$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa File: 3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa (raw, json) Hash identifier: GQFjWpuFIqvPs6RJx9UZWkiL9LgjVYaGahX76oRO0Dk= Subject key identifier: 51:BD:B3:9B:43:EC:40:A8:B2:46:A0:D4:AE:A4:A9:9B:39:93:B5:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7BF3DC9B87E9028BB56380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa Signing time: Thu 19 Jun 2025 14:50:38 +0000 ROA not before: Thu 19 Jun 2025 14:50:38 +0000 ROA not after: Wed 17 Sep 2025 14:50:38 +0000 asID: 22773 IP address blocks: 2600:880a:1104::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7b:f3:dc:9b:87:e9:02:8b:b5:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:50:38 2025 GMT Not After : Sep 17 14:50:38 2025 GMT Subject: CN=08e43d5e-9aec-49d3-b25a-b5a7059aa8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:10:16:9f:be:b4:8f:1b:8a:27:64:35:36: 45:61:14:8b:47:77:3f:87:df:8e:9e:d2:79:9c:57: b4:ea:40:92:8f:18:c9:0c:a9:ef:83:a6:e8:61:2c: 6c:97:4e:29:91:01:8e:b2:66:2d:c2:7e:f6:dc:b9: 12:e9:78:fd:f4:93:fa:a0:b1:7c:f3:82:03:45:b8: dc:56:98:41:ef:32:50:fb:c8:54:31:16:fc:94:f6: 03:f1:8d:6d:bc:4f:00:b7:85:9d:09:aa:b4:17:74: 30:cd:9f:a2:11:82:b5:a0:4e:a9:b4:38:58:f1:0e: 59:6b:a5:64:cd:25:64:a7:1e:35:d2:1d:a9:03:60: 2e:74:3f:c4:60:d2:fc:05:40:f5:4b:0a:fa:bd:80: 85:76:a1:be:31:e7:0b:a2:83:67:ab:24:f5:5f:4d: 29:71:c0:03:6d:08:aa:9a:fe:e9:02:99:2a:93:1e: c6:9f:7b:57:b0:26:d3:c6:ac:49:be:c2:eb:bf:c8: 7b:4d:36:4a:00:3a:4d:30:1e:0b:77:03:19:5e:5d: ca:b7:24:4b:dd:7f:67:5f:24:14:9a:64:35:2d:8b: 7b:60:99:a1:2d:a3:3d:92:1e:b2:e5:60:ec:55:8b: bc:e3:1c:cb:d5:cc:42:68:39:5c:89:76:d3:85:e6: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:B3:9B:43:EC:40:A8:B2:46:A0:D4:AE:A4:A9:9B:39:93:B5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:1104::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c6:31:1b:72:fa:da:c5:7a:b5:ef:e7:7d:da:33:01:63:83: f8:56:65:e2:50:70:7c:5a:4c:1e:2c:98:78:ac:f3:7f:15:10: 3c:fd:4d:6a:35:ad:18:7b:e6:70:5f:f4:64:4e:6c:00:22:a7: c6:38:c2:b9:ad:2b:e7:6c:1c:c0:5f:49:99:7e:2c:7c:93:8e: 10:d3:4f:cf:f2:c4:ae:74:1e:50:a8:1e:f4:2d:61:6c:7d:9a: 4a:6d:7f:9f:52:0f:b9:d0:c0:f5:e7:6d:37:64:b7:23:8e:d8: 8f:16:11:ad:a0:78:f5:92:c2:5b:54:43:80:d7:49:57:b9:ae: 7d:17:ca:a3:d7:d1:7a:01:fa:9c:54:10:2e:d1:2b:3c:85:cb: 38:db:de:84:fb:63:e2:13:fb:3a:cd:c3:45:8f:75:e5:fc:99: 99:21:07:9c:b7:99:69:a4:c6:09:4e:5f:d1:66:a3:b5:98:c9: 20:da:11:2b:6d:e8:ca:d1:ef:fd:3c:f9:ae:43:e0:19:72:04: a9:be:8e:ef:2d:43:03:0c:d5:2c:c5:fe:d4:b9:5a:3e:f4:c2: df:27:3d:36:f5:dd:b5:cf:08:db:43:e1:d2:05:85:04:04:83: 17:8e:ef:91:eb:f3:43:1f:aa:db:5f:0a:49:ba:30:d2:31:32: 9a:30:51:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+e/Pcm4fpAou1Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NTAzOFoXDTI1MDkxNzE0NTAzOFowLzEtMCsGA1UEAxMk MDhlNDNkNWUtOWFlYy00OWQzLWIyNWEtYjVhNzA1OWFhOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7QQFp++tI8biidkNTZFYRSLR3c/h9+OntJ5 nFe06kCSjxjJDKnvg6boYSxsl04pkQGOsmYtwn723LkS6Xj99JP6oLF884IDRbjc VphB7zJQ+8hUMRb8lPYD8Y1tvE8At4WdCaq0F3QwzZ+iEYK1oE6ptDhY8Q5Za6Vk zSVkpx410h2pA2AudD/EYNL8BUD1Swr6vYCFdqG+MecLooNnqyT1X00pccADbQiq mv7pApkqkx7Gn3tXsCbTxqxJvsLrv8h7TTZKADpNMB4LdwMZXl3KtyRL3X9nXyQU mmQ1LYt7YJmhLaM9kh6y5WDsVYu84xzL1cxCaDlciXbTheYmCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFG9s5tD7ECoskag1K6kqZs5k7WNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FiNGRlN2ItNGZlZi0z YTc4LTk4ODAtMmZmMjU2NzBiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChEE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILGMRty+trFerXv533aMwFjg/hWZeJQcHxaTB4smHis838VEDz9 TWo1rRh75nBf9GRObAAip8Y4wrmtK+dsHMBfSZl+LHyTjhDTT8/yxK50HlCoHvQt YWx9mkptf59SD7nQwPXnbTdktyOO2I8WEa2gePWSwltUQ4DXSVe5rn0XyqPX0XoB +pxUEC7RKzyFyzjb3oT7Y+IT+zrNw0WPdeX8mZkhB5y3mWmkxglOX9Fmo7WYySDa EStt6MrR7/08+a5D4BlyBKm+ju8tQwMM1SzF/tS5Wj70wt8nPTb13bXPCNtD4dIF hQQEgxeO75Hr80MfqttfCkm6MNIxMpowUWU= -----END CERTIFICATE-----Generated at Wed Jul 2 06:51:32 2025 by rpki-client