$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70eadc78-62b0-3ecd-9807-408c2c3edc95.roa File: 70eadc78-62b0-3ecd-9807-408c2c3edc95.roa (raw, json) Hash identifier: IN46ne6eN7IG4tQIxSWOazHzHsnZycgv2wrxVdqK9yM= Subject key identifier: 39:6F:34:DD:FC:D0:16:F9:65:22:9C:0D:B4:D7:5B:9A:70:1E:C9:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E79B89B9F3FCBE9BCE2D1A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70eadc78-62b0-3ecd-9807-408c2c3edc95.roa Signing time: Thu 19 Jun 2025 14:46:08 +0000 ROA not before: Thu 19 Jun 2025 14:46:08 +0000 ROA not after: Wed 17 Sep 2025 14:46:08 +0000 asID: 22773 IP address blocks: 2600:8800:4ca0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:b8:9b:9f:3f:cb:e9:bc:e2:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:46:08 2025 GMT Not After : Sep 17 14:46:08 2025 GMT Subject: CN=0b3a847e-e4f7-4598-a2e2-0e9b18ce1781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:7a:c7:7b:7e:ac:33:37:f4:b8:be:6e:12: 11:ce:0e:5a:ab:bb:d6:53:38:92:e2:c5:a5:b9:ca: 11:3b:a0:1f:2b:45:f4:31:a3:74:e1:65:4a:8b:37: 32:87:c4:4c:68:31:54:5f:9c:cb:cb:77:72:b6:05: 6f:8b:f4:cb:38:9a:08:bb:e8:01:c7:65:46:b4:ee: 7a:94:a3:73:01:f2:52:f3:ca:3b:e1:02:c5:29:c5: 25:e3:c3:53:31:f7:32:35:e4:4b:c1:79:88:7c:fe: 5f:12:8e:ce:6e:31:fa:83:13:8e:88:26:c8:4a:e7: ba:0b:24:9c:f4:15:57:e7:78:94:b5:bd:02:ca:28: 76:6d:b3:81:2e:ac:e6:e6:6a:6b:37:ac:69:f6:dc: de:3e:75:ef:da:4e:68:42:45:d6:6b:25:79:13:8e: f0:35:0b:5c:66:b7:39:42:5c:8c:64:41:49:69:66: 5f:12:bc:a4:5e:51:11:2b:85:b3:c5:8e:09:da:95: eb:af:84:8e:56:65:e9:81:37:51:f2:8a:d7:be:d9: 53:6e:f0:05:1b:b9:da:4b:59:8d:f6:d0:ea:04:d3: f9:ba:41:40:e3:ae:97:90:2e:2f:1a:0d:46:6f:e0: 7b:47:56:ec:3f:d9:6a:df:79:73:d5:26:3c:0e:ed: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:34:DD:FC:D0:16:F9:65:22:9C:0D:B4:D7:5B:9A:70:1E:C9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70eadc78-62b0-3ecd-9807-408c2c3edc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4ca0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3d:1c:a9:ed:c0:f6:c6:a1:1c:e0:40:34:e4:4e:7c:17:07: e8:e9:34:43:e8:4d:7e:e6:99:d8:19:cc:df:6e:80:a0:3b:c9: 93:37:25:ce:40:84:42:60:47:c1:a3:9e:e7:ac:69:42:49:a4: da:8e:2d:c7:f9:28:0d:cc:4c:de:53:22:ed:9a:e9:59:c7:9a: b5:99:25:13:7b:03:e8:82:6c:6d:5d:ef:57:dd:5f:44:db:cc: 5c:81:0e:77:e8:f2:73:b9:d6:21:96:42:f1:8c:d6:22:de:7c: d0:24:af:72:7b:a8:0e:00:a6:31:4f:c3:5a:f0:9a:73:77:77: 2c:16:be:d4:c8:98:c0:ac:4e:f2:08:c0:2a:5c:e8:95:ad:bb: 88:ee:d1:8d:09:be:e0:b2:2e:a1:30:5e:a8:e2:63:9d:6a:c2: dc:37:2b:e2:92:c5:fd:a8:0d:7b:79:e7:d8:48:86:f3:b3:9b: 6b:0b:b5:dd:fa:e6:55:3b:32:2a:fd:e9:1f:f8:c0:87:7a:5f: 9b:62:85:d7:60:4a:60:86:ef:03:e0:bb:7f:44:16:ae:ab:83: b6:e8:50:a8:06:19:6d:cb:9f:c7:63:34:9f:12:55:ac:b3:58: ac:4b:5d:75:96:fc:e9:0b:59:51:38:21:9b:a5:8f:5a:35:24: bc:31:b4:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ebibnz/L6bzi0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDYwOFoXDTI1MDkxNzE0NDYwOFowLzEtMCsGA1UEAxMk MGIzYTg0N2UtZTRmNy00NTk4LWEyZTItMGU5YjE4Y2UxNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwd6x3t+rDM39Li+bhIRzg5aq7vWUziS4sWl ucoRO6AfK0X0MaN04WVKizcyh8RMaDFUX5zLy3dytgVvi/TLOJoIu+gBx2VGtO56 lKNzAfJS88o74QLFKcUl48NTMfcyNeRLwXmIfP5fEo7ObjH6gxOOiCbISue6CySc 9BVX53iUtb0Cyih2bbOBLqzm5mprN6xp9tzePnXv2k5oQkXWayV5E47wNQtcZrc5 QlyMZEFJaWZfErykXlERK4WzxY4J2pXrr4SOVmXpgTdR8orXvtlTbvAFG7naS1mN 9tDqBNP5ukFA466XkC4vGg1Gb+B7R1bsP9lq33lz1SY8Du3q4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDlvNN380Bb5ZSKcDbTXW5pwHslsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBlYWRjNzgtNjJiMC0z ZWNkLTk4MDctNDA4YzJjM2VkYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAEyg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQ9HKntwPbGoRzgQDTkTnwXB+jpNEPoTX7mmdgZzN9ugKA7yZM3 Jc5AhEJgR8GjnuesaUJJpNqOLcf5KA3MTN5TIu2a6VnHmrWZJRN7A+iCbG1d71fd X0TbzFyBDnfo8nO51iGWQvGM1iLefNAkr3J7qA4ApjFPw1rwmnN3dywWvtTImMCs TvIIwCpc6JWtu4ju0Y0JvuCyLqEwXqjiY51qwtw3K+KSxf2oDXt559hIhvOzm2sL td365lU7Mir96R/4wId6X5tihddgSmCG7wPgu39EFq6rg7boUKgGGW3Ln8djNJ8S VayzWKxLXXWW/OkLWVE4IZulj1o1JLwxtLA= -----END CERTIFICATE-----Generated at Wed Jul 2 15:12:46 2025 by rpki-client