$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9c3efdb-daf6-3aaf-8e79-3bf8f9408f74.roa File: a9c3efdb-daf6-3aaf-8e79-3bf8f9408f74.roa (raw, json) Hash identifier: NPhbpI1kCbeoPVvEVXmbk2/qZHXnoB5hvZrq8Ce0S74= Subject key identifier: 71:52:A1:59:69:CD:A1:38:85:A4:5A:91:C7:9A:36:54:3A:A4:77:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E796EDCF8CD4BDBAC8F5140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9c3efdb-daf6-3aaf-8e79-3bf8f9408f74.roa Signing time: Thu 19 Jun 2025 14:45:33 +0000 ROA not before: Thu 19 Jun 2025 14:45:33 +0000 ROA not after: Wed 17 Sep 2025 14:45:33 +0000 asID: 22773 IP address blocks: 2600:8800:3e2c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:6e:dc:f8:cd:4b:db:ac:8f:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:45:33 2025 GMT Not After : Sep 17 14:45:33 2025 GMT Subject: CN=16a64c48-9507-4a0f-a796-f2112ec73279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:e5:ce:58:d3:98:9b:b6:cf:e2:0a:40:1a: 6b:2e:8f:5a:c6:2d:8f:00:8d:97:68:e3:18:de:25: 48:14:81:f8:7d:a1:a5:31:9b:15:54:65:b2:e8:4b: cb:43:23:94:10:8e:8c:bf:56:af:b1:bb:3a:e2:6e: 59:13:9b:9b:a6:90:92:fb:e9:c1:75:81:5a:18:65: f4:18:46:f5:f1:ba:8b:cd:c5:19:71:13:19:70:98: b0:6b:9a:f0:77:7b:5d:64:8e:98:6b:c9:6b:13:dd: 79:df:6f:f8:80:ec:a3:48:3a:09:58:d4:5d:fe:ee: 4c:5a:23:1e:6a:94:34:6e:b0:a9:44:56:33:59:2e: dc:e3:8e:a9:d5:28:97:ab:c8:07:7b:38:bb:7c:37: 6d:60:1d:8c:dd:57:43:4f:b6:d9:72:63:30:93:c1: 44:34:04:a4:b6:85:22:06:15:00:03:0a:90:fd:13: ad:3d:65:fc:5a:45:67:8b:ff:5f:2c:db:88:af:ff: b6:c2:a9:79:c3:60:ac:4e:b1:da:21:90:75:b7:3a: 46:b2:ce:48:a7:5e:23:ed:1c:05:a7:fc:3b:89:03: 19:01:95:d0:83:c5:b7:f4:65:26:51:bd:55:8d:04: 0c:94:f5:47:6c:33:df:47:32:60:3e:30:c1:6e:95: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:52:A1:59:69:CD:A1:38:85:A4:5A:91:C7:9A:36:54:3A:A4:77:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9c3efdb-daf6-3aaf-8e79-3bf8f9408f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3e2c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:19:1a:03:56:4b:18:56:c4:7b:8c:67:56:8f:ff:57:84:19: 57:55:0d:65:0b:10:2d:0b:36:6c:79:00:0d:24:c3:80:77:a1: 08:08:70:87:64:83:ae:eb:c9:64:c1:e3:35:43:eb:54:23:20: 61:9d:85:66:3c:98:5b:a1:a5:32:68:83:38:7c:34:d1:73:49: 45:49:66:b0:81:2f:7b:d1:9b:af:da:7c:a0:31:56:f2:92:21: ed:e4:9b:6c:1d:4a:08:62:d3:e4:94:ec:40:d2:0e:b4:37:3b: 74:7c:b4:e2:9c:99:d9:dc:f7:9a:4a:6f:48:29:b4:74:7c:e4: d5:47:d0:89:fc:c7:9c:bb:c4:94:29:49:d6:91:1e:e1:47:a0: 98:c4:43:c8:14:64:bf:9d:d6:9e:12:07:01:a7:4c:c5:b6:1d: cf:6a:f0:9b:a1:c6:74:75:57:ed:95:63:80:f6:20:3a:4b:5c: 22:d0:b9:09:5d:f5:56:eb:5d:7b:84:32:05:2f:19:2c:a6:b0: e4:69:7e:1b:b6:ac:f8:60:cc:5f:c1:51:1f:41:9f:cf:9e:19: 0d:79:fa:f1:65:c9:1f:33:5c:ac:13:7e:94:a1:42:3c:45:06: b4:98:30:88:49:8e:c4:84:36:85:68:68:a6:ef:ad:a9:d0:a7: 40:25:54:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eW7c+M1L26yPUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDUzM1oXDTI1MDkxNzE0NDUzM1owLzEtMCsGA1UEAxMk MTZhNjRjNDgtOTUwNy00YTBmLWE3OTYtZjIxMTJlYzczMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5TlzljTmJu2z+IKQBprLo9axi2PAI2XaOMY 3iVIFIH4faGlMZsVVGWy6EvLQyOUEI6Mv1avsbs64m5ZE5ubppCS++nBdYFaGGX0 GEb18bqLzcUZcRMZcJiwa5rwd3tdZI6Ya8lrE91532/4gOyjSDoJWNRd/u5MWiMe apQ0brCpRFYzWS7c446p1SiXq8gHezi7fDdtYB2M3VdDT7bZcmMwk8FENASktoUi BhUAAwqQ/ROtPWX8WkVni/9fLNuIr/+2wql5w2CsTrHaIZB1tzpGss5Ip14j7RwF p/w7iQMZAZXQg8W39GUmUb1VjQQMlPVHbDPfRzJgPjDBbpXLwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFSoVlpzaE4haRakceaNlQ6pHf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTljM2VmZGItZGFmNi0z YWFmLThlNzktM2JmOGY5NDA4Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD4s MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0ZGgNWSxhWxHuMZ1aP/1eEGVdVDWULEC0LNmx5AA0kw4B3oQgI cIdkg67ryWTB4zVD61QjIGGdhWY8mFuhpTJogzh8NNFzSUVJZrCBL3vRm6/afKAx VvKSIe3km2wdSghi0+SU7EDSDrQ3O3R8tOKcmdnc95pKb0gptHR85NVH0In8x5y7 xJQpSdaRHuFHoJjEQ8gUZL+d1p4SBwGnTMW2Hc9q8JuhxnR1V+2VY4D2IDpLXCLQ uQld9VbrXXuEMgUvGSymsORpfhu2rPhgzF/BUR9Bn8+eGQ15+vFlyR8zXKwTfpSh QjxFBrSYMIhJjsSENoVoaKbvranQp0AlVKs= -----END CERTIFICATE-----Generated at Mon Jun 30 14:00:41 2025 by rpki-client