$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389bfb0e-156e-3829-a5ef-a0c14d129a91.roa File: 389bfb0e-156e-3829-a5ef-a0c14d129a91.roa (raw, json) Hash identifier: USQbc+etkdFCrz+LRqgqBGm0LHYt7SE7Vn+ok7o3psI= Subject key identifier: B7:FF:C3:A4:89:F5:29:C7:EF:F9:CE:5D:61:6C:1B:2A:44:E4:5B:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A58E460B3D09201DE8D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389bfb0e-156e-3829-a5ef-a0c14d129a91.roa Signing time: Thu 19 Jun 2025 14:47:24 +0000 ROA not before: Thu 19 Jun 2025 14:47:24 +0000 ROA not after: Wed 17 Sep 2025 14:47:24 +0000 asID: 22773 IP address blocks: 2600:8800:7500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:58:e4:60:b3:d0:92:01:de:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:47:24 2025 GMT Not After : Sep 17 14:47:24 2025 GMT Subject: CN=879a3896-e0d8-4c4c-8a78-5b4c1eef5047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:c4:b1:bb:bb:09:9b:04:e4:f4:7b:2e:ac: 98:18:33:17:f4:92:41:2b:37:a6:14:1d:2a:67:80: b8:e9:af:9d:54:85:38:fc:31:05:37:43:90:05:60: 96:c5:29:06:2e:5b:fa:bc:26:05:35:ff:a3:31:3c: 73:c8:b7:ac:39:df:c6:7b:90:69:c4:49:6e:bc:23: 1e:78:1f:45:38:85:aa:11:8b:92:65:b6:00:a9:d6: 6d:3d:5d:bd:fd:13:6d:f6:04:40:79:02:68:54:a6: ff:98:1e:25:fd:32:6e:21:0c:f5:b8:e9:c4:93:f0: cf:4a:9c:e5:bf:13:c7:d6:7e:a6:fd:49:b4:4a:09: 8b:c9:b3:41:d2:29:c1:e6:a1:c6:5d:fc:7d:1c:1a: c7:04:d0:fe:95:bd:a4:02:d2:a3:bb:d7:50:65:1c: e3:88:ee:ce:84:4b:5d:58:96:89:94:40:cd:38:c8: a4:83:72:39:34:ef:4e:4f:ac:6e:32:a4:34:1c:06: d2:2a:f6:f9:e2:a5:6b:19:43:70:6e:66:fb:ba:2d: 51:10:19:3b:b7:84:e2:ab:55:98:a6:6d:05:a7:93: ba:c8:d8:f6:96:e3:02:80:da:fd:29:58:04:9b:ad: 33:01:e9:e9:fe:ac:e1:2c:36:ad:65:f2:b0:e0:f6: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:C3:A4:89:F5:29:C7:EF:F9:CE:5D:61:6C:1B:2A:44:E4:5B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389bfb0e-156e-3829-a5ef-a0c14d129a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7e:e9:89:dc:ce:ab:5c:56:44:7d:38:ed:5e:7e:70:2b:04: 36:e2:ed:cf:cf:0f:aa:c9:c3:2f:bb:97:88:9e:29:7b:18:43: 20:fa:c3:b9:88:1d:e7:8d:ec:40:7e:23:dd:fe:44:cd:96:29: d7:d7:f5:3d:2b:82:b2:3b:43:32:ea:5b:e2:a8:46:e0:9a:81: 16:35:f3:2f:bf:67:2e:e5:79:b3:e9:3b:6a:1b:3e:e1:6e:ee: ca:11:1c:29:06:cc:62:2e:c4:24:94:0c:3f:de:35:70:97:01: 56:e6:b9:95:4f:6e:3b:a1:57:53:93:05:d1:2d:ba:bc:3b:a6: c5:ad:44:e9:83:71:47:c5:b1:3b:dd:be:39:5b:8a:95:98:1f: 72:b2:51:ce:25:0c:b3:8d:2e:5a:e5:e8:3d:36:4d:59:52:1c: 75:cb:77:00:2d:4f:ca:58:45:aa:34:3a:e1:30:66:6e:42:ef: 0e:16:59:a3:88:68:9f:9f:3a:5b:e4:2f:09:04:e6:b8:ef:ae: 89:49:e7:f1:4f:6d:88:a7:88:c1:c8:be:a8:28:7d:2a:d0:5a: 72:c1:86:c5:e6:80:1d:cd:e6:1c:4b:43:96:e9:b0:64:ab:2b: f6:9f:0c:92:2f:02:5c:6d:dc:a1:ee:9c:9f:04:d4:b6:fe:43: b5:9e:cc:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eljkYLPQkgHejQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDcyNFoXDTI1MDkxNzE0NDcyNFowLzEtMCsGA1UEAxMk ODc5YTM4OTYtZTBkOC00YzRjLThhNzgtNWI0YzFlZWY1MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLzEsbu7CZsE5PR7LqyYGDMX9JJBKzemFB0q Z4C46a+dVIU4/DEFN0OQBWCWxSkGLlv6vCYFNf+jMTxzyLesOd/Ge5BpxEluvCMe eB9FOIWqEYuSZbYAqdZtPV29/RNt9gRAeQJoVKb/mB4l/TJuIQz1uOnEk/DPSpzl vxPH1n6m/Um0SgmLybNB0inB5qHGXfx9HBrHBND+lb2kAtKju9dQZRzjiO7OhEtd WJaJlEDNOMikg3I5NO9OT6xuMqQ0HAbSKvb54qVrGUNwbmb7ui1REBk7t4Tiq1WY pm0Fp5O6yNj2luMCgNr9KVgEm60zAenp/qzhLDatZfKw4Pa8tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLf/w6SJ9SnH7/nOXWFsGypE5FuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg5YmZiMGUtMTU2ZS0z ODI5LWE1ZWYtYTBjMTRkMTI5YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAHUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5+6YnczqtcVkR9OO1efnArBDbi7c/PD6rJwy+7l4ieKXsYQyD6 w7mIHeeN7EB+I93+RM2WKdfX9T0rgrI7QzLqW+KoRuCagRY18y+/Zy7lebPpO2ob PuFu7soRHCkGzGIuxCSUDD/eNXCXAVbmuZVPbjuhV1OTBdEturw7psWtROmDcUfF sTvdvjlbipWYH3KyUc4lDLONLlrl6D02TVlSHHXLdwAtT8pYRao0OuEwZm5C7w4W WaOIaJ+fOlvkLwkE5rjvrolJ5/FPbYiniMHIvqgofSrQWnLBhsXmgB3N5hxLQ5bp sGSrK/afDJIvAlxt3KHunJ8E1Lb+Q7WezBM= -----END CERTIFICATE-----Generated at Wed Jul 2 14:47:59 2025 by rpki-client