$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33dc540a-e389-3982-a454-8b3f7480fb92.roa File: 33dc540a-e389-3982-a454-8b3f7480fb92.roa (raw, json) Hash identifier: xqcJ5fFth1/xRJVfPL6p7qNvFIBYKEE8g7m+mTnXbeY= Subject key identifier: AB:CA:AF:6A:C5:FD:9B:4A:50:FD:AB:62:81:A8:52:E3:5B:0F:7E:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7AA9138BE4B1439315E300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33dc540a-e389-3982-a454-8b3f7480fb92.roa Signing time: Thu 19 Jun 2025 14:48:02 +0000 ROA not before: Thu 19 Jun 2025 14:48:02 +0000 ROA not after: Wed 17 Sep 2025 14:48:02 +0000 asID: 22773 IP address blocks: 2600:8800:8740::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:a9:13:8b:e4:b1:43:93:15:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:48:02 2025 GMT Not After : Sep 17 14:48:02 2025 GMT Subject: CN=ddbe49e8-3bb6-47ff-bf8b-5863d098ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:8c:a5:86:0b:fc:35:fc:81:cf:dc:7b:b9: 83:98:10:ef:c8:81:21:1c:c8:2c:45:f7:79:a7:fa: 1b:c7:cd:7b:df:ad:8c:79:43:e8:ed:fe:08:87:a8: 82:24:7b:f4:13:56:a9:2b:65:68:b9:2d:aa:04:49: 86:2c:fb:d7:eb:ed:01:bb:8f:9e:5d:69:6b:37:27: 46:71:27:b2:75:c8:3e:75:8f:63:30:f0:94:f2:10: f4:88:a7:73:a1:bb:4f:1d:7b:0b:ff:8f:36:b4:4c: 59:ad:86:34:31:65:70:90:36:9e:09:1a:2e:34:e4: 03:a8:17:fa:da:d4:b6:24:32:8c:64:a8:1c:81:29: 06:46:2a:ae:c1:23:1e:f2:f4:b3:06:dd:57:20:2c: 5a:2f:26:20:19:c4:b0:a1:e7:72:db:ca:e5:a1:2c: bd:de:d4:74:7f:19:fd:ba:86:48:75:9c:58:d7:e5: d8:71:a2:c8:f1:26:5b:2c:8d:b7:82:47:1d:a3:d7: 4e:5f:3f:a0:4f:6d:a0:ca:79:7b:ba:6a:3a:a3:5b: bf:99:e7:08:b3:7c:98:cc:f3:b3:6a:2b:50:fc:03: 9c:f6:d2:09:cb:40:5c:3f:6f:87:df:e2:fc:a9:82: a0:d6:a5:99:e5:62:be:18:52:28:18:09:c8:c2:c0: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CA:AF:6A:C5:FD:9B:4A:50:FD:AB:62:81:A8:52:E3:5B:0F:7E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33dc540a-e389-3982-a454-8b3f7480fb92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8740::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ae:eb:17:16:8c:73:82:22:97:49:d6:78:d9:cc:ad:01:e2: 42:e4:7b:4c:67:d4:39:14:c8:4a:96:f8:62:0f:f9:c3:19:10: 93:cc:49:95:3a:2d:00:6d:93:64:95:a1:7c:d9:22:94:5d:8d: 6c:47:4a:09:2a:bd:0e:d3:63:09:09:ea:08:eb:ff:6c:c4:6b: 1a:2c:f6:27:ef:b0:0c:2c:d0:a3:8a:f1:6e:8c:97:9a:ca:22: 9b:d1:45:cd:34:5c:02:7f:e7:97:1e:cb:b4:3e:99:78:87:8b: 7c:a1:d8:80:6e:fa:6c:55:36:7b:20:8b:25:83:94:b0:68:5a: 80:21:41:c7:26:cb:35:a5:83:7a:3f:6c:bf:b2:70:c6:61:54: bb:1b:d1:a8:95:ac:39:bf:9c:e7:b1:5d:bd:85:64:f3:3c:f6: a1:4d:99:9d:46:89:32:2a:7a:0a:48:0d:e4:f6:ef:89:48:1d: 60:94:c9:70:04:ba:97:90:93:b8:b4:72:04:75:43:d3:ac:ad: 14:fb:ed:7f:b1:c1:47:30:43:cb:70:e9:d5:f4:fc:70:0c:79: 7e:4a:32:ff:68:b8:8f:cf:be:f7:5f:3b:ef:ce:02:32:94:7d: d3:11:65:2c:5a:9d:a3:03:78:c4:9d:41:83:76:7c:8d:15:56: e6:d7:eb:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eqkTi+SxQ5MV4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDgwMloXDTI1MDkxNzE0NDgwMlowLzEtMCsGA1UEAxMk ZGRiZTQ5ZTgtM2JiNi00N2ZmLWJmOGItNTg2M2QwOThmZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkeMpYYL/DX8gc/ce7mDmBDvyIEhHMgsRfd5 p/obx817362MeUPo7f4Ih6iCJHv0E1apK2VouS2qBEmGLPvX6+0Bu4+eXWlrNydG cSeydcg+dY9jMPCU8hD0iKdzobtPHXsL/482tExZrYY0MWVwkDaeCRouNOQDqBf6 2tS2JDKMZKgcgSkGRiquwSMe8vSzBt1XICxaLyYgGcSwoedy28rloSy93tR0fxn9 uoZIdZxY1+XYcaLI8SZbLI23gkcdo9dOXz+gT22gynl7umo6o1u/mecIs3yYzPOz aitQ/AOc9tIJy0BcP2+H3+L8qYKg1qWZ5WK+GFIoGAnIwsDg3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKvKr2rF/ZtKUP2rYoGoUuNbD34sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNkYzU0MGEtZTM4OS0z OTgyLWE0NTQtOGIzZjc0ODBmYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAIdA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOu6xcWjHOCIpdJ1njZzK0B4kLke0xn1DkUyEqW+GIP+cMZEJPM SZU6LQBtk2SVoXzZIpRdjWxHSgkqvQ7TYwkJ6gjr/2zEaxos9ifvsAws0KOK8W6M l5rKIpvRRc00XAJ/55cey7Q+mXiHi3yh2IBu+mxVNnsgiyWDlLBoWoAhQccmyzWl g3o/bL+ycMZhVLsb0aiVrDm/nOexXb2FZPM89qFNmZ1GiTIqegpIDeT274lIHWCU yXAEupeQk7i0cgR1Q9OsrRT77X+xwUcwQ8tw6dX0/HAMeX5KMv9ouI/PvvdfO+/O AjKUfdMRZSxanaMDeMSdQYN2fI0VVubX690= -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:19 2025 by rpki-client