$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5049aeef-dc8a-32c3-b561-224c6ffaa29b.roa File: 5049aeef-dc8a-32c3-b561-224c6ffaa29b.roa (raw, json) Hash identifier: xUxZyJW0tqQDySJtWR3T/rG2AXmLKyhKa5N9rglrXXw= Subject key identifier: A5:71:06:15:96:52:D1:15:E2:56:1C:45:99:BE:50:0F:4C:D8:EB:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7A68B80240526D054EE880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5049aeef-dc8a-32c3-b561-224c6ffaa29b.roa Signing time: Thu 19 Jun 2025 14:47:31 +0000 ROA not before: Thu 19 Jun 2025 14:47:31 +0000 ROA not after: Wed 17 Sep 2025 14:47:31 +0000 asID: 22773 IP address blocks: 2600:8800:7f8c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7a:68:b8:02:40:52:6d:05:4e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:47:31 2025 GMT Not After : Sep 17 14:47:31 2025 GMT Subject: CN=ca654059-d159-4a7a-b06d-c55f1db25860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:53:0c:6e:57:0e:df:15:68:1d:91:94:e0: 30:ca:ad:8c:f9:f1:69:5c:c5:87:d9:7f:43:82:4f: d5:13:cf:4d:29:7b:4c:dd:fc:61:48:09:3f:22:81: f5:c6:12:32:44:8b:a7:ed:03:c9:55:c4:45:77:4c: 4a:4f:4b:96:4e:31:8e:c2:be:84:af:2c:a1:c3:3a: c5:50:07:9b:20:69:cd:2a:8e:16:0b:f6:19:01:e7: 93:ee:dc:96:fd:d1:6e:1f:65:e3:9c:25:b3:97:20: c6:53:a3:b7:c6:21:80:f4:cd:17:55:47:9e:f1:17: 8a:e8:27:c9:d2:11:dd:bc:e4:c0:5f:6a:5a:85:0f: 50:56:64:6f:bb:46:ed:88:17:2e:ac:1c:d5:93:e7: a0:45:b0:0c:0b:dd:58:7c:2b:97:81:de:29:b8:b7: e2:28:21:11:1c:99:6a:42:6d:d9:c8:23:f2:50:93: 8b:43:42:a1:d3:98:95:ea:34:42:b6:21:a3:54:20: a1:11:f1:c2:ba:e9:e4:8a:64:73:cf:98:5a:43:94: 43:bf:3c:20:16:3a:6c:09:35:dc:5d:0a:1e:12:b7: dd:30:ae:90:5c:c7:03:33:71:42:21:f6:69:70:a4: 47:86:5c:d5:06:a2:7b:c3:c7:5c:b4:d4:21:8a:a7: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:71:06:15:96:52:D1:15:E2:56:1C:45:99:BE:50:0F:4C:D8:EB:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5049aeef-dc8a-32c3-b561-224c6ffaa29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7f8c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b2:a3:81:f9:a8:ed:38:4f:f4:d0:8e:2b:9f:9c:d1:41:7c: 0a:6e:68:02:57:bf:10:37:d1:b9:27:9e:8a:01:69:20:dc:81: 47:a6:52:e7:4d:26:b6:68:c1:6d:da:83:47:25:fb:a6:73:87: 29:c6:d6:d7:60:17:2f:bd:71:ea:85:04:3a:f0:d5:5a:5a:84: f3:14:52:eb:0f:73:e8:aa:c6:d7:06:18:62:11:f6:e4:d7:10: f5:e7:23:ed:5d:c0:2f:f9:8b:e7:28:b9:31:8c:e1:d5:f8:81: 1b:79:6f:9f:7b:99:d6:fb:6d:31:1b:12:05:63:3d:e6:36:b8: f5:90:f6:ed:35:a3:4c:3f:57:66:81:76:89:3d:b4:19:b2:40: 3b:45:2f:7e:39:d5:67:d8:12:d8:8d:71:05:40:1e:9f:d8:d5: c4:50:fb:72:63:b6:0b:7a:b1:25:e7:84:b4:81:c4:4c:bb:b4: 65:49:4c:ca:02:dc:78:c3:73:83:ad:a3:13:a7:b4:bd:90:d1: 29:71:16:7b:7d:13:1a:df:75:73:78:64:3b:a1:fa:3a:cc:1b: aa:0b:ab:87:94:1b:aa:f1:63:88:0e:3d:b5:85:91:cb:03:1a: ee:44:59:b1:e6:cf:f3:9f:7e:65:10:31:28:51:e8:f4:97:db: 33:19:4b:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+emi4AkBSbQVO6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDczMVoXDTI1MDkxNzE0NDczMVowLzEtMCsGA1UEAxMk Y2E2NTQwNTktZDE1OS00YTdhLWIwNmQtYzU1ZjFkYjI1ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwdTDG5XDt8VaB2RlOAwyq2M+fFpXMWH2X9D gk/VE89NKXtM3fxhSAk/IoH1xhIyRIun7QPJVcRFd0xKT0uWTjGOwr6EryyhwzrF UAebIGnNKo4WC/YZAeeT7tyW/dFuH2XjnCWzlyDGU6O3xiGA9M0XVUee8ReK6CfJ 0hHdvOTAX2pahQ9QVmRvu0btiBcurBzVk+egRbAMC91YfCuXgd4puLfiKCERHJlq Qm3ZyCPyUJOLQ0Kh05iV6jRCtiGjVCChEfHCuunkimRzz5haQ5RDvzwgFjpsCTXc XQoeErfdMK6QXMcDM3FCIfZpcKRHhlzVBqJ7w8dctNQhiqe9awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVxBhWWUtEV4lYcRZm+UA9M2OsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTA0OWFlZWYtZGM4YS0z MmMzLWI1NjEtMjI0YzZmZmFhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAH+M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKOyo4H5qO04T/TQjiufnNFBfApuaAJXvxA30bknnooBaSDcgUem UudNJrZowW3ag0cl+6ZzhynG1tdgFy+9ceqFBDrw1VpahPMUUusPc+iqxtcGGGIR 9uTXEPXnI+1dwC/5i+couTGM4dX4gRt5b597mdb7bTEbEgVjPeY2uPWQ9u01o0w/ V2aBdok9tBmyQDtFL3451WfYEtiNcQVAHp/Y1cRQ+3Jjtgt6sSXnhLSBxEy7tGVJ TMoC3HjDc4OtoxOntL2Q0SlxFnt9ExrfdXN4ZDuh+jrMG6oLq4eUG6rxY4gOPbWF kcsDGu5EWbHmz/OffmUQMShR6PSX2zMZS7w= -----END CERTIFICATE-----Generated at Wed Jul 2 15:12:22 2025 by rpki-client