$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1074f57-dfe7-3a59-af37-5f7a7677d5ff.roa File: d1074f57-dfe7-3a59-af37-5f7a7677d5ff.roa (raw, json) Hash identifier: Xb2yVryf9jh5spfBkW9xFSFIJUA4cpf6bKIea+b7tDE= Subject key identifier: 40:51:D3:7B:27:EC:C2:4E:31:FC:DC:DB:28:FC:1A:13:B7:41:F2:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7BFA57FAE9C6FC20604500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1074f57-dfe7-3a59-af37-5f7a7677d5ff.roa Signing time: Thu 19 Jun 2025 14:50:41 +0000 ROA not before: Thu 19 Jun 2025 14:50:41 +0000 ROA not after: Wed 17 Sep 2025 14:50:41 +0000 asID: 22773 IP address blocks: 2600:880a:1128::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:fa:57:fa:e9:c6:fc:20:60:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:50:41 2025 GMT Not After : Sep 17 14:50:41 2025 GMT Subject: CN=fed2a8b1-81a4-498d-9c79-5d3d25c33f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:80:d6:e7:b7:2b:9a:0e:6f:61:e4:32:52: c0:a9:24:4e:d3:ea:75:10:1e:72:d7:52:12:58:50: 84:a3:be:cc:95:9c:dd:4f:fa:3c:e9:9f:d5:61:6b: 73:c3:f4:f4:c6:26:6a:eb:0e:01:eb:3d:b8:e3:6a: 1f:9b:ac:c2:e7:3f:69:df:fe:db:15:01:58:a1:41: 20:6e:14:52:49:71:78:6f:5f:b7:fd:5a:ce:7f:3e: 4a:00:ae:43:8f:9b:0a:ba:5d:3f:7a:68:d0:46:7d: 63:8f:de:ff:80:6c:b7:a1:20:9a:89:83:d7:84:e3: f2:22:e2:6a:47:e9:61:16:f1:6a:e5:73:dd:ac:fd: cf:72:e6:90:29:ff:22:c2:5b:ee:80:3a:a8:53:e8: c1:4f:ba:51:f9:61:2e:a4:b8:63:66:68:74:92:47: bb:fa:92:9e:97:fb:f2:95:1f:fc:1a:36:14:80:a8: 52:55:12:14:35:38:94:d1:8f:64:5a:2a:db:2c:7e: 6f:3a:74:a9:d7:4c:bc:8b:16:8d:8e:ed:1d:49:da: 9a:87:ce:ba:5e:1f:cb:64:d5:d9:7f:71:18:d1:b8: 9f:97:de:ea:57:0e:15:e5:cf:a2:74:d3:9c:42:46: 40:b6:fd:6d:43:72:d3:62:f9:17:7f:24:a9:c5:d0: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:D3:7B:27:EC:C2:4E:31:FC:DC:DB:28:FC:1A:13:B7:41:F2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1074f57-dfe7-3a59-af37-5f7a7677d5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:1128::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a3:96:12:16:d0:a3:e1:f1:5f:b1:2c:64:d5:f0:e6:61:a4: 6e:87:53:0d:a9:e4:ff:b5:2b:d0:bf:e2:78:8f:94:41:31:f3: d3:8e:c0:0f:52:00:41:3e:17:b6:f3:4d:fe:1b:d7:85:a0:2a: 67:12:ff:36:3e:fe:ff:07:13:2f:89:71:da:81:24:8c:3b:b3: 78:88:e2:82:66:cb:11:f4:d4:2c:df:6b:2a:ec:4f:49:7e:9c: 50:70:7c:fb:0f:72:33:2a:6d:0c:f6:64:96:a1:ca:96:82:06: 7b:aa:9a:ab:31:ed:bb:3d:db:c4:d1:e2:af:21:f3:0e:9f:f5: 78:0b:35:28:87:84:d8:6f:87:9e:70:ec:50:76:36:3e:37:9a: 6e:6d:74:04:cf:b6:f9:6c:0e:02:45:8c:b6:62:53:d6:1b:9e: 5d:1f:c0:02:ee:12:ae:2c:2f:4d:c1:c5:fb:36:d8:35:fb:d0: bf:de:eb:78:97:93:9c:24:f3:10:f4:55:0b:fd:da:49:4e:71: 0f:08:e7:0b:2e:b8:ca:8f:73:41:52:c0:40:27:4d:65:4b:ad: 32:26:9a:d0:fd:f6:31:d3:bd:4d:b3:96:71:7c:0c:24:64:9b: be:93:06:6a:a8:10:40:15:08:dc:3a:32:a5:71:8c:d7:f2:07: a2:60:91:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e/pX+unG/CBgRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NTA0MVoXDTI1MDkxNzE0NTA0MVowLzEtMCsGA1UEAxMk ZmVkMmE4YjEtODFhNC00OThkLTljNzktNWQzZDI1YzMzZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeA1ue3K5oOb2HkMlLAqSRO0+p1EB5y11IS WFCEo77MlZzdT/o86Z/VYWtzw/T0xiZq6w4B6z2442ofm6zC5z9p3/7bFQFYoUEg bhRSSXF4b1+3/VrOfz5KAK5Dj5sKul0/emjQRn1jj97/gGy3oSCaiYPXhOPyIuJq R+lhFvFq5XPdrP3PcuaQKf8iwlvugDqoU+jBT7pR+WEupLhjZmh0kke7+pKel/vy lR/8GjYUgKhSVRIUNTiU0Y9kWirbLH5vOnSp10y8ixaNju0dSdqah866Xh/LZNXZ f3EY0bifl97qVw4V5c+idNOcQkZAtv1tQ3LTYvkXfySpxdAn4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBR03sn7MJOMfzc2yj8GhO3QfK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDEwNzRmNTctZGZlNy0z YTU5LWFmMzctNWY3YTc2NzdkNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFejlhIW0KPh8V+xLGTV8OZhpG6HUw2p5P+1K9C/4niPlEEx89OO wA9SAEE+F7bzTf4b14WgKmcS/zY+/v8HEy+JcdqBJIw7s3iI4oJmyxH01Czfayrs T0l+nFBwfPsPcjMqbQz2ZJahypaCBnuqmqsx7bs928TR4q8h8w6f9XgLNSiHhNhv h55w7FB2Nj43mm5tdATPtvlsDgJFjLZiU9Ybnl0fwALuEq4sL03Bxfs22DX70L/e 63iXk5wk8xD0VQv92klOcQ8I5wsuuMqPc0FSwEAnTWVLrTImmtD99jHTvU2zlnF8 DCRkm76TBmqoEEAVCNw6MqVxjNfyB6JgkeU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:17:51 2025 by rpki-client