$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e62fed-c8ae-32eb-ab9d-238ffd8a34ad.roa File: 18e62fed-c8ae-32eb-ab9d-238ffd8a34ad.roa (raw, json) Hash identifier: Gsz6pQz1DVB7OYvMqcUrj+yEdKdBBlvYOO3tS1fijC8= Subject key identifier: E5:AC:4C:CF:F1:C7:6F:E9:0D:87:40:53:69:92:5B:DA:96:A0:E6:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01FBC07B85B26022C55CA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e62fed-c8ae-32eb-ab9d-238ffd8a34ad.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:5680::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:fb:c0:7b:85:b2:60:22:c5:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=10d955a3-b452-4de8-8605-3f56f103b876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:74:f9:7a:89:4d:04:20:72:1b:7a:20:8e: 42:4b:2b:5d:0e:74:bb:e7:23:f6:5e:93:37:23:50: e2:61:9f:82:74:61:a7:0e:51:d2:97:79:79:17:75: be:65:33:76:70:b0:e3:79:01:dc:9c:51:cc:bb:70: 71:1a:c4:e3:71:8a:bd:59:ce:75:d1:10:c8:a5:06: 13:55:c7:a4:de:55:17:e0:58:56:ff:3b:1a:45:c3: b3:28:d4:65:92:fb:6d:64:82:35:aa:79:17:ea:0a: 62:2a:ca:e4:bb:d1:32:15:b0:9e:44:68:a2:17:0a: d5:2a:fb:af:b2:1d:0b:6d:6b:c3:b7:12:b9:d4:3e: 51:a2:49:9d:99:98:cb:41:9b:d1:2f:7e:4f:2e:29: c3:c7:9d:3e:75:06:66:ec:da:e6:45:75:58:c3:c6: e0:d3:04:bd:db:ae:66:b1:e1:fb:0d:21:8e:e3:e6: 46:d8:94:f5:93:f5:76:ff:fa:b6:f7:c3:d5:0c:70: 65:dd:24:a2:01:72:f1:13:d3:59:74:3c:60:c2:e9: e4:2a:60:61:38:f0:b9:f8:62:02:a8:af:b8:e2:59: dc:64:d8:fb:28:09:bd:33:0e:cd:75:23:f1:e8:fb: d1:99:ba:33:95:e8:73:ff:99:25:de:08:ac:12:c7: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:4C:CF:F1:C7:6F:E9:0D:87:40:53:69:92:5B:DA:96:A0:E6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e62fed-c8ae-32eb-ab9d-238ffd8a34ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5680::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:57:77:86:4f:23:e8:80:43:8e:72:71:95:18:eb:9f:31:f9: 73:98:14:c2:02:c2:d2:9b:e1:5f:c7:27:ad:18:4d:cb:32:96: 82:7f:5c:66:fd:3e:0d:00:ec:7e:cd:dc:93:36:83:55:46:2c: 9e:1b:b7:02:1e:67:c6:e8:76:f5:44:af:6a:a2:c2:a2:f2:a6: 28:13:4f:1f:d0:92:20:3d:04:ff:4c:a3:83:8d:28:c0:a1:72: 9e:f7:0a:84:b8:5b:a7:f7:25:d1:14:04:81:8a:9c:5d:5e:2c: e2:2f:59:10:0d:a2:96:ab:c4:25:0b:79:7f:98:3c:1b:6b:46: 56:ca:5a:e2:01:a6:61:50:44:39:c7:83:24:5f:c8:c7:f3:2a: 02:16:a7:71:d4:74:c5:98:47:7b:ee:c8:57:a8:b1:84:9c:00: 43:07:13:70:5e:ab:b4:f2:b2:d4:2a:b1:09:8c:ff:6c:e0:fd: e6:8a:44:9c:ca:2b:09:76:76:11:b6:0a:bb:fa:b8:9d:28:d6: cf:3b:ce:08:4e:56:d2:3c:bf:a4:98:3d:3f:f0:8b:56:7f:8e: b2:af:21:b3:63:85:9a:12:97:e6:a5:23:39:78:b5:4c:6a:0a: e4:2f:d3:c6:9e:ce:48:43:88:57:f3:0d:bd:ef:65:81:62:23: 69:22:e4:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfvAe4WyYCLFXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTBkOTU1YTMtYjQ1Mi00ZGU4LTg2MDUtM2Y1NmYxMDNiODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcZ0+XqJTQQgcht6II5CSytdDnS75yP2XpM3 I1DiYZ+CdGGnDlHSl3l5F3W+ZTN2cLDjeQHcnFHMu3BxGsTjcYq9Wc510RDIpQYT Vcek3lUX4FhW/zsaRcOzKNRlkvttZII1qnkX6gpiKsrku9EyFbCeRGiiFwrVKvuv sh0LbWvDtxK51D5RokmdmZjLQZvRL35PLinDx50+dQZm7NrmRXVYw8bg0wS9265m seH7DSGO4+ZG2JT1k/V2//q298PVDHBl3SSiAXLxE9NZdDxgwunkKmBhOPC5+GIC qK+44lncZNj7KAm9Mw7NdSPx6PvRmbozlehz/5kl3gisEscmiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOWsTM/xx2/pDYdAU2mSW9qWoOaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMThlNjJmZWQtYzhhZS0z MmViLWFiOWQtMjM4ZmZkOGEzNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5Xd4ZPI+iAQ45ycZUY658x+XOYFMICwtKb4V/HJ60YTcsyloJ/ XGb9Pg0A7H7N3JM2g1VGLJ4btwIeZ8bodvVEr2qiwqLypigTTx/QkiA9BP9Mo4ON KMChcp73CoS4W6f3JdEUBIGKnF1eLOIvWRANoparxCULeX+YPBtrRlbKWuIBpmFQ RDnHgyRfyMfzKgIWp3HUdMWYR3vuyFeosYScAEMHE3Beq7TystQqsQmM/2zg/eaK RJzKKwl2dhG2Crv6uJ0o1s87zghOVtI8v6SYPT/wi1Z/jrKvIbNjhZoSl+alIzl4 tUxqCuQv08aezkhDiFfzDb3vZYFiI2ki5Fc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:15 2025 by rpki-client