$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c21f1a17-33e4-32b6-992b-77bc870e79f2.roa File: c21f1a17-33e4-32b6-992b-77bc870e79f2.roa (raw, json) Hash identifier: 17WCddY8LFmTgLLqyt4KIhpj6kCJnghGlfF+Ccfrs/8= Subject key identifier: 2F:99:1A:4A:37:74:E7:FA:51:86:AD:8F:51:CF:3B:A3:C3:B0:54:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E79CB3007351358DDEBC1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c21f1a17-33e4-32b6-992b-77bc870e79f2.roa Signing time: Thu 19 Jun 2025 14:46:17 +0000 ROA not before: Thu 19 Jun 2025 14:46:17 +0000 ROA not after: Wed 17 Sep 2025 14:46:17 +0000 asID: 22773 IP address blocks: 2600:8800:5400::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:cb:30:07:35:13:58:dd:eb:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:46:17 2025 GMT Not After : Sep 17 14:46:17 2025 GMT Subject: CN=e4d69daf-1cb1-44ac-a0ba-07b750717d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:85:93:5e:f8:5a:db:97:b3:c7:f4:0d:f5: 5f:8f:f5:5a:29:d8:1b:dc:a1:43:30:ba:d9:19:83: b2:4c:8d:de:5d:eb:a9:92:67:0d:27:8e:7f:9c:85: 5f:e0:76:4d:4d:bf:b1:96:b5:3f:c9:79:8a:63:b1: 23:ed:69:af:5f:2f:38:83:7c:02:5c:11:70:12:bf: 8d:1f:76:44:40:e7:47:cd:6c:5f:42:a1:b9:d8:11: d3:70:24:48:2e:a7:c2:fb:30:f8:f7:73:cc:32:83: 15:f6:c0:8d:25:f3:1d:13:72:40:83:36:53:a4:2d: b5:11:68:d9:a3:47:f4:8a:bb:f5:e3:66:d2:8e:7c: 6d:aa:f2:38:3c:83:0b:36:96:8f:01:a6:27:81:ee: f3:05:76:c7:fe:b6:0c:16:a9:30:ba:8f:cf:bb:03: 65:85:7c:eb:c0:10:4f:37:49:72:93:1d:a6:fa:89: 5e:71:64:b8:33:16:e9:5f:70:41:9f:f0:33:78:40: 7a:18:1f:93:36:24:dd:a6:c4:02:1e:ef:bf:24:fb: c2:8f:c7:b4:08:76:79:8d:c7:4c:65:79:7e:43:1c: 88:47:b2:81:1c:db:39:6f:24:3e:ea:44:aa:5b:2c: 0d:c3:19:0d:92:5e:81:37:cb:e7:1f:fe:e6:15:07: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:1A:4A:37:74:E7:FA:51:86:AD:8F:51:CF:3B:A3:C3:B0:54:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c21f1a17-33e4-32b6-992b-77bc870e79f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5400::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e1:dd:78:eb:9d:6e:5e:ac:43:84:0d:aa:31:8f:2b:5b:88: ab:80:fc:c0:e6:74:0a:1e:98:a2:f6:a4:24:a3:7e:b4:6c:01: 94:8a:af:f7:8e:57:3a:fc:e9:21:e6:29:fd:80:d0:94:fb:14: d4:93:2b:f1:4e:d8:e1:be:c8:6c:2a:fb:3d:02:7e:2a:65:74: 48:2d:e5:87:b5:33:42:41:13:80:4f:ed:7a:17:db:48:c3:15: 08:b4:75:a8:9a:31:8b:10:f0:05:af:be:9f:f9:8a:12:68:e6: 28:a0:90:f2:8b:7f:f1:f2:3d:5e:fb:ea:e9:a2:ea:33:99:92: 99:82:50:21:e6:fc:99:e1:c7:24:4c:f2:a5:8f:20:ae:d2:54: ce:0f:74:53:8f:48:81:0e:0b:f4:3c:05:a9:d1:30:49:85:b0: df:96:7f:05:9d:6b:46:94:36:c3:a4:aa:94:f5:2a:fa:ce:ea: 33:6a:1e:49:05:89:fd:fd:7c:6e:01:1a:7f:af:8f:6b:43:e6: e7:95:1f:1a:cb:2a:da:9c:6b:85:86:19:be:bd:01:29:09:41: 99:2a:65:21:8e:87:43:2c:07:19:b9:a2:09:40:cc:a1:88:12: ce:3c:c1:4d:9e:e1:ba:57:92:2c:5b:a2:7d:23:77:ea:89:e5: 8d:8a:06:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ecswBzUTWN3rwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDYxN1oXDTI1MDkxNzE0NDYxN1owLzEtMCsGA1UEAxMk ZTRkNjlkYWYtMWNiMS00NGFjLWEwYmEtMDdiNzUwNzE3ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0GFk174WtuXs8f0DfVfj/VaKdgb3KFDMLrZ GYOyTI3eXeupkmcNJ45/nIVf4HZNTb+xlrU/yXmKY7Ej7WmvXy84g3wCXBFwEr+N H3ZEQOdHzWxfQqG52BHTcCRILqfC+zD493PMMoMV9sCNJfMdE3JAgzZTpC21EWjZ o0f0irv142bSjnxtqvI4PIMLNpaPAaYnge7zBXbH/rYMFqkwuo/PuwNlhXzrwBBP N0lykx2m+olecWS4MxbpX3BBn/AzeEB6GB+TNiTdpsQCHu+/JPvCj8e0CHZ5jcdM ZXl+QxyIR7KBHNs5byQ+6kSqWywNwxkNkl6BN8vnH/7mFQe2cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC+ZGko3dOf6UYatj1HPO6PDsFTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzIxZjFhMTctMzNlNC0z MmI2LTk5MmItNzdiYzg3MGU3OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnh3XjrnW5erEOEDaoxjytbiKuA/MDmdAoemKL2pCSjfrRsAZSK r/eOVzr86SHmKf2A0JT7FNSTK/FO2OG+yGwq+z0CfipldEgt5Ye1M0JBE4BP7XoX 20jDFQi0daiaMYsQ8AWvvp/5ihJo5iigkPKLf/HyPV776umi6jOZkpmCUCHm/Jnh xyRM8qWPIK7SVM4PdFOPSIEOC/Q8BanRMEmFsN+WfwWda0aUNsOkqpT1KvrO6jNq HkkFif39fG4BGn+vj2tD5ueVHxrLKtqca4WGGb69ASkJQZkqZSGOh0MsBxm5oglA zKGIEs48wU2e4bpXkixbon0jd+qJ5Y2KBlU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:34:09 2025 by rpki-client