$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa File: bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa (raw, json) Hash identifier: 78nNWyGKTkWj+w4AO0UeGAAEtYeZGYxq+Bul+k8elPs= Subject key identifier: AE:D4:A7:FA:38:5D:4D:3E:4C:E0:61:F9:EA:65:BB:51:C9:AB:22:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7BB89D2A162E67D4EFADC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa Signing time: Thu 19 Jun 2025 14:50:10 +0000 ROA not before: Thu 19 Jun 2025 14:50:10 +0000 ROA not after: Wed 17 Sep 2025 14:50:10 +0000 asID: 22773 IP address blocks: 2600:880a:708::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:b8:9d:2a:16:2e:67:d4:ef:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:50:10 2025 GMT Not After : Sep 17 14:50:10 2025 GMT Subject: CN=4989f3e3-8bb1-4e97-925e-2856d4159977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:78:f1:b1:46:d0:04:1a:e3:89:fb:f6:bd: 8e:09:9c:b0:50:35:30:3e:05:9e:e2:36:49:35:82: 24:52:eb:35:70:60:33:d5:1b:6f:36:14:a3:f0:9a: 0d:3d:ab:34:d7:2c:73:46:67:4c:a8:a6:67:64:e3: ad:d4:be:86:ac:91:12:c3:9a:f6:3f:64:f9:8f:af: 40:08:a5:e3:23:98:b0:c1:ad:41:51:8f:22:d4:0e: 71:e7:97:95:4f:bb:08:c5:e7:f9:50:21:42:46:b5: a3:40:88:e7:23:56:df:cb:23:6e:5c:83:ab:57:01: ea:e2:4e:ff:11:0e:22:7b:71:28:b0:ad:43:1e:fd: 19:66:85:a0:54:8d:5c:ab:7f:49:36:e6:58:e5:45: 5e:d4:7d:8d:34:d8:8c:b5:9a:02:84:42:b2:ce:45: a9:6a:64:a3:08:b5:54:af:28:f2:44:80:69:3f:88: 64:76:99:64:9f:ed:74:8c:79:37:fb:05:cb:e2:22: 19:48:03:07:78:f2:bd:c3:c0:d8:b0:25:06:4a:87: c1:dd:5b:3c:a5:d7:35:60:b2:33:a1:b7:35:06:28: 26:ad:44:23:d5:3c:89:11:eb:bd:c3:08:29:df:ee: 93:2c:9f:96:2d:1b:59:88:75:3f:cf:49:56:c2:85: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:A7:FA:38:5D:4D:3E:4C:E0:61:F9:EA:65:BB:51:C9:AB:22:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:708::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b5:db:e1:6e:29:88:a1:8a:43:d5:93:c4:2c:b7:e4:d7:1d: 52:0c:43:e8:b3:7b:b9:fb:39:97:1d:43:b7:71:31:71:22:ce: 43:47:83:dd:0d:f4:a2:d5:06:9a:a7:ac:59:fa:34:dc:e7:49: 39:59:0c:4e:af:69:2a:c6:b3:d1:dc:64:b0:a8:1e:20:ef:cb: 1d:af:a6:a8:67:27:27:6a:5e:14:67:3b:e7:1b:5b:cc:61:bd: 29:0e:01:f2:02:2b:8f:17:eb:17:16:96:db:5d:74:45:90:60: 97:97:38:14:ab:9c:34:7c:3e:c7:53:e8:7b:6e:36:7f:1a:cc: dd:ec:de:97:38:19:a6:4d:f7:b8:69:66:f5:7b:22:51:3a:55: 24:26:1a:88:7e:06:11:b2:ef:f7:42:d2:05:60:36:5f:a6:c4: 03:63:02:43:ea:93:fa:3f:ec:1a:86:d4:c5:29:11:7d:45:91: 10:07:c5:14:aa:fd:55:6c:1b:cd:02:2b:4a:fd:48:b8:ea:97: 1c:51:2e:79:c2:52:ad:b6:f3:78:05:60:01:e4:60:60:76:68: fd:90:f2:79:24:36:14:48:e9:6a:ff:48:28:8b:a5:b1:10:45: 45:fd:cf:20:82:f2:b0:4c:6c:f6:72:64:90:fb:b0:28:73:00: ba:a3:0f:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e7idKhYuZ9TvrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NTAxMFoXDTI1MDkxNzE0NTAxMFowLzEtMCsGA1UEAxMk NDk4OWYzZTMtOGJiMS00ZTk3LTkyNWUtMjg1NmQ0MTU5OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGZ48bFG0AQa44n79r2OCZywUDUwPgWe4jZJ NYIkUus1cGAz1RtvNhSj8JoNPas01yxzRmdMqKZnZOOt1L6GrJESw5r2P2T5j69A CKXjI5iwwa1BUY8i1A5x55eVT7sIxef5UCFCRrWjQIjnI1bfyyNuXIOrVwHq4k7/ EQ4ie3EosK1DHv0ZZoWgVI1cq39JNuZY5UVe1H2NNNiMtZoChEKyzkWpamSjCLVU ryjyRIBpP4hkdplkn+10jHk3+wXL4iIZSAMHePK9w8DYsCUGSofB3Vs8pdc1YLIz obc1BigmrUQj1TyJEeu9wwgp3+6TLJ+WLRtZiHU/z0lWwoXk6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK7Up/o4XU0+TOBh+eplu1HJqyKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFkN2UyYTMtN2IyZS0z NWU1LTg2YmQtODc4ZDJkMDAxMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgcI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKa12+FuKYihikPVk8Qst+TXHVIMQ+ize7n7OZcdQ7dxMXEizkNH g90N9KLVBpqnrFn6NNznSTlZDE6vaSrGs9HcZLCoHiDvyx2vpqhnJydqXhRnO+cb W8xhvSkOAfICK48X6xcWlttddEWQYJeXOBSrnDR8PsdT6HtuNn8azN3s3pc4GaZN 97hpZvV7IlE6VSQmGoh+BhGy7/dC0gVgNl+mxANjAkPqk/o/7BqG1MUpEX1FkRAH xRSq/VVsG80CK0r9SLjqlxxRLnnCUq2283gFYAHkYGB2aP2Q8nkkNhRI6Wr/SCiL pbEQRUX9zyCC8rBMbPZyZJD7sChzALqjDxM= -----END CERTIFICATE-----Generated at Tue Jul 1 10:53:37 2025 by rpki-client