$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa File: 823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa (raw, json) Hash identifier: uQo+qNi4cBk22PdwF8jetizzKtw1VZvaZ5K33sw6DvU= Subject key identifier: AE:E8:4B:10:9A:69:1C:15:57:21:65:BE:F4:1F:8B:B6:56:F3:29:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7824A8F9111084A1653740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa Signing time: Thu 19 Jun 2025 14:42:57 +0000 ROA not before: Thu 19 Jun 2025 14:42:57 +0000 ROA not after: Wed 17 Sep 2025 14:42:57 +0000 asID: 22773 IP address blocks: 2001:578:8b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:78:24:a8:f9:11:10:84:a1:65:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:42:57 2025 GMT Not After : Sep 17 14:42:57 2025 GMT Subject: CN=6da1ee9c-d5e8-4f5e-981a-1f60898f30df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:87:af:bf:c7:c2:b3:cf:d6:1e:6e:16:37: 0c:83:c9:fe:74:e4:b3:61:c1:88:04:38:fb:55:d5: 18:ac:26:d4:1c:6c:06:32:2c:da:c3:9a:04:76:d6: a5:44:94:89:ba:7c:d9:d3:1f:d8:72:48:dd:18:b6: e8:07:96:fc:57:e1:d4:b5:05:15:b7:43:fb:72:29: ae:2d:60:86:6c:f3:a5:a2:62:6f:47:70:dc:de:71: 9a:49:d5:93:dc:3d:f9:d3:03:c9:8f:b6:49:4e:cf: ef:34:a3:d9:45:65:1f:1b:46:29:e8:79:7b:28:06: 13:24:6a:6e:e4:57:d9:51:c6:02:ff:fa:05:69:c5: 28:5c:a8:4f:79:20:60:19:24:89:f6:90:d8:6c:f4: 1d:85:61:dd:7f:bc:04:43:eb:01:00:8d:ce:be:f5: 37:6d:ec:b6:1a:e1:d5:68:7c:0a:23:09:a3:c3:ba: 2c:f6:48:a5:7b:45:b9:e7:a6:f3:54:66:b9:5f:67: f7:29:95:58:e1:63:d5:0d:3d:15:db:03:c4:00:69: 84:f2:df:49:9a:b3:01:4f:89:c8:ba:91:06:be:6d: fa:95:5e:bf:4e:cf:7a:25:00:25:8a:f0:ef:6f:85: d5:c4:94:8b:72:37:10:06:19:dc:4c:2d:c2:56:75: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E8:4B:10:9A:69:1C:15:57:21:65:BE:F4:1F:8B:B6:56:F3:29:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8b1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:47:50:90:44:fd:71:1c:eb:ee:c3:db:26:fc:0d:a4:4d:e8: 91:98:ec:68:0d:9d:fe:8d:ef:5c:8d:c3:f9:35:4f:28:01:0b: 33:03:9a:2b:c6:65:68:7c:59:64:83:05:02:63:97:52:c7:9e: 90:6f:d4:4f:6c:87:91:bf:84:a1:c4:3b:1d:3f:52:be:38:b5: 0f:3f:33:87:34:05:6b:0f:d3:b5:70:a3:fc:67:ca:2d:00:07: b7:29:0d:9c:75:bb:8b:3f:50:8b:13:83:e2:f4:68:dd:0d:cb: f1:bf:a1:fc:a9:27:fd:e9:b2:bf:f6:74:c9:d1:d6:5e:c4:10: 71:25:d2:72:dd:67:d5:16:8d:63:df:2b:84:43:1e:da:ee:21: c7:72:72:51:a0:a1:7c:69:da:24:24:bc:d4:20:20:05:b8:e5: c4:50:ba:97:47:05:81:45:e5:cc:1a:74:0b:e0:26:d6:89:aa: 78:9d:b6:1b:16:67:e3:74:b0:53:92:ef:8e:43:da:03:d6:a5: 7c:11:e0:f7:7c:4b:d4:b1:3d:3b:b8:2a:a5:6c:d6:24:45:09: 53:45:59:9a:85:96:69:04:ec:43:86:28:81:d1:df:fd:1c:a3: db:a8:a9:2c:9c:3c:b5:ee:66:95:91:12:9a:de:21:7a:d2:7b: 0d:28:f5:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eCSo+REQhKFlN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDI1N1oXDTI1MDkxNzE0NDI1N1owLzEtMCsGA1UEAxMk NmRhMWVlOWMtZDVlOC00ZjVlLTk4MWEtMWY2MDg5OGYzMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf+Hr7/HwrPP1h5uFjcMg8n+dOSzYcGIBDj7 VdUYrCbUHGwGMizaw5oEdtalRJSJunzZ0x/YckjdGLboB5b8V+HUtQUVt0P7cimu LWCGbPOlomJvR3Dc3nGaSdWT3D350wPJj7ZJTs/vNKPZRWUfG0Yp6Hl7KAYTJGpu 5FfZUcYC//oFacUoXKhPeSBgGSSJ9pDYbPQdhWHdf7wEQ+sBAI3OvvU3bey2GuHV aHwKIwmjw7os9kile0W556bzVGa5X2f3KZVY4WPVDT0V2wPEAGmE8t9JmrMBT4nI upEGvm36lV6/Ts96JQAlivDvb4XVxJSLcjcQBhncTC3CVnUKVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK7oSxCaaRwVVyFlvvQfi7ZW8ymQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODIzY2I5MWEtZmI3ZS0z YTU3LTk5OGEtZmNmM2JhYWY1MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAix MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJHUJBE/XEc6+7D2yb8DaRN6JGY7GgNnf6N71yNw/k1TygBCzMD mivGZWh8WWSDBQJjl1LHnpBv1E9sh5G/hKHEOx0/Ur44tQ8/M4c0BWsP07Vwo/xn yi0AB7cpDZx1u4s/UIsTg+L0aN0Ny/G/ofypJ/3psr/2dMnR1l7EEHEl0nLdZ9UW jWPfK4RDHtruIcdyclGgoXxp2iQkvNQgIAW45cRQupdHBYFF5cwadAvgJtaJqnid thsWZ+N0sFOS745D2gPWpXwR4Pd8S9SxPTu4KqVs1iRFCVNFWZqFlmkE7EOGKIHR 3/0co9uoqSycPLXuZpWREpreIXrSew0o9Tc= -----END CERTIFICATE-----Generated at Wed Jul 2 07:18:36 2025 by rpki-client