$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa File: 3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa (raw, json) Hash identifier: qXNCyUbQHvDigtK1ooX5jYTn8uItbeG2fvcxDOLovDE= Subject key identifier: 78:9F:E1:1C:8C:AE:6C:05:A4:F0:6D:9B:C1:BE:EF:62:85:78:E5:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02257BA8EB620E9F990FFB Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:1104::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:25:7b:a8:eb:62:0e:9f:99:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=56489ed8-78e7-4e41-9318-21f868ecb3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:c5:fc:c5:11:92:2a:06:fb:d3:ec:17:d0: 42:86:46:e2:06:cc:71:60:20:25:e2:a6:1d:90:e1: d9:c9:08:9d:40:5a:9b:11:99:3a:27:8f:65:31:92: 2f:5e:f2:2b:60:b8:8b:60:11:c9:9d:53:73:09:eb: 3a:5d:8d:4e:e0:f9:cb:16:65:51:f0:ff:92:42:1c: 18:c9:2c:4c:7f:91:db:03:ef:cb:89:9c:6b:9f:70: f6:03:2f:48:82:72:90:8b:d9:1d:c0:13:86:58:fe: b1:37:09:cf:f1:38:5c:8b:0c:85:b9:2f:5b:df:71: 22:d9:fc:13:b8:e2:f9:bb:d6:b7:f3:6b:c0:30:d7: 64:e1:d4:17:99:1e:13:9b:04:fa:29:5f:2c:03:57: dc:ef:ac:2b:33:9f:51:f0:4a:fc:09:e5:e4:02:8c: a4:57:e2:30:d3:75:e8:77:ee:5c:3e:af:9e:8f:fd: 27:ef:a4:ca:24:84:27:5f:e9:6c:c6:6c:b6:5d:4e: de:55:65:96:76:8f:09:4e:79:4d:24:33:5b:8c:97: 42:3e:82:f6:52:2a:0e:f0:80:cc:43:57:0a:69:12: ea:75:e5:30:6b:44:f9:d0:08:bf:3b:2d:1a:d9:48: 94:da:fe:bb:cf:3e:cb:61:0b:c7:21:f9:9b:23:26: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9F:E1:1C:8C:AE:6C:05:A4:F0:6D:9B:C1:BE:EF:62:85:78:E5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab4de7b-4fef-3a78-9880-2ff25670be8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:1104::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:03:45:3d:9e:6e:20:5e:aa:7b:4f:b5:cc:8c:33:3a:42:1e: 7b:5d:ee:38:96:90:51:1f:50:62:6d:12:ac:e5:0e:bc:fe:ad: 2d:6f:f3:f4:a9:6a:e5:37:74:e1:b7:76:e0:b8:14:51:55:01: d7:47:06:71:58:f2:da:eb:d4:9c:52:fa:f0:90:14:81:ed:59: 0d:51:76:1e:d3:23:23:16:53:bf:f3:5f:b6:6e:8a:63:b5:25: 2b:b6:8e:6e:7d:6b:98:35:77:a1:fd:49:a4:e1:4b:c5:32:d5: 8b:db:7b:d5:c5:04:50:be:1b:46:7d:e1:84:7e:54:6e:09:d4: 6e:34:5f:3a:5c:7a:9e:8a:62:aa:ac:66:7c:ef:17:d1:3d:71: 3c:be:de:83:f2:aa:d5:a6:03:cd:02:b6:18:e3:a4:97:b9:3b: 22:34:c0:14:7d:ef:8e:3b:68:30:2e:52:bc:b7:04:a8:da:3a: 58:6f:1b:c4:8f:a7:83:1c:d6:45:6d:cb:6f:fb:be:1c:fd:8f: ea:b4:a2:93:10:5e:98:49:4d:63:1d:0a:31:1f:6c:44:c8:35: 66:97:b7:62:1b:72:f7:28:e9:ad:ee:f0:10:e5:4c:ee:90:d9: c6:40:e1:a9:52:e9:4c:15:da:2a:c9:7e:90:44:af:91:df:b0: 2b:11:6e:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiV7qOtiDp+ZD/swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTY0ODllZDgtNzhlNy00ZTQxLTkzMTgtMjFmODY4ZWNiM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3PF/MURkioG+9PsF9BChkbiBsxxYCAl4qYd kOHZyQidQFqbEZk6J49lMZIvXvIrYLiLYBHJnVNzCes6XY1O4PnLFmVR8P+SQhwY ySxMf5HbA+/LiZxrn3D2Ay9IgnKQi9kdwBOGWP6xNwnP8ThciwyFuS9b33Ei2fwT uOL5u9a382vAMNdk4dQXmR4TmwT6KV8sA1fc76wrM59R8Er8CeXkAoykV+Iw03Xo d+5cPq+ej/0n76TKJIQnX+lsxmy2XU7eVWWWdo8JTnlNJDNbjJdCPoL2UioO8IDM Q1cKaRLqdeUwa0T50Ai/Oy0a2UiU2v67zz7LYQvHIfmbIyapHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHif4RyMrmwFpPBtm8G+72KFeOXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FiNGRlN2ItNGZlZi0z YTc4LTk4ODAtMmZmMjU2NzBiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChEE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsDRT2ebiBeqntPtcyMMzpCHntd7jiWkFEfUGJtEqzlDrz+rS1v 8/SpauU3dOG3duC4FFFVAddHBnFY8trr1JxS+vCQFIHtWQ1Rdh7TIyMWU7/zX7Zu imO1JSu2jm59a5g1d6H9SaThS8Uy1Yvbe9XFBFC+G0Z94YR+VG4J1G40Xzpcep6K YqqsZnzvF9E9cTy+3oPyqtWmA80CthjjpJe5OyI0wBR97447aDAuUry3BKjaOlhv G8SPp4Mc1kVty2/7vhz9j+q0opMQXphJTWMdCjEfbETINWaXt2Ibcvco6a3u8BDl TO6Q2cZA4alS6UwV2irJfpBEr5HfsCsRbkQ= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:05 2025 by rpki-client