$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa File: aae0b424-05af-34d8-b1f6-400926f7462b.roa (raw, json) Hash identifier: KZjUxRUoE1PU14hjz0cp11L1t4DHQL+tp+tKfTD6j6M= Subject key identifier: 1B:0C:61:C5:C8:75:C3:3C:D7:D8:C1:08:7D:21:23:EB:D3:4D:1A:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7997C0617F3EE8D90D4140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa Signing time: Thu 19 Jun 2025 14:45:52 +0000 ROA not before: Thu 19 Jun 2025 14:45:52 +0000 ROA not after: Wed 17 Sep 2025 14:45:52 +0000 asID: 22773 IP address blocks: 2600:8800:3f00::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:79:97:c0:61:7f:3e:e8:d9:0d:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:45:52 2025 GMT Not After : Sep 17 14:45:52 2025 GMT Subject: CN=0dede541-ae65-4aa7-9c47-653f3bd9e1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:41:09:b4:20:22:cd:10:7d:65:fe:20:0e: 5e:cb:27:4d:5b:01:86:6e:2a:25:54:81:cb:51:29: b1:0c:f2:bc:73:8a:94:d0:e7:1e:9f:38:23:b9:44: 0c:d7:b5:a4:5e:f7:1d:fe:85:51:33:83:f6:fd:6a: 07:2b:07:2b:13:8f:ae:5a:01:e1:62:5e:48:b4:1c: e4:48:48:04:1c:b2:97:af:30:34:7b:c5:10:7a:c2: 72:bb:63:63:26:ae:31:21:80:b8:b6:4f:d5:71:27: a0:b8:16:88:ed:55:19:7b:42:92:49:c2:76:8d:d9: d4:7e:02:cd:ae:a1:65:32:cc:ba:f1:30:af:d5:92: 76:b9:94:6c:df:be:c1:2a:be:75:1d:f7:fb:c1:be: 59:77:46:f4:49:7a:6a:e4:cd:80:92:16:e8:e1:73: 86:8c:90:58:30:99:e0:0a:fa:5d:24:56:8e:53:a1: 7b:1b:8f:5c:15:27:a3:16:ed:38:a8:62:ed:f5:7e: 13:1d:ff:97:89:7e:4b:ef:c1:19:9c:74:33:e3:dc: b2:e3:73:3a:90:11:67:bb:31:53:19:6a:42:7a:95: a0:c9:eb:6b:70:fc:dd:5f:40:fb:bf:08:9f:75:9e: 81:af:0c:e5:f5:18:cc:b6:89:5b:56:c6:42:6d:d3: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0C:61:C5:C8:75:C3:3C:D7:D8:C1:08:7D:21:23:EB:D3:4D:1A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3f00::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:46:cf:81:32:8c:da:3f:32:13:2c:87:b4:83:77:2f:81:a3: d5:ca:89:60:fa:9a:8f:69:ea:b2:7c:39:ad:88:6c:c2:cf:07: 9b:30:48:7a:9d:f0:32:fb:48:81:fc:24:1b:f5:20:c8:be:35: 63:90:0b:64:f1:25:69:67:8b:85:2d:97:ed:58:c3:07:7c:c8: 54:a1:a2:e6:5e:60:76:46:e8:19:5b:20:23:a2:f4:c8:3d:1f: c5:a8:4a:43:94:fb:84:f7:9e:1d:19:bb:38:e4:55:66:a8:9e: fc:c2:ab:0f:69:8b:1d:f5:5a:9c:3b:a1:1e:22:0f:73:af:c9: d7:23:94:4a:8a:90:13:7e:bd:0d:40:d9:60:04:8f:ed:38:75: 7e:20:00:60:d7:c1:1a:43:69:ff:93:5a:81:68:ec:73:58:bb: 2e:94:15:6e:c0:bd:99:f7:09:09:e2:af:54:c9:95:1f:05:30: 53:10:c1:58:30:41:13:ed:6c:31:fb:85:8c:52:61:2a:e6:97: 1c:09:ad:55:ea:5d:b7:ae:4d:eb:2d:c0:4c:70:f7:84:0d:b4: b5:32:df:5d:fc:34:b1:65:75:09:bf:55:13:73:f5:8b:e0:e8: 43:bc:13:14:c0:db:5e:b9:b6:b6:15:93:bf:cb:1e:6b:03:ca: 7d:ec:16:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eZfAYX8+6NkNQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDU1MloXDTI1MDkxNzE0NDU1MlowLzEtMCsGA1UEAxMk MGRlZGU1NDEtYWU2NS00YWE3LTljNDctNjUzZjNiZDllMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjlBCbQgIs0QfWX+IA5eyydNWwGGbiolVIHL USmxDPK8c4qU0OcenzgjuUQM17WkXvcd/oVRM4P2/WoHKwcrE4+uWgHhYl5ItBzk SEgEHLKXrzA0e8UQesJyu2NjJq4xIYC4tk/VcSeguBaI7VUZe0KSScJ2jdnUfgLN rqFlMsy68TCv1ZJ2uZRs377BKr51Hff7wb5Zd0b0SXpq5M2Akhbo4XOGjJBYMJng CvpdJFaOU6F7G49cFSejFu04qGLt9X4THf+XiX5L78EZnHQz49yy43M6kBFnuzFT GWpCepWgyetrcPzdX0D7vwifdZ6Brwzl9RjMtolbVsZCbdNiywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsMYcXIdcM819jBCH0hI+vTTRo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFlMGI0MjQtMDVhZi0z NGQ4LWIxZjYtNDAwOTI2Zjc0NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAD8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1Gz4EyjNo/MhMsh7SDdy+Bo9XKiWD6mo9p6rJ8Oa2IbMLPB5sw SHqd8DL7SIH8JBv1IMi+NWOQC2TxJWlni4Utl+1Ywwd8yFShouZeYHZG6BlbICOi 9Mg9H8WoSkOU+4T3nh0ZuzjkVWaonvzCqw9pix31Wpw7oR4iD3OvydcjlEqKkBN+ vQ1A2WAEj+04dX4gAGDXwRpDaf+TWoFo7HNYuy6UFW7AvZn3CQnir1TJlR8FMFMQ wVgwQRPtbDH7hYxSYSrmlxwJrVXqXbeuTestwExw94QNtLUy3138NLFldQm/VRNz 9Yvg6EO8ExTA2165trYVk7/LHmsDyn3sFj0= -----END CERTIFICATE-----Generated at Wed Jul 2 14:52:35 2025 by rpki-client