$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e344e3-00ed-3e22-b08f-7a52b2526eac.roa File: b3e344e3-00ed-3e22-b08f-7a52b2526eac.roa (raw, json) Hash identifier: guinftsHAsbOVJQPyngXd0/TmLAWK/yNP4OD5IsHwGY= Subject key identifier: 11:0A:94:D2:58:82:18:DC:45:AF:64:F4:CE:2B:4C:B5:53:72:DB:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7BC0949001F7B39F7FF980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e344e3-00ed-3e22-b08f-7a52b2526eac.roa Signing time: Thu 19 Jun 2025 14:50:14 +0000 ROA not before: Thu 19 Jun 2025 14:50:14 +0000 ROA not after: Wed 17 Sep 2025 14:50:14 +0000 asID: 22773 IP address blocks: 2600:880a:730::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:c0:94:90:01:f7:b3:9f:7f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:50:14 2025 GMT Not After : Sep 17 14:50:14 2025 GMT Subject: CN=f6b608d9-6866-4740-9cb4-a392e9481884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8e:1a:d5:94:29:47:58:df:a8:32:e9:16:5a: 05:55:54:b1:12:bb:74:0c:b5:6f:f1:bb:4f:c9:45: 88:39:fa:fa:17:52:92:f9:84:8f:98:b7:28:39:f9: a4:9c:3f:be:eb:1a:01:1a:ae:24:28:ad:00:96:d3: 83:d4:fd:1b:ae:66:f5:79:a0:20:45:63:02:f8:b7: 2c:60:fe:4c:da:92:ae:77:9c:35:7c:e9:50:6f:7e: 3e:e9:ac:11:b5:46:13:46:a3:36:e6:69:a5:53:ce: 7c:c1:15:55:fa:da:42:02:fc:58:fe:87:70:95:ef: 7d:b7:a4:18:ad:20:c3:2d:92:3f:84:cf:44:5a:3f: f4:39:e2:af:72:5e:30:80:e3:5f:2d:52:d2:be:7c: 97:36:17:89:34:2a:78:e1:ec:0a:ca:f1:e0:18:eb: 4f:2c:a9:bc:6b:59:22:27:84:48:f8:1f:97:30:15: f1:1c:c7:6d:6b:15:2b:63:1d:6c:e1:4b:2e:81:70: 08:e9:27:e3:0e:c6:9a:b9:22:45:e4:06:f7:aa:e2: a4:be:d8:85:97:10:e0:2b:1f:3b:eb:39:a7:5d:60: 6b:a2:70:6d:9c:4a:86:c3:45:ed:eb:8b:6a:ff:1a: b6:5e:68:f6:33:9d:55:29:57:06:c3:da:bf:df:ac: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:94:D2:58:82:18:DC:45:AF:64:F4:CE:2B:4C:B5:53:72:DB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e344e3-00ed-3e22-b08f-7a52b2526eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:730::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:96:fc:9b:ab:ce:ea:8a:3a:27:b6:42:8a:23:01:03:01:a7: a0:66:35:c5:53:0c:58:a9:bb:ef:de:3c:73:69:d3:93:91:c0: 6d:14:8d:50:15:37:95:71:5b:ec:68:c3:30:47:4a:3d:8f:11: 2d:a5:46:37:2d:76:85:08:b6:a8:f4:7e:89:fe:e5:8f:fb:c0: f7:11:9e:94:10:36:30:3a:30:3e:26:6c:75:a9:ab:67:45:a5: 44:02:3f:07:c7:4b:aa:70:ac:fa:aa:15:23:48:6d:ad:c1:71: 40:50:71:3d:63:f5:f4:95:97:3b:67:af:ca:5e:4d:00:94:57: 00:09:95:2f:a1:32:61:e9:d5:94:85:60:e6:af:9b:8c:49:49: 77:d4:f1:1c:4c:24:a5:73:61:eb:76:93:4f:23:66:99:7c:7c: a4:d9:3c:6f:fc:ed:6f:20:35:5f:d5:e6:fe:6b:23:df:3a:66: cd:70:46:c8:a9:61:1e:c5:42:11:29:70:14:6a:f5:ca:98:c7: 88:ed:67:36:1a:07:a7:e8:c8:d0:16:f5:e3:e9:36:78:22:98: 85:1f:da:95:55:be:e8:ac:a7:ce:3f:9f:8b:4f:98:12:ec:0e: 48:50:e7:7b:37:3b:b0:24:e5:dd:43:83:1e:38:5c:db:2a:c6: c7:e5:5e:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e8CUkAH3s59/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NTAxNFoXDTI1MDkxNzE0NTAxNFowLzEtMCsGA1UEAxMk ZjZiNjA4ZDktNjg2Ni00NzQwLTljYjQtYTM5MmU5NDgxODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI4a1ZQpR1jfqDLpFloFVVSxErt0DLVv8btP yUWIOfr6F1KS+YSPmLcoOfmknD++6xoBGq4kKK0AltOD1P0brmb1eaAgRWMC+Lcs YP5M2pKud5w1fOlQb34+6awRtUYTRqM25mmlU858wRVV+tpCAvxY/odwle99t6QY rSDDLZI/hM9EWj/0OeKvcl4wgONfLVLSvnyXNheJNCp44ewKyvHgGOtPLKm8a1ki J4RI+B+XMBXxHMdtaxUrYx1s4UsugXAI6SfjDsaauSJF5Ab3quKkvtiFlxDgKx87 6zmnXWBronBtnEqGw0Xt64tq/xq2Xmj2M51VKVcGw9q/36xcxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEKlNJYghjcRa9k9M4rTLVTctsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjNlMzQ0ZTMtMDBlZC0z ZTIyLWIwOGYtN2E1MmIyNTI2ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgcw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqW/JurzuqKOie2QoojAQMBp6BmNcVTDFipu+/ePHNp05ORwG0U jVAVN5VxW+xowzBHSj2PES2lRjctdoUItqj0fon+5Y/7wPcRnpQQNjA6MD4mbHWp q2dFpUQCPwfHS6pwrPqqFSNIba3BcUBQcT1j9fSVlztnr8peTQCUVwAJlS+hMmHp 1ZSFYOavm4xJSXfU8RxMJKVzYet2k08jZpl8fKTZPG/87W8gNV/V5v5rI986Zs1w RsipYR7FQhEpcBRq9cqYx4jtZzYaB6foyNAW9ePpNngimIUf2pVVvuisp84/n4tP mBLsDkhQ53s3O7Ak5d1Dgx44XNsqxsflXtY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:43:51 2025 by rpki-client