$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc447c5f-dcfa-367d-a7f4-acc481cf9673.roa File: dc447c5f-dcfa-367d-a7f4-acc481cf9673.roa (raw, json) Hash identifier: VWqaeCVWUW8f5BnK6Hp2b17NNRa8iz0U9+3woEx+RtQ= Subject key identifier: 43:4C:2D:56:30:F9:53:90:BF:0C:AA:98:A3:3F:71:B7:D7:FC:B9:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7874195E89570577B1CB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc447c5f-dcfa-367d-a7f4-acc481cf9673.roa Signing time: Thu 19 Jun 2025 14:43:35 +0000 ROA not before: Thu 19 Jun 2025 14:43:35 +0000 ROA not after: Wed 17 Sep 2025 14:43:35 +0000 asID: 22773 IP address blocks: 2001:579:8298::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:74:19:5e:89:57:05:77:b1:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:43:35 2025 GMT Not After : Sep 17 14:43:35 2025 GMT Subject: CN=ff3e98eb-6177-41c9-a654-4a116e3884a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:ec:4a:63:eb:f4:e6:13:8c:a4:e9:3e:0c: 96:d7:b1:55:9d:4a:07:61:64:2f:22:d9:10:b7:7c: b5:7e:72:a7:a9:81:8f:68:59:ad:6a:56:d2:a1:ec: bb:0d:fb:d6:55:e7:85:1d:d0:13:88:06:19:6d:15: 8d:7b:fd:f4:99:af:3f:1d:35:57:92:7f:8a:4f:f4: f4:b1:6b:14:76:53:6f:fb:6a:ba:4e:10:46:4b:74: 61:37:6e:56:c1:0f:4b:79:6c:ab:19:10:aa:c5:d1: fe:fa:d5:69:37:3a:26:40:80:22:e3:d2:86:0e:c0: 69:4a:5f:73:9a:3a:46:e0:b3:3e:b3:86:4b:d1:88: 89:9e:2e:80:bb:36:4c:88:e9:bb:12:d9:96:c8:06: d2:f4:5c:6e:95:73:44:cf:07:19:71:ec:bb:62:b5: b5:66:0d:56:af:1e:0c:f0:e2:e1:d7:1b:49:1d:66: 21:e1:99:19:06:71:a6:03:d4:59:6a:98:76:e1:b3: 27:93:99:e4:e8:f1:62:f7:fe:81:3d:45:28:5b:3c: cf:7a:50:72:3b:01:06:6a:61:4e:f3:19:97:9a:66: 7a:a3:81:22:e5:3d:f3:b1:ff:1f:60:9f:d2:3a:f0: 99:db:61:b2:29:92:04:b8:b0:69:dc:f4:a7:0c:9f: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:2D:56:30:F9:53:90:BF:0C:AA:98:A3:3F:71:B7:D7:FC:B9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc447c5f-dcfa-367d-a7f4-acc481cf9673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:8298::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:43:fe:86:6e:aa:74:c9:1c:03:a0:94:6e:b9:b0:62:9a:c5: 33:a7:c8:af:04:00:24:8a:11:c0:69:32:6a:9d:f7:30:2e:63: 83:47:10:f4:3a:45:ea:d5:d5:1c:12:77:27:f6:92:15:d4:d3: 64:79:b9:ec:6f:f5:ab:86:f9:ab:c8:ac:ea:69:59:c6:21:da: 2e:b4:99:70:d5:01:56:a1:5b:e5:ae:5b:b9:f2:60:16:e2:97: 49:72:1d:5d:9e:21:de:05:0b:f7:05:36:2b:a1:1e:e1:53:84: d2:97:a6:a7:95:51:83:1f:b7:3a:36:56:18:04:53:04:ba:99: 79:50:ab:d3:08:d7:f8:c5:02:81:8c:3e:25:7f:c3:72:37:40: 1e:dc:1d:65:e8:79:cf:75:e8:6a:72:83:4d:5d:d6:2e:94:7a: 60:ee:d5:6c:33:2a:17:21:fb:9a:02:f2:15:de:00:f1:71:11: a2:90:49:a3:8e:70:5a:79:7a:7a:e8:14:69:4b:11:e0:fe:14: 30:d7:0c:22:c1:93:5d:22:b7:1c:1c:07:cb:7e:08:a9:aa:d4: be:eb:2c:e6:30:05:01:ae:f0:d2:28:69:cb:6f:5a:47:95:cf: a4:80:8c:f9:c6:01:e1:50:23:70:20:e8:8a:fe:75:2f:14:c0: 03:f7:c9:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eHQZXolXBXexywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDMzNVoXDTI1MDkxNzE0NDMzNVowLzEtMCsGA1UEAxMk ZmYzZTk4ZWItNjE3Ny00MWM5LWE2NTQtNGExMTZlMzg4NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnsSmPr9OYTjKTpPgyW17FVnUoHYWQvItkQ t3y1fnKnqYGPaFmtalbSoey7DfvWVeeFHdATiAYZbRWNe/30ma8/HTVXkn+KT/T0 sWsUdlNv+2q6ThBGS3RhN25WwQ9LeWyrGRCqxdH++tVpNzomQIAi49KGDsBpSl9z mjpG4LM+s4ZL0YiJni6AuzZMiOm7EtmWyAbS9FxulXNEzwcZcey7YrW1Zg1Wrx4M 8OLh1xtJHWYh4ZkZBnGmA9RZaph24bMnk5nk6PFi9/6BPUUoWzzPelByOwEGamFO 8xmXmmZ6o4Ei5T3zsf8fYJ/SOvCZ22GyKZIEuLBp3PSnDJ/bJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENMLVYw+VOQvwyqmKM/cbfX/LnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGM0NDdjNWYtZGNmYS0z NjdkLWE3ZjQtYWNjNDgxY2Y5NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYKY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKBD/oZuqnTJHAOglG65sGKaxTOnyK8EACSKEcBpMmqd9zAuY4NH EPQ6RerV1RwSdyf2khXU02R5uexv9auG+avIrOppWcYh2i60mXDVAVahW+WuW7ny YBbil0lyHV2eId4FC/cFNiuhHuFThNKXpqeVUYMftzo2VhgEUwS6mXlQq9MI1/jF AoGMPiV/w3I3QB7cHWXoec916Gpyg01d1i6UemDu1WwzKhch+5oC8hXeAPFxEaKQ SaOOcFp5enroFGlLEeD+FDDXDCLBk10itxwcB8t+CKmq1L7rLOYwBQGu8NIoactv WkeVz6SAjPnGAeFQI3Ag6Ir+dS8UwAP3yRw= -----END CERTIFICATE-----Generated at Tue Jul 1 16:15:22 2025 by rpki-client