$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afdfe9c1-a652-32e1-86f7-47ad3aa9833c.roa File: afdfe9c1-a652-32e1-86f7-47ad3aa9833c.roa (raw, json) Hash identifier: gsrScnn8ud9IlfdG1+t3F90pjFEZbFKJczwVEEd4T6Y= Subject key identifier: A1:12:90:2F:3D:5F:24:C6:93:AB:8A:22:2C:CE:36:08:C8:73:81:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B32FCFD7B6F9E49936080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afdfe9c1-a652-32e1-86f7-47ad3aa9833c.roa Signing time: Thu 19 Jun 2025 14:49:07 +0000 ROA not before: Thu 19 Jun 2025 14:49:07 +0000 ROA not after: Wed 17 Sep 2025 14:49:07 +0000 asID: 22773 IP address blocks: 2600:8800:b460::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:32:fc:fd:7b:6f:9e:49:93:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:07 2025 GMT Not After : Sep 17 14:49:07 2025 GMT Subject: CN=ba4cac9a-223b-4b4e-90ab-cc435a5b92fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:bc:93:5a:95:db:f9:84:e4:96:eb:c4:12: 9e:b7:2f:f3:8b:64:d8:4d:3e:af:a1:9d:63:6d:e0: 05:6a:2e:8d:7b:44:4b:11:03:61:c0:14:3c:df:f9: cf:22:37:b3:1b:24:12:65:1d:4e:5c:fb:27:8b:6d: bd:a2:95:d2:3b:ba:ad:bf:39:f8:f5:b8:d5:fe:52: 95:15:00:07:5c:d7:59:d5:a2:99:2a:53:eb:31:69: a8:aa:d0:99:31:cb:d0:f8:07:d0:b8:23:70:dd:1b: b1:0d:ed:ca:5b:12:68:6b:2c:51:37:ad:fb:87:dc: 91:e7:f9:0e:25:dc:ad:49:fb:2d:02:5f:56:d6:b8: 7f:f5:54:f1:e0:c3:70:01:e8:89:28:b6:1a:b2:7f: f9:33:bd:8d:2f:b7:eb:ab:1e:a4:35:58:a5:94:2e: e0:02:b0:3a:47:4a:66:0e:c4:8b:44:5c:4f:68:42: c6:7c:bd:20:2a:ce:6d:75:6f:bd:2d:c2:27:04:6d: bd:36:eb:9a:0f:e8:4a:21:f1:5f:0b:57:48:07:2e: 4a:b9:0e:0f:b7:17:b7:2f:6a:25:9d:cf:f8:c1:5f: fb:24:34:48:57:f2:f7:3d:b8:a2:cf:27:ae:08:56: 3f:ec:91:53:cb:0a:ed:f9:a7:e8:76:61:69:d9:cf: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:90:2F:3D:5F:24:C6:93:AB:8A:22:2C:CE:36:08:C8:73:81:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afdfe9c1-a652-32e1-86f7-47ad3aa9833c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b460::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:08:22:c2:7f:f9:81:2e:f7:fb:05:5d:54:f1:b7:c8:31:3e: 75:c1:28:2a:2a:d1:7d:81:9e:fd:e2:47:c1:b8:b9:8b:65:79: 36:30:2d:e2:97:ef:7d:95:8b:db:c6:52:5c:13:06:6a:b0:2b: ee:66:81:62:5d:24:ca:1e:1c:c9:10:17:7d:98:02:c9:b2:6f: 2d:83:bc:e7:03:f8:62:29:87:c6:c6:39:9b:c2:0e:73:11:9a: 1f:da:25:49:e6:87:60:a2:a3:ee:74:15:8c:95:f3:15:35:24: 88:38:67:1b:f8:a6:07:d4:93:6b:55:b5:db:b0:cc:1c:3c:8d: 22:a7:f8:84:a6:ef:b3:3e:77:41:be:9f:e0:f9:9d:f2:c7:b8: c7:36:38:69:16:a9:8c:32:c2:eb:f3:9a:a4:c6:b7:94:23:56: cc:bc:66:55:70:ed:e1:8e:76:64:7b:2a:5d:1c:7c:3d:ef:08: 29:f1:39:2d:14:0c:8c:a4:56:e9:20:ff:04:f1:1f:01:16:79: c2:0a:78:1d:75:e1:3e:fa:db:ba:4f:a0:3b:82:ae:c4:ec:7e: 5d:75:3d:6b:11:76:cf:be:b7:24:0c:68:26:f7:f9:a0:06:10: dc:42:a1:c9:55:05:8d:61:a1:09:73:2d:be:d9:a8:df:9d:3f: 32:b8:c3:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ezL8/XtvnkmTYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDkwN1oXDTI1MDkxNzE0NDkwN1owLzEtMCsGA1UEAxMk YmE0Y2FjOWEtMjIzYi00YjRlLTkwYWItY2M0MzVhNWI5MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMm8k1qV2/mE5JbrxBKety/zi2TYTT6voZ1j beAFai6Ne0RLEQNhwBQ83/nPIjezGyQSZR1OXPsni229opXSO7qtvzn49bjV/lKV FQAHXNdZ1aKZKlPrMWmoqtCZMcvQ+AfQuCNw3RuxDe3KWxJoayxRN637h9yR5/kO JdytSfstAl9W1rh/9VTx4MNwAeiJKLYasn/5M72NL7frqx6kNVillC7gArA6R0pm DsSLRFxPaELGfL0gKs5tdW+9LcInBG29NuuaD+hKIfFfC1dIBy5KuQ4Ptxe3L2ol nc/4wV/7JDRIV/L3PbiizyeuCFY/7JFTywrt+afodmFp2c8SXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKESkC89XyTGk6uKIizONgjIc4G2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZkZmU5YzEtYTY1Mi0z MmUxLTg2ZjctNDdhZDNhYTk4MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIALRg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4IIsJ/+YEu9/sFXVTxt8gxPnXBKCoq0X2Bnv3iR8G4uYtleTYw LeKX732Vi9vGUlwTBmqwK+5mgWJdJMoeHMkQF32YAsmyby2DvOcD+GIph8bGOZvC DnMRmh/aJUnmh2Cio+50FYyV8xU1JIg4Zxv4pgfUk2tVtduwzBw8jSKn+ISm77M+ d0G+n+D5nfLHuMc2OGkWqYwywuvzmqTGt5QjVsy8ZlVw7eGOdmR7Kl0cfD3vCCnx OS0UDIykVukg/wTxHwEWecIKeB114T7627pPoDuCrsTsfl11PWsRds++tyQMaCb3 +aAGENxCoclVBY1hoQlzLb7ZqN+dPzK4w0M= -----END CERTIFICATE-----Generated at Tue Jul 1 03:44:47 2025 by rpki-client