$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa File: 90d904a0-dea4-319a-a1cf-1e858687b196.roa (raw, json) Hash identifier: QVXuaZS4pQJYjI3Yb1QthwAC6S58QuhTodCr0hGP1B4= Subject key identifier: 09:8F:0D:3F:AD:80:CF:3C:C9:96:8D:85:8B:57:80:A7:7E:F6:49:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123E1CCDA4BEE223D12F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:4006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3e:1c:cd:a4:be:e2:23:d1:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3417a3c2-4d44-4f73-8e0b-53a62c2701f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:e7:4d:6a:10:b9:a6:63:93:f4:32:5b:3b: 16:19:bf:4e:82:c1:55:c9:08:f4:30:df:54:c9:e8: cc:fe:4f:23:8f:cf:90:e8:e8:76:e5:f5:03:2d:fc: ac:cd:e7:77:2e:f4:61:9b:21:f0:77:5e:de:74:e5: a8:62:76:24:b6:f8:bb:7b:cf:14:73:31:26:cc:ce: 55:0b:4b:3e:8e:6b:00:ff:68:c2:0e:4b:04:49:25: 14:eb:ed:69:89:57:d4:10:24:b4:01:65:41:ef:c1: 93:b5:a7:a0:21:9f:90:2e:7b:b3:db:f4:bc:4e:87: 6b:2e:84:a9:77:5d:5d:a9:2b:14:dd:0a:f0:66:a5: a8:e8:6b:1b:28:6a:4e:d6:71:cc:76:4c:89:fd:ac: 0a:b9:db:c8:da:50:05:9a:de:2c:05:a9:3d:0b:0e: b0:b8:62:50:46:ee:d6:d6:ec:54:80:e4:73:ce:7a: 64:0b:6f:d7:c3:e1:4f:9d:df:fd:05:f3:37:be:65: 19:de:d5:bc:a4:f1:d7:1b:9a:0b:6c:f4:a4:6a:a1: 18:f9:2b:d2:9c:2a:e9:e0:92:04:6c:ac:c9:d1:f9: b6:b9:18:75:f9:ce:d6:4f:3f:8c:39:fc:7d:1c:27: f7:f1:d4:2a:49:dc:4b:a1:83:77:1a:d2:43:3f:f1: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8F:0D:3F:AD:80:CF:3C:C9:96:8D:85:8B:57:80:A7:7E:F6:49:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4006::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e4:d8:05:ba:29:ef:ee:c6:cc:a5:89:ff:79:7a:2f:bc:a4: 41:48:45:a9:c4:b7:90:a4:03:35:e0:db:7d:0b:96:62:08:15: 12:c5:96:a1:93:29:3e:fe:7b:c0:00:39:4e:f6:d5:db:df:00: 17:16:a9:f6:a4:99:16:e5:0d:0b:f8:b4:18:61:3b:6b:9d:3f: 56:b8:58:ad:36:c6:66:ee:b5:e8:49:5b:ba:28:fe:ba:08:a7: 2f:33:49:08:2c:2f:9d:8b:3a:2c:b0:06:5f:73:64:55:09:e5: 69:d3:bb:6b:62:23:c8:51:ad:2b:99:64:61:6c:48:ff:58:0e: 37:61:3e:08:e7:df:a3:fa:8b:0b:36:a0:6e:94:a1:2e:c1:48: 46:40:86:49:05:8d:c9:f9:f6:75:09:7c:7e:e5:79:dd:03:dc: de:8f:4b:3f:fb:f6:31:e8:49:8f:21:d1:c5:96:10:ad:27:46: fa:96:d8:65:50:9b:b2:9b:78:6f:78:e8:c2:d8:f7:ec:21:95: 57:c8:7a:d7:ca:55:58:fb:6a:6c:cc:6c:5f:17:12:06:41:03: 2d:44:1d:bd:9e:e4:af:ba:3e:d3:18:bb:f5:88:75:a3:f9:5e: b6:65:77:46:49:03:41:5f:0a:81:85:4f:51:db:2f:fe:42:43: cb:2a:c9:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEj4czaS+4iPRLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzQxN2EzYzItNGQ0NC00ZjczLThlMGItNTNhNjJjMjcwMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/nTWoQuaZjk/QyWzsWGb9OgsFVyQj0MN9U yejM/k8jj8+Q6Oh25fUDLfyszed3LvRhmyHwd17edOWoYnYktvi7e88UczEmzM5V C0s+jmsA/2jCDksESSUU6+1piVfUECS0AWVB78GTtaegIZ+QLnuz2/S8TodrLoSp d11dqSsU3QrwZqWo6GsbKGpO1nHMdkyJ/awKudvI2lAFmt4sBak9Cw6wuGJQRu7W 1uxUgORzznpkC2/Xw+FPnd/9BfM3vmUZ3tW8pPHXG5oLbPSkaqEY+SvSnCrp4JIE bKzJ0fm2uRh1+c7WTz+MOfx9HCf38dQqSdxLoYN3GtJDP/EbEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmPDT+tgM88yZaNhYtXgKd+9kkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBkOTA0YTAtZGVhNC0z MTlhLWExY2YtMWU4NTg2ODdiMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLk2AW6Ke/uxsylif95ei+8pEFIRanEt5CkAzXg230LlmIIFRLF lqGTKT7+e8AAOU721dvfABcWqfakmRblDQv4tBhhO2udP1a4WK02xmbutehJW7oo /roIpy8zSQgsL52LOiywBl9zZFUJ5WnTu2tiI8hRrSuZZGFsSP9YDjdhPgjn36P6 iws2oG6UoS7BSEZAhkkFjcn59nUJfH7led0D3N6PSz/79jHoSY8h0cWWEK0nRvqW 2GVQm7KbeG946MLY9+whlVfIetfKVVj7amzMbF8XEgZBAy1EHb2e5K+6PtMYu/WI daP5XrZld0ZJA0FfCoGFT1HbL/5CQ8sqydM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:19 2025 by rpki-client