$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a3893be-7188-37b1-a3a3-fe6478edeca8.roa File: 2a3893be-7188-37b1-a3a3-fe6478edeca8.roa (raw, json) Hash identifier: Aesqau53Rc1bSK8h3sl+/dSt0d2ItShOIVqoby7YAU4= Subject key identifier: C3:EB:C9:BA:20:46:DC:3C:80:44:BA:99:C6:A6:62:8B:C3:B2:38:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0218D86871CC723DB11140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a3893be-7188-37b1-a3a3-fe6478edeca8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b70e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:18:d8:68:71:cc:72:3d:b1:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=bc2e92ef-b1da-434d-ba83-840c02e7784d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:99:99:67:80:44:61:b8:ed:3d:d7:0b:b5: 57:64:3f:5f:84:ac:4b:af:47:91:bf:98:4b:3f:09: 5c:48:08:3c:f1:42:b5:4d:5c:4c:10:2f:bc:b5:bb: b8:35:76:c7:0d:d6:55:8e:45:50:6e:d1:8c:0b:1e: 8a:ed:66:95:e0:f2:cc:ff:ba:29:2f:fb:11:32:af: e3:b6:20:c1:e3:b5:5e:c5:1b:3a:da:11:5d:30:c6: 73:bb:9f:cb:02:eb:b9:fd:7d:03:28:68:3c:09:14: df:eb:3a:12:33:57:27:3a:cc:1b:cb:72:87:d2:a8: 6a:90:36:1a:d0:2c:af:32:cf:02:77:04:34:e5:99: 85:53:35:9f:8f:3c:a3:f6:08:4b:9e:d6:b4:7c:6e: ed:a7:2c:bf:06:df:fe:72:f0:56:dc:04:25:55:47: 7f:db:79:1f:27:05:c0:09:31:e8:07:d4:22:89:72: 9f:b0:c8:72:4c:9d:06:a1:59:57:2c:27:86:51:ff: 0e:44:00:5e:6f:69:24:66:f3:cd:7b:ab:9e:b5:e8: 77:99:63:0b:fe:bc:ce:95:df:e4:35:55:51:4b:50: 4f:09:0a:a3:8b:68:a1:35:b5:62:dd:90:ea:78:d7: 09:bb:66:c4:26:3c:49:7e:74:04:09:4b:98:4a:31: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:C9:BA:20:46:DC:3C:80:44:BA:99:C6:A6:62:8B:C3:B2:38:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a3893be-7188-37b1-a3a3-fe6478edeca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b70e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0e:1b:fb:cb:80:1d:5f:90:5d:1f:3c:e6:d8:67:03:06:01: 95:b1:a7:e7:12:c8:02:40:8f:1b:b4:9f:ce:3b:fc:8f:24:c5: 7d:bf:ff:04:3f:bc:2d:59:7f:18:a1:92:55:5b:2a:90:3e:0e: 66:51:d8:72:1a:45:c9:73:71:a0:76:00:fc:cf:c2:a2:c4:56: 52:13:e7:b9:ea:63:96:2d:bb:39:40:54:ff:74:8a:07:72:1a: 57:ab:9a:37:ab:d6:06:f1:84:7d:e5:93:7a:e3:59:f2:09:fb: 16:53:85:55:0d:27:a1:41:89:ca:28:04:f6:eb:16:45:11:11: 13:66:5c:64:46:74:83:6d:9b:e0:5d:a7:fc:16:bb:82:22:ea: de:ad:55:89:c8:d6:5d:1b:c7:3b:40:53:be:ed:c4:49:95:8e: a5:54:59:99:25:35:80:f8:1a:b9:a4:87:54:68:2d:4b:63:03: 11:48:99:ff:8d:bd:0d:81:77:40:76:9b:a3:04:4c:6a:7c:48: 63:fb:67:ca:be:c4:81:56:3d:95:02:fb:ef:9e:07:a0:93:c7: f2:9b:79:4c:d9:08:a5:5b:80:fb:d9:9f:a8:55:db:1a:77:49: 04:d6:24:02:30:16:ae:11:e2:42:73:82:c9:1a:ec:b4:c8:f0: 44:ea:6c:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhjYaHHMcj2xEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmMyZTkyZWYtYjFkYS00MzRkLWJhODMtODQwYzAyZTc3ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+aZmWeARGG47T3XC7VXZD9fhKxLr0eRv5hL PwlcSAg88UK1TVxMEC+8tbu4NXbHDdZVjkVQbtGMCx6K7WaV4PLM/7opL/sRMq/j tiDB47VexRs62hFdMMZzu5/LAuu5/X0DKGg8CRTf6zoSM1cnOswby3KH0qhqkDYa 0CyvMs8CdwQ05ZmFUzWfjzyj9ghLnta0fG7tpyy/Bt/+cvBW3AQlVUd/23kfJwXA CTHoB9QiiXKfsMhyTJ0GoVlXLCeGUf8ORABeb2kkZvPNe6ueteh3mWML/rzOld/k NVVRS1BPCQqji2ihNbVi3ZDqeNcJu2bEJjxJfnQECUuYSjHMWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPrybogRtw8gES6mcamYovDsjiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmEzODkzYmUtNzE4OC0z N2IxLWEzYTMtZmU2NDc4ZWRlY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALcO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwOG/vLgB1fkF0fPObYZwMGAZWxp+cSyAJAjxu0n847/I8kxX2/ /wQ/vC1ZfxihklVbKpA+DmZR2HIaRclzcaB2APzPwqLEVlIT57nqY5YtuzlAVP90 igdyGlermjer1gbxhH3lk3rjWfIJ+xZThVUNJ6FBicooBPbrFkURERNmXGRGdINt m+Bdp/wWu4Ii6t6tVYnI1l0bxztAU77txEmVjqVUWZklNYD4Grmkh1RoLUtjAxFI mf+NvQ2Bd0B2m6METGp8SGP7Z8q+xIFWPZUC+++eB6CTx/KbeUzZCKVbgPvZn6hV 2xp3SQTWJAIwFq4R4kJzgska7LTI8ETqbEg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:39 2025 by rpki-client