$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa File: ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa (raw, json) Hash identifier: 9VqvOaL+yZG8kB6wFPnwmvA5edecpCvkco7yNvPNrUM= Subject key identifier: 8A:29:9A:6C:94:B2:A6:22:EC:23:37:40:88:42:37:72:9B:09:1C:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B030F144660E2EE528C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa Signing time: Thu 19 Jun 2025 14:48:44 +0000 ROA not before: Thu 19 Jun 2025 14:48:44 +0000 ROA not after: Wed 17 Sep 2025 14:48:44 +0000 asID: 22773 IP address blocks: 2600:8800:a712::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:03:0f:14:46:60:e2:ee:52:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:48:44 2025 GMT Not After : Sep 17 14:48:44 2025 GMT Subject: CN=15fb5cf1-60e5-47c8-8a65-3ab7a4f8d074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:ab:ba:d1:6a:eb:f5:6a:51:a5:7d:ea:8d: 81:ed:16:15:f4:36:e1:94:57:db:6c:a9:00:dd:08: 77:1d:f2:19:c9:e1:dc:7a:76:25:a7:a9:ec:cf:a1: 2b:b4:26:f1:43:a8:1a:47:ff:bf:24:1b:db:73:7f: 1f:9d:d1:4c:29:a7:4d:ec:27:ad:b4:d6:38:e0:35: 42:bc:2e:d1:f7:c3:75:b1:30:54:88:ff:a4:22:ee: 82:f7:74:38:63:88:cc:f0:6d:77:45:bd:14:e3:5e: a3:35:6b:86:dc:64:f5:55:28:35:15:ea:34:c7:ad: e1:b6:df:06:0a:d8:71:14:8c:3e:ce:5f:0d:22:c8: ba:75:f7:de:f6:70:5f:b2:64:89:a2:d5:ab:00:d0: 0c:00:73:e6:26:b5:ad:02:ee:a5:b7:61:af:23:3d: c3:a6:90:2a:ff:2b:a3:2f:8a:b4:b8:a8:6f:5b:70: 29:f3:04:75:ef:17:73:f9:f0:fe:4f:0a:e8:63:0b: c5:bb:79:5a:19:79:9e:96:6f:00:c7:87:45:29:da: ea:12:fa:da:10:80:e5:66:ee:21:4e:db:52:82:5d: e0:59:a3:6f:01:2d:d4:2f:c6:4e:46:2a:03:7b:4b: 55:49:3f:e6:86:f6:1b:6f:dc:be:31:fe:54:0d:97: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:9A:6C:94:B2:A6:22:EC:23:37:40:88:42:37:72:9B:09:1C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:a712::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:be:17:50:e2:43:c9:5e:ef:8b:90:8f:72:b2:8d:a3:be:fe: 6c:b8:2b:48:63:1e:b1:a1:55:50:34:4f:f7:a0:99:86:7e:16: fe:83:55:6b:64:68:e6:35:2b:b7:49:cc:0b:4a:14:8d:17:8a: b2:c3:7f:d7:04:ca:a7:f3:60:43:53:5d:14:fb:b5:91:61:89: 22:15:8f:6b:a6:4b:04:c7:8c:8f:87:f3:c0:02:dd:7f:00:2c: 3c:79:ac:36:51:8b:6b:cd:03:3a:03:f7:a0:bf:c8:71:90:f5: 59:46:d7:2a:af:7d:6e:b9:b1:19:5e:46:d7:e1:20:3b:d5:f0: 88:14:ef:66:8e:95:f6:03:da:0c:16:44:c0:81:66:16:45:10: 41:cf:32:60:49:c1:4b:b2:e3:20:51:ec:b0:e0:9a:77:35:88: a1:e3:04:d2:27:c3:c7:df:7f:da:0d:48:78:09:59:f9:78:0d: 26:26:68:2c:cd:30:46:86:53:6f:cd:86:ab:9c:0f:45:68:14: 29:77:c8:44:df:34:b6:c7:c5:62:56:b7:ca:ab:b1:6a:86:e5: 39:52:40:22:5d:bd:45:75:7b:14:d6:c8:f5:6e:ce:fb:b4:29: 73:b0:f8:ec:36:d1:7c:a5:0c:8d:09:7a:c8:84:f4:b6:64:44: 35:67:02:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ewMPFEZg4u5SjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDg0NFoXDTI1MDkxNzE0NDg0NFowLzEtMCsGA1UEAxMk MTVmYjVjZjEtNjBlNS00N2M4LThhNjUtM2FiN2E0ZjhkMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2rutFq6/VqUaV96o2B7RYV9DbhlFfbbKkA 3Qh3HfIZyeHcenYlp6nsz6ErtCbxQ6gaR/+/JBvbc38fndFMKadN7CettNY44DVC vC7R98N1sTBUiP+kIu6C93Q4Y4jM8G13Rb0U416jNWuG3GT1VSg1Feo0x63htt8G CthxFIw+zl8NIsi6dffe9nBfsmSJotWrANAMAHPmJrWtAu6lt2GvIz3DppAq/yuj L4q0uKhvW3Ap8wR17xdz+fD+TwroYwvFu3laGXmelm8Ax4dFKdrqEvraEIDlZu4h TttSgl3gWaNvAS3UL8ZORioDe0tVST/mhvYbb9y+Mf5UDZfLFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIopmmyUsqYi7CM3QIhCN3KbCRznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRiNzUxNTgtZDBiNy0z YmRkLWE1MzItMjYyZjRjMWU3MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAKcS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABC+F1DiQ8le74uQj3KyjaO+/my4K0hjHrGhVVA0T/egmYZ+Fv6D VWtkaOY1K7dJzAtKFI0XirLDf9cEyqfzYENTXRT7tZFhiSIVj2umSwTHjI+H88AC 3X8ALDx5rDZRi2vNAzoD96C/yHGQ9VlG1yqvfW65sRleRtfhIDvV8IgU72aOlfYD 2gwWRMCBZhZFEEHPMmBJwUuy4yBR7LDgmnc1iKHjBNInw8fff9oNSHgJWfl4DSYm aCzNMEaGU2/NhqucD0VoFCl3yETfNLbHxWJWt8qrsWqG5TlSQCJdvUV1exTWyPVu zvu0KXOw+Ow20XylDI0JesiE9LZkRDVnAjc= -----END CERTIFICATE-----Generated at Mon Jun 30 18:24:25 2025 by rpki-client