$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa File: 3653b307-8185-36eb-9a52-099880bc71b7.roa (raw, json) Hash identifier: O7sG2oaUYUHgzoZugqqA/ovM7ZjKh5zwCUL7jOa5DjA= Subject key identifier: E9:11:D1:D1:76:F9:C0:6C:ED:50:C8:2D:C5:D4:C1:C5:AE:5D:8E:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02071F9950AB920E9C2C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:8680::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:07:1f:99:50:ab:92:0e:9c:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=95e2f116-5dfe-43c9-99c8-f30307122dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:3a:52:f6:6e:e1:96:c3:25:d4:ed:a0:90: b3:53:e6:0f:c0:2e:3c:4b:29:f4:35:46:5b:ba:ea: 50:0e:12:06:d3:b6:1c:e9:6e:1e:4c:6a:2d:6a:af: 2b:42:6e:b7:a6:41:f2:e4:4c:c6:60:81:59:fe:09: 55:71:af:12:89:6a:98:3d:10:06:58:e6:1d:c3:b9: 3a:af:3f:2a:d1:9e:82:8f:ef:b7:ef:8b:eb:64:22: db:28:7d:35:6f:be:2b:b8:f0:c7:16:2b:49:97:48: 9e:56:da:bc:33:76:81:a7:3a:68:09:b8:b9:86:57: 76:f7:d2:b7:6e:07:97:d2:f5:10:44:21:30:fa:8f: 54:91:6e:cd:d2:e9:7c:89:25:5e:7f:05:b0:1e:48: fb:da:06:17:26:57:a3:d7:9f:0e:57:e6:db:05:c9: d8:39:b4:4a:e9:26:04:59:d3:13:bb:23:17:8d:14: eb:56:71:32:d5:3f:dd:fc:f7:ee:c5:9f:da:ea:5a: 4a:1d:1a:05:23:2b:04:d1:13:6c:38:15:d9:01:21: 48:bf:ad:fd:76:d2:07:55:da:e6:68:5e:41:a8:b3: 29:0c:cb:fd:8e:58:d2:e3:21:16:00:86:cd:1b:c8: 00:fc:55:cb:91:1e:94:9a:98:c9:00:2a:f5:62:86: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:D1:D1:76:F9:C0:6C:ED:50:C8:2D:C5:D4:C1:C5:AE:5D:8E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8680::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f3:5e:d9:94:86:00:74:21:8f:35:d9:23:a2:fb:72:6b:95: 71:c9:fb:79:1c:c1:a6:3f:3c:d0:46:82:75:d7:ad:a8:82:88: 2a:5f:ae:80:10:9e:c1:81:c7:fd:51:f1:82:f8:cd:62:9b:3b: 50:c0:2e:0c:a5:98:91:4e:21:59:f4:3a:88:b5:e1:5b:73:b9: 38:5c:83:fb:2b:bd:33:d5:f7:50:c1:7f:5f:70:1f:24:19:f3: 91:1a:98:0b:09:26:94:4a:f6:09:12:3c:0b:0d:d9:09:07:28: 37:5c:58:fc:6e:85:46:0b:2f:f3:26:54:d3:88:7a:3b:7f:af: 0d:e1:6e:d7:b9:d1:9f:fa:68:6b:d6:71:df:0b:39:aa:17:4e: d3:1c:c2:d7:3a:db:e5:ef:29:f2:2c:3c:ff:4a:6b:9e:57:a6: 47:44:b3:6c:a9:bf:6a:af:39:1c:46:ac:72:b8:63:9d:31:36: 28:93:5d:c7:2f:11:32:ea:f8:29:4c:73:45:23:96:55:c9:d5: bc:c1:c8:6a:c4:5b:fa:21:0d:73:57:7b:7d:96:a3:0a:45:33: 3d:4c:f1:42:67:92:a2:7a:37:78:2f:0e:da:a5:cf:2d:2d:e6: b4:d0:92:70:b8:fc:fb:ab:c6:0e:f8:b3:bd:6c:de:3e:69:3d: 73:d8:79:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgcfmVCrkg6cLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTVlMmYxMTYtNWRmZS00M2M5LTk5YzgtZjMwMzA3MTIyZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDM6UvZu4ZbDJdTtoJCzU+YPwC48Syn0NUZb uupQDhIG07Yc6W4eTGotaq8rQm63pkHy5EzGYIFZ/glVca8SiWqYPRAGWOYdw7k6 rz8q0Z6Cj++374vrZCLbKH01b74ruPDHFitJl0ieVtq8M3aBpzpoCbi5hld299K3 bgeX0vUQRCEw+o9UkW7N0ul8iSVefwWwHkj72gYXJlej158OV+bbBcnYObRK6SYE WdMTuyMXjRTrVnEy1T/d/PfuxZ/a6lpKHRoFIysE0RNsOBXZASFIv639dtIHVdrm aF5BqLMpDMv9jljS4yEWAIbNG8gA/FXLkR6UmpjJACr1YobdOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOkR0dF2+cBs7VDILcXUwcWuXY5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY1M2IzMDctODE4NS0z NmViLTlhNTItMDk5ODgwYmM3MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDzXtmUhgB0IY812SOi+3JrlXHJ+3kcwaY/PNBGgnXXraiCiCpf roAQnsGBx/1R8YL4zWKbO1DALgylmJFOIVn0Ooi14VtzuThcg/srvTPV91DBf19w HyQZ85EamAsJJpRK9gkSPAsN2QkHKDdcWPxuhUYLL/MmVNOIejt/rw3hbte50Z/6 aGvWcd8LOaoXTtMcwtc62+XvKfIsPP9Ka55XpkdEs2ypv2qvORxGrHK4Y50xNiiT XccvETLq+ClMc0UjllXJ1bzByGrEW/ohDXNXe32WowpFMz1M8UJnkqJ6N3gvDtql zy0t5rTQknC4/Purxg74s71s3j5pPXPYeRY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:48 2025 by rpki-client