:59:5e: 35:dc:ae:50:39:91:77:eb:2e:59:55:1f:06:21:59:50:f2:d9: fe:e1:9a:11:07:8e:35:3d:a7:38:f7:13:40:89:04:7a:91:27: ec:9c:99:41:5c:d4:e5:b9:60:4f:ae:31:14:f3:18:a5:a7:c9: a5:ab:c5:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+els/Lc05e3uJCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDcyNVoXDTI1MDkxNzE0NDcyNVowLzEtMCsGA1UEAxMk NTY5MWU0NzEtZmE4Yy00OWRmLWE2MGQtMjUwZDlmZTI0NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxIYDB0NXklFddhrTl0mMpb6ZQfsKPOijbgq Vgf/wvIt6ILgnGfLTek/o/NhAtI9+yBvsui3QZtbSZJjcdkPgdJyGOW1+5tIGaX1 iA9M0OPzzIN7+XwBn3BrBtHU/ywxchM+S4Jd9gYtffFtuoe3398bcUr6amiO2UeN VKIhtLwyZ5Mt8PY+xXqaO65jWyIdTDH42+uyC4ktJe4jm4JjMEcdAb9UwN6wQrMK vdayA/rM/DbcFh90LpXlGArSVV/SFKYusTm4Mkj24QQWPnsyfvsOapahc2zl5Fvn w/KFxNNyTf38tUGfaElzRqoXHtYKx0jIraONwVATc8YX5ONNYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZO32OJj2ux1AL1CDzd9GxQ3UDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRmMmIzMjQtMWRmNC0z ZmQ3LWIxNGMtNzFjY2UzZGE5MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAHkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUCBF195bJxqUsRTiVqF/JgWqu+Hnro3gVH2p4cNlnuiyyjb5/a pS5l7FxCMV4eyxEAXY6qOCm1PphvOyYx2fkaTQOldWv3zWjxGiMkSMwub5QqPaGs 1AvaB6XEPBBF0Cbq4f6aN8zSTTim9eUG7gJEvBMIjXMgmuYyLwCMy7eCDqVvRdbY mf3AG2HSKxCw5HNG+vrKLVYAKQdGTCWQkuo7X1fm87JOmofcafqPePuR6M8ogXdh z5MiCT9si4rjga2zHvNZXjXcrlA5kXfrLllVHwYhWVDy2f7hmhEHjjU9pzj3E0CJ BHqRJ+ycmUFc1OW5YE+uMRTzGKWnyaWrxfA= -----END CERTIFICATE-----Generated at Mon Jun 30 09:47:30 2025 by rpki-client