$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa File: 3e5e3356-931e-3283-aaa5-37e12684553a.roa (raw, json) Hash identifier: LrR+q7H9iak2HpS6UKJwBVu4Hn9JUQyT/uEPWtI69rs= Subject key identifier: DD:B5:95:7C:B3:40:3D:F3:B3:93:5A:AB:2E:7C:CB:FD:59:2A:35:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02032694D004189BF11490 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:7418::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:03:26:94:d0:04:18:9b:f1:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=bee8e40e-e621-4815-b1ec-176d56b34a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:b9:06:a3:85:9d:eb:d5:99:aa:a1:0d:0c: fc:71:8b:ea:3f:ce:5d:92:fd:df:38:1f:99:13:c6: 24:26:fe:86:ab:19:ec:d1:be:57:ac:33:d5:5d:cd: 53:e2:cf:3d:49:ac:a9:0f:12:1c:0d:6a:e1:01:a8: 83:aa:3b:b8:04:fb:da:b7:31:fe:94:a2:0c:e4:52: 14:97:3e:7b:1b:95:9f:cd:9f:ad:f7:38:85:db:0f: 89:38:c8:ef:6a:ef:1e:fd:77:18:97:be:73:ae:f0: fa:2e:b3:ca:fb:0a:a6:6c:11:9c:44:d7:fb:e5:6a: da:1c:68:26:60:01:9c:a0:d8:27:a0:63:1f:f9:da: 26:64:45:48:79:5a:b2:4b:e8:a1:63:ba:09:b6:30: 3e:41:48:e2:82:66:1b:c6:4f:29:e5:bb:4a:16:90: 63:09:c5:1a:4d:e1:86:43:ba:b7:28:bc:c3:06:8b: 11:8d:12:73:4f:5b:8e:0d:38:9d:be:27:41:d3:b4: c9:fc:79:78:2b:91:61:97:98:23:1c:ea:98:92:46: 1a:81:b0:f3:48:7c:d8:b8:c2:fb:a5:19:8d:17:4e: 10:82:6b:68:27:7e:58:8b:76:86:eb:98:e3:a1:e9: 73:44:14:4e:38:1b:b2:74:6f:77:dd:2a:b6:b2:af: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:95:7C:B3:40:3D:F3:B3:93:5A:AB:2E:7C:CB:FD:59:2A:35:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7418::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c7:e0:af:21:65:84:f8:1c:dd:c2:70:8a:fd:7b:86:5a:3f: 53:c4:35:6c:0d:4a:88:26:56:8b:01:fb:89:f0:57:36:db:57: ca:d0:20:5f:b2:fc:d5:35:70:b6:9d:7a:2a:7b:a9:52:12:49: 48:13:32:a3:d0:01:63:1a:8e:1b:ee:bc:10:02:c2:2b:c9:a2: bc:32:34:81:af:ae:de:74:db:9f:9c:d7:4a:f2:7c:27:e8:26: ac:bf:30:34:0e:45:aa:87:a8:b5:9d:36:51:85:72:e4:2d:09: 4f:77:2c:22:69:ff:5f:86:ee:4b:8f:87:65:18:e0:c2:83:b4: 82:f3:6a:91:e7:09:ee:75:1f:e2:11:9f:33:ce:1f:a8:69:ab: 20:67:82:2f:75:32:6a:6c:bf:d6:ac:59:e2:d8:8d:d5:31:08: a7:c5:6e:51:92:75:a4:13:db:3a:84:b5:aa:00:1e:fa:27:08: 20:45:13:aa:35:32:2b:57:67:de:69:6e:27:80:8d:a1:2f:e8: 99:b9:ff:10:2a:7b:b1:63:ed:05:e7:a2:bb:b4:be:e7:eb:9a: 36:1d:de:f2:2f:52:ce:0a:c4:ee:98:30:03:b5:bb:ee:63:a9: d2:5b:a8:ab:fb:28:1e:a5:ff:b6:3c:ee:46:83:2a:8a:e0:cc: ba:6b:6e:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgMmlNAEGJvxFJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmVlOGU0MGUtZTYyMS00ODE1LWIxZWMtMTc2ZDU2YjM0YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDO5BqOFnevVmaqhDQz8cYvqP85dkv3fOB+Z E8YkJv6Gqxns0b5XrDPVXc1T4s89SaypDxIcDWrhAaiDqju4BPvatzH+lKIM5FIU lz57G5WfzZ+t9ziF2w+JOMjvau8e/XcYl75zrvD6LrPK+wqmbBGcRNf75WraHGgm YAGcoNgnoGMf+domZEVIeVqyS+ihY7oJtjA+QUjigmYbxk8p5btKFpBjCcUaTeGG Q7q3KLzDBosRjRJzT1uODTidvidB07TJ/Hl4K5Fhl5gjHOqYkkYagbDzSHzYuML7 pRmNF04QgmtoJ35Yi3aG65jjoelzRBROOBuydG933Sq2sq/ZXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN21lXyzQD3zs5Naqy58y/1ZKjVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U1ZTMzNTYtOTMxZS0z MjgzLWFhYTUtMzdlMTI2ODQ1NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAHQY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnH4K8hZYT4HN3CcIr9e4ZaP1PENWwNSogmVosB+4nwVzbbV8rQ IF+y/NU1cLadeip7qVISSUgTMqPQAWMajhvuvBACwivJorwyNIGvrt5025+c10ry fCfoJqy/MDQORaqHqLWdNlGFcuQtCU93LCJp/1+G7kuPh2UY4MKDtILzapHnCe51 H+IRnzPOH6hpqyBngi91Mmpsv9asWeLYjdUxCKfFblGSdaQT2zqEtaoAHvonCCBF E6o1MitXZ95pbieAjaEv6Jm5/xAqe7Fj7QXnoru0vufrmjYd3vIvUs4KxO6YMAO1 u+5jqdJbqKv7KB6l/7Y87kaDKorgzLprbpM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:30 2025 by rpki-client