$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca3337c4-93b5-39ad-8aa8-b8962022f8c2.roa File: ca3337c4-93b5-39ad-8aa8-b8962022f8c2.roa (raw, json) Hash identifier: 6jMG4ZqL/ThY4noWk3/abolOQye2FR5vpEq86AWcbLM= Subject key identifier: A5:5A:04:93:B4:F6:E9:55:12:A7:89:CF:24:30:74:E2:E0:C3:D3:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E78D81D50F90DC4E4407860 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca3337c4-93b5-39ad-8aa8-b8962022f8c2.roa Signing time: Thu 19 Jun 2025 14:44:22 +0000 ROA not before: Thu 19 Jun 2025 14:44:22 +0000 ROA not after: Wed 17 Sep 2025 14:44:22 +0000 asID: 22773 IP address blocks: 2600:8800:1112::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:d8:1d:50:f9:0d:c4:e4:40:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:44:22 2025 GMT Not After : Sep 17 14:44:22 2025 GMT Subject: CN=2c183b99-9767-4423-9e53-e02b67eb77b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:ce:a0:a7:2d:d5:43:9f:60:a1:1a:c1:1b: f5:32:36:55:c0:b6:3a:45:3e:eb:d1:0d:9e:89:20: 80:3b:1c:d0:98:97:d9:21:ea:07:2b:19:38:1e:e9: e5:a0:66:7a:f8:07:68:d7:54:34:10:6d:bd:ec:13: 8f:6c:c3:59:d5:bf:50:98:b4:cf:47:e9:b1:48:a6: f3:21:d5:af:04:e3:53:35:6e:fd:92:19:6b:24:a9: 25:3c:b8:e8:84:16:43:f1:d9:46:98:f7:65:b7:fe: c0:8b:ab:c0:0d:b9:6c:cc:45:18:89:f8:18:fc:0c: 21:5e:a8:ba:ff:24:32:7b:ab:57:d7:cf:7d:04:13: ea:c7:0a:57:b3:43:90:a9:bd:72:85:f8:0e:13:58: 19:b8:d1:23:cd:4d:ff:22:25:72:66:2c:bd:d5:f3: f0:df:14:7b:77:fd:a6:8f:bf:95:99:7b:bc:ed:17: 3a:95:19:84:1f:e5:76:78:69:2d:82:f0:bd:9b:6a: 66:50:24:af:1f:9c:e2:d4:22:27:cd:ab:a0:86:ac: c4:46:e1:80:10:04:ee:77:e3:d3:a7:da:53:0e:24: a9:e0:8d:bd:05:dd:f0:8b:6e:e9:39:04:ca:e3:1e: 5b:ef:d2:fb:68:83:db:75:99:fb:a9:02:62:3b:99: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:04:93:B4:F6:E9:55:12:A7:89:CF:24:30:74:E2:E0:C3:D3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca3337c4-93b5-39ad-8aa8-b8962022f8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1112::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8e:44:25:44:2e:11:c2:30:ff:d2:0f:aa:f7:2b:b8:3a:1d: 9f:27:d8:74:0f:e5:32:37:bd:fb:9b:23:de:24:64:40:bf:67: 18:c1:92:14:82:14:d8:10:9b:38:ad:fd:9b:fd:76:c2:95:b4: 7a:20:c4:56:a6:da:2e:d3:8a:24:f0:37:82:6f:13:e5:4b:a3: 43:50:79:f8:31:88:31:ab:25:63:d8:8c:f3:8e:fc:83:23:69: c2:b0:63:02:8c:0b:23:91:e1:99:c8:7d:e3:b7:6c:75:ee:6c: 60:84:e8:1a:9b:6e:47:bf:38:e9:f3:d5:cf:a1:3e:cd:aa:78: c9:ff:91:79:11:81:c9:90:d6:86:39:9e:92:99:9c:01:13:ba: 36:8d:1b:34:ac:2f:20:04:5f:d5:49:5a:48:3c:48:12:35:e9: 4f:9a:f8:3e:af:21:62:c5:f7:28:24:5c:77:e6:41:a4:f8:a1: 9f:80:7c:b2:80:0f:37:f7:e4:d5:ef:cd:75:63:a3:76:67:81: 0e:6d:2c:1a:0e:5f:30:be:9f:66:6f:12:48:46:0e:cb:20:32: bc:79:cc:75:85:a6:bd:75:9b:6c:33:78:f5:d8:1e:86:c8:dc: a3:02:3d:f9:d9:e8:94:09:bf:6b:4a:49:5b:90:00:dd:e4:e0: 5f:b7:01:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eNgdUPkNxORAeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDQyMloXDTI1MDkxNzE0NDQyMlowLzEtMCsGA1UEAxMk MmMxODNiOTktOTc2Ny00NDIzLTllNTMtZTAyYjY3ZWI3N2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrOoKct1UOfYKEawRv1MjZVwLY6RT7r0Q2e iSCAOxzQmJfZIeoHKxk4HunloGZ6+Ado11Q0EG297BOPbMNZ1b9QmLTPR+mxSKbz IdWvBONTNW79khlrJKklPLjohBZD8dlGmPdlt/7Ai6vADblszEUYifgY/AwhXqi6 /yQye6tX1899BBPqxwpXs0OQqb1yhfgOE1gZuNEjzU3/IiVyZiy91fPw3xR7d/2m j7+VmXu87Rc6lRmEH+V2eGktgvC9m2pmUCSvH5zi1CInzaughqzERuGAEATud+PT p9pTDiSp4I29Bd3wi27pOQTK4x5b79L7aIPbdZn7qQJiO5msVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVaBJO09ulVEqeJzyQwdOLgw9PlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2EzMzM3YzQtOTNiNS0z OWFkLThhYTgtYjg5NjIwMjJmOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIABES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGKORCVELhHCMP/SD6r3K7g6HZ8n2HQP5TI3vfubI94kZEC/ZxjB khSCFNgQmzit/Zv9dsKVtHogxFam2i7TiiTwN4JvE+VLo0NQefgxiDGrJWPYjPOO /IMjacKwYwKMCyOR4ZnIfeO3bHXubGCE6Bqbbke/OOnz1c+hPs2qeMn/kXkRgcmQ 1oY5npKZnAETujaNGzSsLyAEX9VJWkg8SBI16U+a+D6vIWLF9ygkXHfmQaT4oZ+A fLKADzf35NXvzXVjo3ZngQ5tLBoOXzC+n2ZvEkhGDssgMrx5zHWFpr11m2wzePXY HobI3KMCPfnZ6JQJv2tKSVuQAN3k4F+3ATU= -----END CERTIFICATE-----Generated at Tue Jul 1 20:52:56 2025 by rpki-client