$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d71d1de-2ab2-3c56-88db-52cfd02a77ec.roa File: 1d71d1de-2ab2-3c56-88db-52cfd02a77ec.roa (raw, json) Hash identifier: gWhUNyMIyoWK8FacuM8cL998HorYg/O/1SkpCQos82o= Subject key identifier: AD:EE:5D:E1:DB:F6:E7:1F:4B:5A:C7:01:35:D7:1C:49:01:F1:86:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01EC945C3D907714054E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d71d1de-2ab2-3c56-88db-52cfd02a77ec.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:2fc0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ec:94:5c:3d:90:77:14:05:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c2f5585d-4ca9-4c41-9f60-08c15788cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:1d:db:49:f0:4e:22:f2:7c:e1:16:90:8b: 8c:c3:47:b2:aa:0b:56:b8:d6:f5:94:29:ee:68:f7: 2c:bd:75:4a:d3:90:7c:3e:f9:93:c9:71:c2:1f:7d: 87:3a:a9:fa:93:1d:39:b3:46:a5:54:07:07:ed:7a: f5:13:94:38:da:61:a9:ca:a4:16:e9:c2:d7:2a:cb: 2e:66:ad:48:01:f1:a0:77:6f:95:94:75:fe:38:e8: 5f:fe:cf:36:85:67:3c:99:9c:eb:70:37:37:8a:fd: 3e:2b:95:1b:02:07:f1:60:3a:54:1f:ab:f4:1c:6c: c5:49:ca:13:4b:b0:0b:62:92:96:06:8a:44:84:c3: 3c:d0:fb:b1:bb:0b:4f:0a:92:27:10:69:9e:a4:fc: 29:27:36:a3:41:04:a4:05:92:a7:1e:ea:55:4b:23: fd:2d:bd:03:7d:82:32:e0:3c:ee:0b:f5:5a:9f:72: cb:22:ce:a1:1f:16:2f:99:75:30:4c:cb:91:53:eb: 63:42:72:81:8c:a4:78:e9:23:24:2e:20:bb:97:41: f2:50:cd:ce:51:09:46:b5:5a:c5:0e:90:e0:6b:bf: 18:67:b8:53:be:89:69:e8:35:35:b1:75:6b:8c:c9: a9:d5:3a:26:9d:fa:48:4e:91:b9:7b:fa:90:53:b6: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EE:5D:E1:DB:F6:E7:1F:4B:5A:C7:01:35:D7:1C:49:01:F1:86:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d71d1de-2ab2-3c56-88db-52cfd02a77ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2fc0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c1:d6:b6:29:ca:03:ff:d0:34:ae:ee:ed:0b:22:4f:54:15: ad:8d:50:a5:9b:26:11:81:64:c5:d3:e2:21:7f:43:4e:31:91: 05:fc:03:08:58:45:76:28:e5:58:1d:b4:54:cb:ec:fd:d9:50: 47:4a:23:5c:ab:11:d6:a8:8b:06:1d:04:8b:94:b8:1f:41:b8: be:cd:9a:d0:06:dd:c4:78:fa:1e:5c:fb:9c:1d:cd:bf:ac:8a: 9c:ee:a8:91:83:28:84:be:bb:94:a0:53:e1:04:17:a5:98:5c: b6:06:48:3a:24:6f:15:5e:03:aa:a5:31:06:53:60:ec:cd:78: 60:bc:02:bd:ed:ae:02:e2:e9:be:1a:e1:56:45:e4:b4:15:34: 4c:a1:c1:ae:40:77:a9:8f:c5:17:c5:26:66:c5:1a:6f:d2:60: a4:e1:25:73:c5:17:8c:21:e0:ec:38:31:9c:e6:24:50:f3:7b: 97:37:88:ae:cb:5c:1e:8b:36:46:9d:b7:55:fb:eb:c8:b4:1f: e5:5f:e5:2a:66:4e:65:41:38:fd:67:b0:e5:a1:50:5c:28:3e: 36:eb:02:1b:f2:9e:31:98:2a:64:f8:18:89:5e:8b:66:d7:09: e4:ac:3d:1f:e0:8d:a2:02:49:12:35:0e:53:7d:88:fb:c9:97: 1e:ba:12:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeyUXD2QdxQFTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzJmNTU4NWQtNGNhOS00YzQxLTlmNjAtMDhjMTU3ODhjYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzkd20nwTiLyfOEWkIuMw0eyqgtWuNb1lCnu aPcsvXVK05B8PvmTyXHCH32HOqn6kx05s0alVAcH7Xr1E5Q42mGpyqQW6cLXKssu Zq1IAfGgd2+VlHX+OOhf/s82hWc8mZzrcDc3iv0+K5UbAgfxYDpUH6v0HGzFScoT S7ALYpKWBopEhMM80PuxuwtPCpInEGmepPwpJzajQQSkBZKnHupVSyP9Lb0DfYIy 4DzuC/Van3LLIs6hHxYvmXUwTMuRU+tjQnKBjKR46SMkLiC7l0HyUM3OUQlGtVrF DpDga78YZ7hTvolp6DU1sXVrjMmp1TomnfpITpG5e/qQU7Y/qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3uXeHb9ucfS1rHATXXHEkB8YbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ3MWQxZGUtMmFiMi0z YzU2LTg4ZGItNTJjZmQwMmE3N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAC/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPB1rYpygP/0DSu7u0LIk9UFa2NUKWbJhGBZMXT4iF/Q04xkQX8 AwhYRXYo5VgdtFTL7P3ZUEdKI1yrEdaoiwYdBIuUuB9BuL7NmtAG3cR4+h5c+5wd zb+sipzuqJGDKIS+u5SgU+EEF6WYXLYGSDokbxVeA6qlMQZTYOzNeGC8Ar3trgLi 6b4a4VZF5LQVNEyhwa5Ad6mPxRfFJmbFGm/SYKThJXPFF4wh4Ow4MZzmJFDze5c3 iK7LXB6LNkadt1X768i0H+Vf5SpmTmVBOP1nsOWhUFwoPjbrAhvynjGYKmT4GIle i2bXCeSsPR/gjaICSRI1DlN9iPvJlx66Eic= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:42 2025 by rpki-client