$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fb8e6c5-443f-3731-bd61-bc33ef590881.roa File: 3fb8e6c5-443f-3731-bd61-bc33ef590881.roa (raw, json) Hash identifier: /fi6ZCzK+lFrUc8572OO/U1/TIbrRvazeVk5WZcK5ZQ= Subject key identifier: 11:F5:EE:BD:56:23:5F:F9:E8:F5:96:5B:A1:20:10:EE:53:04:92:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01EBA0EB19157D38FB82C8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fb8e6c5-443f-3731-bd61-bc33ef590881.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:2f82::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:eb:a0:eb:19:15:7d:38:fb:82:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=1842bc9a-65f1-4453-9ade-957876fa4b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:1a:1e:07:12:b0:c1:1a:7c:b8:9d:c3:b9: cc:f7:4d:c1:ff:43:80:d2:f8:3c:90:fc:9d:83:1c: ee:49:2d:70:c7:f8:61:6d:34:94:54:29:50:a6:aa: 9d:80:0f:c3:94:c9:43:02:3c:88:71:a1:35:d6:b6: 96:da:3f:d1:ac:18:b5:0d:bb:06:c6:2e:36:81:b8: 48:e3:da:bf:0f:b1:bb:18:cf:74:2f:9b:8c:d2:ee: 80:01:62:0f:52:be:66:32:c6:98:81:77:a6:b5:18: 57:d7:8c:79:a6:7a:ce:64:29:b9:54:1c:c9:5b:43: 19:ba:f4:99:91:dc:e4:fb:32:df:30:b8:5a:64:3d: 10:03:c2:da:b3:67:2c:2a:a9:fd:04:6e:0b:77:97: aa:a7:ef:af:ba:fb:48:ae:ba:ab:61:63:3d:3b:1f: 58:c9:ea:e8:b0:12:6d:9c:a1:e9:41:4a:ea:6f:e8: 0b:d1:81:8d:fd:c0:22:9e:05:57:95:05:a3:34:36: 1a:8e:d0:d9:26:5b:73:32:99:95:3b:19:c9:51:fe: 44:2a:0b:89:67:2a:d3:c3:2e:ad:d2:6d:44:60:e6: 78:8d:6d:e6:b4:01:cf:2a:c9:16:7f:0e:1a:41:ee: 91:3e:43:07:ae:27:68:ed:1a:91:7d:70:77:24:28: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:EE:BD:56:23:5F:F9:E8:F5:96:5B:A1:20:10:EE:53:04:92:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fb8e6c5-443f-3731-bd61-bc33ef590881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2f82::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:56:35:27:56:3d:9c:d8:30:13:67:a3:04:79:1e:5a:02:c6: f9:26:5b:ea:35:6e:d9:11:47:35:14:00:7d:56:78:3a:19:ad: c5:04:2c:5a:b4:b8:df:18:53:a4:87:7a:39:08:3e:16:05:7f: 70:31:92:97:cd:cf:e6:c1:57:c9:24:3f:61:b4:c1:f4:eb:4f: 29:95:8f:a4:fd:5f:ad:22:24:75:d3:cb:b5:83:90:f5:dc:74: 56:45:14:5d:b3:98:4d:de:66:de:d4:dd:8e:77:1a:2c:02:09: 13:85:a5:82:19:13:06:e8:c1:5a:da:ad:12:ee:8a:de:71:4d: 89:54:96:04:cc:84:79:e6:2d:69:04:b6:50:12:88:e2:f4:24: 49:e5:7e:e2:4e:ba:d9:eb:f5:44:ef:3f:f2:79:64:5b:c9:00: 03:98:f5:37:fe:a0:71:19:f6:3c:65:34:f6:c4:45:6e:70:c6: 71:25:b9:ff:cb:84:89:d4:fd:45:39:2e:83:eb:da:c3:37:24: 82:43:0d:56:4c:54:9c:2a:a8:b0:e3:b2:fa:5e:7b:dc:a3:81: a4:3c:6e:fe:17:ec:54:3d:a9:be:d1:c6:7b:d6:db:1c:7b:e5: 2c:23:73:cb:7d:73:9f:66:44:21:32:b8:a6:ea:bc:d3:35:5e: fa:b2:d8:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeug6xkVfTj7gsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTg0MmJjOWEtNjVmMS00NDUzLTlhZGUtOTU3ODc2ZmE0Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipQaHgcSsMEafLidw7nM903B/0OA0vg8kPyd gxzuSS1wx/hhbTSUVClQpqqdgA/DlMlDAjyIcaE11raW2j/RrBi1DbsGxi42gbhI 49q/D7G7GM90L5uM0u6AAWIPUr5mMsaYgXemtRhX14x5pnrOZCm5VBzJW0MZuvSZ kdzk+zLfMLhaZD0QA8Las2csKqn9BG4Ld5eqp++vuvtIrrqrYWM9Ox9YyerosBJt nKHpQUrqb+gL0YGN/cAingVXlQWjNDYajtDZJltzMpmVOxnJUf5EKguJZyrTwy6t 0m1EYOZ4jW3mtAHPKskWfw4aQe6RPkMHrido7RqRfXB3JCgJ5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBH17r1WI1/56PWWW6EgEO5TBJKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZiOGU2YzUtNDQzZi0z NzMxLWJkNjEtYmMzM2VmNTkwODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAC+C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNWNSdWPZzYMBNnowR5HloCxvkmW+o1btkRRzUUAH1WeDoZrcUE LFq0uN8YU6SHejkIPhYFf3AxkpfNz+bBV8kkP2G0wfTrTymVj6T9X60iJHXTy7WD kPXcdFZFFF2zmE3eZt7U3Y53GiwCCROFpYIZEwbowVrarRLuit5xTYlUlgTMhHnm LWkEtlASiOL0JEnlfuJOutnr9UTvP/J5ZFvJAAOY9Tf+oHEZ9jxlNPbERW5wxnEl uf/LhInU/UU5LoPr2sM3JIJDDVZMVJwqqLDjsvpee9yjgaQ8bv4X7FQ9qb7RxnvW 2xx75Swjc8t9c59mRCEyuKbqvNM1Xvqy2Cw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:28 2025 by rpki-client