$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa File: 1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa (raw, json) Hash identifier: CcZmIjpe/cYEo+m3rJ23TW4/3tXSQnKjG5gXVtkxf7E= Subject key identifier: 6B:54:BD:4F:5F:3E:BC:F3:49:A5:A6:77:34:4B:4D:A0:6B:49:05:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01E36B37969FD96918ED00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:1142::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:e3:6b:37:96:9f:d9:69:18:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3fc7966f-9afe-43cd-89f7-de1edf32c6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:12:28:5c:aa:98:13:38:17:d3:7f:6d:85: fa:48:e7:9f:a9:34:92:86:69:cd:bd:cb:f4:71:e2: 0a:6e:10:7e:05:f6:ec:e2:b0:1c:7d:88:78:2b:a1: ee:d3:c0:85:80:61:dc:b0:6a:bf:c9:89:32:f5:32: 59:4f:b8:24:6e:3f:27:57:65:c0:90:0c:ad:a9:cd: 8b:92:b9:63:11:04:96:5f:77:b0:0d:c4:72:63:89: 1f:0b:b9:08:33:66:7c:7c:4e:10:00:8c:21:18:7d: 5b:16:11:09:ab:3f:b8:d7:32:ce:e9:1e:60:c1:bd: 9c:8e:b7:9f:c8:19:b8:71:d2:25:d2:f9:c9:a9:5a: 41:ec:5a:c1:98:b4:5b:82:b9:56:dd:70:a1:d0:55: 68:b9:4c:78:d1:48:e8:3a:8e:0d:dd:f2:79:11:fe: 92:30:c4:d3:60:fc:75:83:ef:79:f9:eb:b9:59:b3: b7:51:ad:ee:46:33:46:c1:d1:bc:f8:83:84:b1:6a: 3c:6d:c2:10:64:07:0a:a7:d7:5b:e9:9c:ca:04:10: 77:58:54:78:96:64:77:39:be:d9:6d:46:f3:8c:cd: b0:86:e6:df:f4:69:be:4d:22:b3:85:6c:09:15:26: c2:85:8b:8f:23:a1:b3:05:b1:23:1f:d7:02:3b:d3: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:BD:4F:5F:3E:BC:F3:49:A5:A6:77:34:4B:4D:A0:6B:49:05:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1142::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a7:5c:8b:d9:88:49:05:05:c4:2d:d7:49:23:87:cd:de:cc: 5a:a4:7f:15:2f:ca:bf:ed:60:67:c8:3a:2c:de:a1:7b:5d:f8: 65:26:e9:8c:28:88:75:07:c9:a6:3c:2e:4b:b0:c0:94:d9:45: 8b:d1:4c:fa:39:a4:31:de:41:45:54:9f:26:ae:ce:7b:a3:7c: ed:b7:7f:40:2b:6a:cc:92:d9:23:53:13:04:cd:96:97:a9:5c: 04:54:73:97:35:b0:79:35:12:0e:9d:05:4f:b5:e0:8d:c9:73: 5f:25:20:09:22:76:f5:f7:4b:41:8f:53:20:87:7a:a9:77:65: e5:39:c2:92:02:36:bb:e9:48:ea:f9:5c:85:31:47:56:e2:f5: fe:64:aa:ac:54:4c:b6:f4:5d:d8:16:82:d9:b9:e3:14:45:e9: 84:b1:16:d3:61:1a:e0:6a:fc:df:94:02:64:8a:04:a1:02:aa: 18:d4:83:eb:75:22:fa:12:6b:3f:ba:cd:83:02:4a:70:6c:1a: 1a:18:ab:2e:7b:8c:a8:d2:61:d2:ab:10:c4:ad:0e:e5:54:9b: 1e:4d:f3:cf:68:c5:fd:f4:19:5d:d0:3f:d2:01:57:2c:e0:4e: 83:41:ac:a4:08:ad:ee:55:44:00:b3:6f:bb:9a:97:00:5a:5d: 7f:83:6f:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeNrN5af2WkY7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2ZjNzk2NmYtOWFmZS00M2NkLTg5ZjctZGUxZWRmMzJjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoagSKFyqmBM4F9N/bYX6SOefqTSShmnNvcv0 ceIKbhB+Bfbs4rAcfYh4K6Hu08CFgGHcsGq/yYky9TJZT7gkbj8nV2XAkAytqc2L krljEQSWX3ewDcRyY4kfC7kIM2Z8fE4QAIwhGH1bFhEJqz+41zLO6R5gwb2cjref yBm4cdIl0vnJqVpB7FrBmLRbgrlW3XCh0FVouUx40UjoOo4N3fJ5Ef6SMMTTYPx1 g+95+eu5WbO3Ua3uRjNGwdG8+IOEsWo8bcIQZAcKp9db6ZzKBBB3WFR4lmR3Ob7Z bUbzjM2whubf9Gm+TSKzhWwJFSbChYuPI6GzBbEjH9cCO9Pe5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGtUvU9fPrzzSaWmdzRLTaBrSQVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWVmODk5Y2ItNTI0Ni0z ZWU3LTlkMGItODFiYzNkMDEwODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIABFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmnXIvZiEkFBcQt10kjh83ezFqkfxUvyr/tYGfIOizeoXtd+GUm 6YwoiHUHyaY8LkuwwJTZRYvRTPo5pDHeQUVUnyauznujfO23f0ArasyS2SNTEwTN lpepXARUc5c1sHk1Eg6dBU+14I3Jc18lIAkidvX3S0GPUyCHeql3ZeU5wpICNrvp SOr5XIUxR1bi9f5kqqxUTLb0XdgWgtm54xRF6YSxFtNhGuBq/N+UAmSKBKECqhjU g+t1IvoSaz+6zYMCSnBsGhoYqy57jKjSYdKrEMStDuVUmx5N889oxf30GV3QP9IB VyzgToNBrKQIre5VRACzb7ualwBaXX+Db3Q= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:21 2025 by rpki-client