$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aedfaf08-15a6-3931-a3b9-daeea13ee36b.roa File: aedfaf08-15a6-3931-a3b9-daeea13ee36b.roa (raw, json) Hash identifier: OQsljHlTSCnep99xESsYjyFkTnT9T11Bgfc82fQ+E5o= Subject key identifier: F3:7E:42:16:EA:83:32:EC:37:89:9A:B3:F4:3F:A9:6C:93:EC:4C:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A8C2819B5679845521700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aedfaf08-15a6-3931-a3b9-daeea13ee36b.roa Signing time: Thu 19 Jun 2025 14:47:48 +0000 ROA not before: Thu 19 Jun 2025 14:47:48 +0000 ROA not after: Wed 17 Sep 2025 14:47:48 +0000 asID: 22773 IP address blocks: 2600:8800:8696::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:8c:28:19:b5:67:98:45:52:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:47:48 2025 GMT Not After : Sep 17 14:47:48 2025 GMT Subject: CN=4d5b8b9d-d6b3-4663-bbd1-152df5261b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:85:7e:5c:2c:db:f5:42:23:0b:4d:55:c3: 80:bd:03:a1:b2:13:fe:89:75:2f:0e:c9:24:b8:5b: 0a:24:d9:cd:fb:3a:eb:9e:55:b5:fc:cb:17:27:cf: ca:d7:b2:ea:95:ba:6d:8d:6c:75:30:41:2e:de:7f: 9a:7d:87:e6:41:de:43:ab:9b:8e:44:0c:6e:45:ce: 10:7b:82:41:3a:d8:21:7a:c7:d9:0d:39:fc:e1:c3: 41:8c:4d:41:8c:52:2e:a7:3b:6a:00:73:da:18:91: c6:fb:76:30:6c:65:e7:d5:81:81:e8:f6:70:11:17: ba:3f:1d:52:c9:45:7b:f1:30:5e:de:31:0a:ca:fb: 51:c6:ce:6a:cc:82:de:75:db:98:17:2a:e3:06:bb: b3:bd:2d:44:4d:f6:ec:e7:09:a7:b3:54:c0:a1:2d: 53:ef:9f:85:db:29:10:29:be:69:1d:ef:9e:17:2c: 7e:c3:ed:c4:4d:98:39:a1:99:b5:02:23:53:9a:e6: 19:e9:bc:a6:d8:6a:7c:b5:2d:4c:3c:92:6b:8e:ea: ed:70:08:e1:e6:2b:10:5f:b6:07:65:af:3c:99:9f: 08:e6:f5:35:c2:2a:54:14:7e:70:37:9b:2d:91:a8: 97:7c:4f:5c:fa:00:5f:a2:29:ac:2c:01:14:df:4e: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:42:16:EA:83:32:EC:37:89:9A:B3:F4:3F:A9:6C:93:EC:4C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aedfaf08-15a6-3931-a3b9-daeea13ee36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8696::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c4:56:d9:ca:92:1e:de:f3:91:ac:f1:4d:b8:01:60:ae:8c: 3f:22:01:99:ab:6d:f0:45:4c:56:f5:32:e6:91:65:98:e9:c7: 4e:ad:b5:f6:5f:2f:63:83:e0:7e:a4:a6:76:16:1b:04:32:24: 6e:a0:d9:de:14:3e:b7:ab:de:64:04:c0:71:73:ea:18:31:1e: e6:85:dd:06:7d:ce:90:22:4d:a4:d0:01:4f:e6:a8:61:b4:43: 7c:8c:f9:4a:ee:2c:66:2f:57:55:c0:43:85:73:77:c0:13:5b: 11:e8:ec:51:9e:a0:2a:c2:4a:36:09:55:6b:87:88:ed:84:fa: fa:d4:46:79:80:3a:0f:62:66:97:9a:18:77:7b:b9:0d:a8:13: 51:ee:67:f2:9f:d2:e4:0f:2f:b0:ae:c0:7c:87:13:87:2a:b6: f2:9b:f9:e5:5f:04:a9:21:38:3f:5d:64:68:f8:4f:18:e0:81: 55:d3:4d:36:49:b0:b5:ee:fc:db:37:d5:b5:45:45:36:2f:f0: 3f:a1:48:3c:6b:c1:02:02:84:aa:67:aa:9f:c2:46:ed:ea:8f: 41:94:86:b0:20:c9:e0:f3:ef:9d:03:08:a6:1e:48:8d:c7:83: 53:58:37:e7:79:f3:d0:e5:7f:d1:2e:be:4b:34:a4:94:74:f2: a2:f7:7f:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eowoGbVnmEVSFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDc0OFoXDTI1MDkxNzE0NDc0OFowLzEtMCsGA1UEAxMk NGQ1YjhiOWQtZDZiMy00NjYzLWJiZDEtMTUyZGY1MjYxYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WFflws2/VCIwtNVcOAvQOhshP+iXUvDskk uFsKJNnN+zrrnlW1/MsXJ8/K17LqlbptjWx1MEEu3n+afYfmQd5Dq5uORAxuRc4Q e4JBOtghesfZDTn84cNBjE1BjFIupztqAHPaGJHG+3YwbGXn1YGB6PZwERe6Px1S yUV78TBe3jEKyvtRxs5qzILedduYFyrjBruzvS1ETfbs5wmns1TAoS1T75+F2ykQ Kb5pHe+eFyx+w+3ETZg5oZm1AiNTmuYZ6bym2Gp8tS1MPJJrjurtcAjh5isQX7YH Za88mZ8I5vU1wipUFH5wN5stkaiXfE9c+gBfoimsLAEU304kpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPN+QhbqgzLsN4mas/Q/qWyT7EwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVkZmFmMDgtMTVhNi0z OTMxLWEzYjktZGFlZWExM2VlMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXEVtnKkh7e85Gs8U24AWCujD8iAZmrbfBFTFb1MuaRZZjpx06t tfZfL2OD4H6kpnYWGwQyJG6g2d4UPrer3mQEwHFz6hgxHuaF3QZ9zpAiTaTQAU/m qGG0Q3yM+UruLGYvV1XAQ4Vzd8ATWxHo7FGeoCrCSjYJVWuHiO2E+vrURnmAOg9i ZpeaGHd7uQ2oE1HuZ/Kf0uQPL7CuwHyHE4cqtvKb+eVfBKkhOD9dZGj4TxjggVXT TTZJsLXu/Ns31bVFRTYv8D+hSDxrwQIChKpnqp/CRu3qj0GUhrAgyeDz750DCKYe SI3Hg1NYN+d589Dlf9Euvks0pJR08qL3f4Q= -----END CERTIFICATE-----Generated at Tue Jul 1 15:31:26 2025 by rpki-client