$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da65292b-a802-3ce2-a6fb-8440d3496b0b.roa File: da65292b-a802-3ce2-a6fb-8440d3496b0b.roa (raw, json) Hash identifier: KTJ9jhzUMr/fE9HH/aDchCUKemsEdmlfgNVuO+tlC5U= Subject key identifier: D5:2A:72:6B:3B:CA:F1:95:78:EA:98:61:C5:C7:CE:E2:AB:DB:8B:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E78E48D12863381903E7740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da65292b-a802-3ce2-a6fb-8440d3496b0b.roa Signing time: Thu 19 Jun 2025 14:44:28 +0000 ROA not before: Thu 19 Jun 2025 14:44:28 +0000 ROA not after: Wed 17 Sep 2025 14:44:28 +0000 asID: 22773 IP address blocks: 2600:8800:12a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:e4:8d:12:86:33:81:90:3e:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:44:28 2025 GMT Not After : Sep 17 14:44:28 2025 GMT Subject: CN=36e6764a-7cd9-4a5f-a744-18910af6daff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:e6:4f:42:e3:91:9f:b0:66:bd:52:68:57: 55:ee:b2:a2:5c:d2:06:f7:3f:d7:2e:97:c5:35:59: a1:ce:2f:6e:f3:3f:8a:0a:0c:b1:ca:aa:34:0e:a0: cf:7d:1b:9b:06:58:e5:7e:67:0c:f8:8d:9b:09:5f: a4:ac:7c:d7:b6:bc:68:8f:94:d8:3a:2e:44:f8:7b: bd:ca:66:24:8d:a8:45:dd:eb:6e:4e:38:08:0a:e6: a4:f8:3b:1c:ae:b0:1d:1a:ba:b5:ab:d8:a4:5f:4c: ec:ba:6b:dc:40:c5:eb:16:4c:61:5a:82:6d:31:69: 62:e8:e4:4c:f0:0a:9c:e7:5b:cd:b3:23:c0:7e:4b: ce:47:b9:59:64:12:13:83:63:1c:b6:54:18:cb:a0: 7f:44:77:cb:9f:61:1f:0e:7c:32:cb:dc:df:89:01: 4a:cb:cf:90:77:ce:1a:f9:4e:9a:ed:01:08:18:2a: b4:48:94:7e:d1:96:a2:19:4d:a3:95:8a:6f:e3:4e: ee:b1:b2:a6:70:df:d8:11:ac:c0:07:bf:5c:8c:47: f9:db:a1:d1:f1:03:8a:42:0c:19:23:55:6f:55:ff: 64:f7:b1:c3:2c:89:94:e2:f6:93:a5:2f:f9:d8:55: c4:96:3f:ba:4a:ee:a5:36:37:3d:cf:5a:ce:81:35: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:72:6B:3B:CA:F1:95:78:EA:98:61:C5:C7:CE:E2:AB:DB:8B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da65292b-a802-3ce2-a6fb-8440d3496b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:12a0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:33:5d:ba:8b:7b:86:42:c9:c6:cc:ed:84:f6:d7:40:76:94: 78:2c:ef:44:a3:67:a3:bb:84:23:cc:68:f3:f8:bc:95:d4:25: 20:23:e9:50:f3:38:79:4a:2b:c0:21:28:f8:0d:3e:54:32:60: bd:6f:75:34:c6:48:bd:3a:78:c2:7a:bd:f7:b3:32:ac:a2:ba: 22:81:a7:0a:e7:e4:4a:13:a5:c8:45:b3:41:b7:36:56:d9:25: 83:44:6e:2d:33:05:40:6e:17:94:46:14:23:26:42:8e:47:1b: 72:77:39:90:45:94:c7:55:67:42:92:6f:8f:54:67:13:c6:6d: c1:4f:fb:d7:63:31:f3:70:bb:0b:65:13:08:75:af:91:32:25: 35:c3:e5:65:a8:95:02:01:0a:77:5a:7a:eb:de:41:22:1e:8f: 35:e3:d2:55:ea:de:0b:75:a1:86:b8:bd:27:9e:78:66:74:f2: 60:ee:77:fa:c8:60:74:32:48:ef:a2:b7:ad:02:4d:3a:e2:98: fc:66:d5:7a:85:3d:f3:00:95:37:a7:78:91:c9:74:28:b0:e1: 4e:17:43:aa:8f:31:57:56:42:43:12:9b:d3:67:ea:7f:db:bc: 13:1c:8f:f4:0d:f6:82:3a:3b:ce:ae:bf:c0:a3:5a:01:c5:d5: 3f:eb:a8:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eOSNEoYzgZA+d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDQyOFoXDTI1MDkxNzE0NDQyOFowLzEtMCsGA1UEAxMk MzZlNjc2NGEtN2NkOS00YTVmLWE3NDQtMTg5MTBhZjZkYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpnmT0LjkZ+wZr1SaFdV7rKiXNIG9z/XLpfF NVmhzi9u8z+KCgyxyqo0DqDPfRubBljlfmcM+I2bCV+krHzXtrxoj5TYOi5E+Hu9 ymYkjahF3etuTjgICuak+DscrrAdGrq1q9ikX0zsumvcQMXrFkxhWoJtMWli6ORM 8Aqc51vNsyPAfkvOR7lZZBITg2MctlQYy6B/RHfLn2EfDnwyy9zfiQFKy8+Qd84a +U6a7QEIGCq0SJR+0ZaiGU2jlYpv407usbKmcN/YEazAB79cjEf526HR8QOKQgwZ I1VvVf9k97HDLImU4vaTpS/52FXElj+6Su6lNjc9z1rOgTVciwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUqcms7yvGVeOqYYcXHzuKr24vVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE2NTI5MmItYTgwMi0z Y2UyLWE2ZmItODQ0MGQzNDk2YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIABKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAczXbqLe4ZCycbM7YT210B2lHgs70SjZ6O7hCPMaPP4vJXUJSAj 6VDzOHlKK8AhKPgNPlQyYL1vdTTGSL06eMJ6vfezMqyiuiKBpwrn5EoTpchFs0G3 NlbZJYNEbi0zBUBuF5RGFCMmQo5HG3J3OZBFlMdVZ0KSb49UZxPGbcFP+9djMfNw uwtlEwh1r5EyJTXD5WWolQIBCndaeuveQSIejzXj0lXq3gt1oYa4vSeeeGZ08mDu d/rIYHQySO+it60CTTrimPxm1XqFPfMAlTeneJHJdCiw4U4XQ6qPMVdWQkMSm9Nn 6n/bvBMcj/QN9oI6O86uv8CjWgHF1T/rqKM= -----END CERTIFICATE-----Generated at Mon Jun 30 11:31:57 2025 by rpki-client