$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1317c11f-56ba-35cb-ae2e-38ca78fdf671.roa File: 1317c11f-56ba-35cb-ae2e-38ca78fdf671.roa (raw, json) Hash identifier: xGPU9X0DYNaXf5DOi4BBYJ0KGu21xCZb20ShBC1UIMk= Subject key identifier: B8:96:39:9C:C0:A8:41:23:76:A5:62:EC:C3:04:9C:49:C1:82:B1:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7B8D0E2D8ACD7C9E949880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1317c11f-56ba-35cb-ae2e-38ca78fdf671.roa Signing time: Thu 19 Jun 2025 14:49:49 +0000 ROA not before: Thu 19 Jun 2025 14:49:49 +0000 ROA not after: Wed 17 Sep 2025 14:49:49 +0000 asID: 22773 IP address blocks: 2600:8800:f824::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:8d:0e:2d:8a:cd:7c:9e:94:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:49:49 2025 GMT Not After : Sep 17 14:49:49 2025 GMT Subject: CN=17f4e646-0fc8-440f-9338-d6b9e36b1bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:fa:60:48:2c:7d:0a:d3:55:ae:16:5b:ec: bf:ef:63:6c:54:50:25:f1:6c:24:b3:c1:8b:c6:e9: 7b:89:29:c4:61:bc:11:96:b2:48:d6:cc:21:8c:e2: c5:90:3a:be:f2:6a:e9:c5:4a:f1:f0:b8:eb:2c:31: a8:ab:7b:5f:b0:a8:38:21:e8:a0:82:bf:31:22:86: 60:27:2c:d6:af:36:81:a2:0f:52:f7:23:1e:c4:27: c5:6a:c1:99:1b:4e:73:54:af:88:2a:41:91:1d:69: 86:1e:55:50:2e:bd:8d:ce:84:c2:9e:02:02:a3:4d: d8:31:95:c2:41:a5:99:9c:36:36:dc:6c:ef:73:e0: f3:f1:73:0e:a7:d9:5b:94:cc:70:5f:64:bf:ca:a0: af:7b:ec:41:0e:df:f9:08:13:b2:f7:ad:27:ae:0d: f4:38:23:28:d7:72:63:cf:af:bb:4f:91:9b:e4:28: bc:84:69:18:45:6d:47:d5:74:b7:c4:9d:d5:15:fb: ca:89:17:b1:15:ea:f0:3b:15:d4:d3:25:62:be:18: cb:f6:48:bc:41:2f:d0:f2:15:81:65:dc:25:4f:5d: 60:95:35:db:22:2d:d0:0c:65:fd:66:53:22:56:fe: 66:d6:fd:e7:f5:c3:b6:03:b8:f4:09:aa:dc:58:3c: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:96:39:9C:C0:A8:41:23:76:A5:62:EC:C3:04:9C:49:C1:82:B1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1317c11f-56ba-35cb-ae2e-38ca78fdf671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:f824::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f3:a4:8f:96:74:f6:01:3e:75:5a:b1:33:45:8a:0a:b0:97: 14:b1:01:a6:e9:6e:75:5d:a9:8c:59:de:2b:a1:36:a7:eb:60: c7:4b:0f:8b:0f:fc:8f:40:48:bd:45:b2:63:8c:5d:35:25:f5: b8:4e:75:a9:d0:09:f0:26:da:04:f7:dd:4e:5b:dd:23:0a:eb: e3:1a:f9:53:b2:08:38:44:fe:7e:55:8c:5f:3f:46:fa:95:0a: 6d:18:57:60:f2:d7:5f:cf:12:ef:b0:06:6d:a1:db:a4:70:c3: ef:dc:85:5d:a7:fa:d1:ba:92:dc:47:2b:18:e5:90:4d:b8:3b: 6b:c0:66:a5:d5:40:7d:52:2a:f3:3c:b6:cd:d1:0e:66:30:07: f7:7c:08:e3:71:c7:ef:9c:12:6d:bd:89:5b:c7:a6:e4:eb:33: 86:34:1d:b8:a8:61:61:e7:82:c9:15:8d:db:c2:d4:2c:55:67: fe:9c:47:4b:24:e6:e7:60:ed:c5:d0:73:62:b3:79:1f:a4:88: 29:3d:c8:fe:a9:60:b4:f2:02:3d:98:05:1b:8b:e5:97:e8:16: ff:01:8a:e2:1d:33:da:8e:e1:cb:0c:ab:05:f3:47:a1:a8:83: 87:29:4c:e5:32:a5:14:47:8e:fb:a3:f4:a4:2e:64:e5:49:53: 5f:ff:b7:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e40OLYrNfJ6UmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDk0OVoXDTI1MDkxNzE0NDk0OVowLzEtMCsGA1UEAxMk MTdmNGU2NDYtMGZjOC00NDBmLTkzMzgtZDZiOWUzNmIxYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutv6YEgsfQrTVa4WW+y/72NsVFAl8Wwks8GL xul7iSnEYbwRlrJI1swhjOLFkDq+8mrpxUrx8LjrLDGoq3tfsKg4Ieiggr8xIoZg JyzWrzaBog9S9yMexCfFasGZG05zVK+IKkGRHWmGHlVQLr2NzoTCngICo03YMZXC QaWZnDY23Gzvc+Dz8XMOp9lblMxwX2S/yqCve+xBDt/5CBOy960nrg30OCMo13Jj z6+7T5Gb5Ci8hGkYRW1H1XS3xJ3VFfvKiRexFerwOxXU0yVivhjL9ki8QS/Q8hWB ZdwlT11glTXbIi3QDGX9ZlMiVv5m1v3n9cO2A7j0CarcWDyjywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiWOZzAqEEjdqVi7MMEnEnBgrHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMxN2MxMWYtNTZiYS0z NWNiLWFlMmUtMzhjYTc4ZmRmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAPgk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7zpI+WdPYBPnVasTNFigqwlxSxAabpbnVdqYxZ3iuhNqfrYMdL D4sP/I9ASL1FsmOMXTUl9bhOdanQCfAm2gT33U5b3SMK6+Ma+VOyCDhE/n5VjF8/ RvqVCm0YV2Dy11/PEu+wBm2h26Rww+/chV2n+tG6ktxHKxjlkE24O2vAZqXVQH1S KvM8ts3RDmYwB/d8CONxx++cEm29iVvHpuTrM4Y0HbioYWHngskVjdvC1CxVZ/6c R0sk5udg7cXQc2KzeR+kiCk9yP6pYLTyAj2YBRuL5ZfoFv8BiuIdM9qO4csMqwXz R6Gog4cpTOUypRRHjvuj9KQuZOVJU1//t64= -----END CERTIFICATE-----Generated at Wed Jul 2 07:19:32 2025 by rpki-client