$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa File: 589796a0-67c0-38a3-a2de-452305dcfba2.roa (raw, json) Hash identifier: fGZGl5EdRjCnFHbVh/UNl/TGwcEVNNyPBgdsd8dubec= Subject key identifier: 5E:20:58:F8:CF:43:C6:39:D9:4A:E6:2B:35:21:40:51:6D:B8:99:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0202EC9FAACC4E878C7A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:7412::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:02:ec:9f:aa:cc:4e:87:8c:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=55c9a1c5-2009-414e-958a-ddc832120365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:9c:b8:52:26:5a:dc:4d:77:8b:5d:71:5d: cf:af:74:02:a3:9e:7a:35:99:9e:f7:35:16:86:72: f2:9c:b9:65:8f:69:51:84:e4:82:3b:fe:a1:b3:56: 86:a6:99:3a:2f:a1:80:bc:05:32:2f:6e:03:4a:48: b0:55:2a:72:db:60:c6:e4:78:5f:49:49:84:b7:22: a8:0a:2a:ec:84:aa:d7:1f:c7:f5:99:eb:b6:3c:51: 8f:92:8b:80:17:0f:41:df:4e:18:23:56:36:97:8c: 64:9e:27:44:03:b5:c0:fd:3c:c9:37:54:18:25:bf: 5b:93:5f:ef:4b:c1:53:a0:9d:db:ce:5a:a5:94:87: a8:c6:bd:1d:ec:1e:08:8f:2a:a6:a1:31:0d:ff:92: 83:f2:5c:81:45:07:a5:52:bc:e8:e2:10:2c:c6:bb: 07:6b:50:f1:84:b7:11:d2:e6:fd:90:3c:29:e6:ab: 9e:94:a1:cc:f3:c3:e9:c2:8c:d2:07:b4:66:e5:9f: 5d:64:2e:a0:61:a3:6e:e8:d2:73:c8:93:84:39:05: 3e:05:0f:e2:a1:1c:e7:66:b3:19:41:aa:06:88:73: 1b:49:fd:a6:57:26:23:a1:ed:ae:cb:01:eb:71:22: 93:37:cb:55:bc:82:4c:53:94:ff:13:76:b4:dd:ab: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:20:58:F8:CF:43:C6:39:D9:4A:E6:2B:35:21:40:51:6D:B8:99:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7412::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:45:71:b3:c7:76:cd:6a:ec:d3:c1:5a:64:b4:43:34:97:38: b1:9f:3c:f9:d3:fa:0e:1b:29:a2:fb:8b:4b:94:d2:b6:ff:6b: 76:ab:66:6a:4e:10:49:49:ae:83:d1:5b:bd:a4:65:66:d3:3b: db:ec:d7:7f:94:5e:c9:4f:b3:0b:44:71:09:e3:00:14:34:f6: 3e:d0:55:4b:f2:08:be:7a:16:6a:e5:38:22:0a:00:41:8b:72: 18:29:b1:f3:b9:68:eb:c1:20:e0:e1:8a:7e:66:ce:bb:f0:94: 8d:ca:a7:e6:01:0e:77:c0:f3:ce:2a:c0:0f:da:64:a5:44:a5: 83:46:e9:24:69:d6:a6:83:a2:4c:b3:97:0e:70:41:fb:5d:02: 76:ca:8c:88:6d:28:b8:b6:70:7c:48:63:48:9d:c9:67:d0:47: 5d:53:8c:3d:12:d0:3a:17:40:02:08:7c:70:ed:dc:f7:24:fa: d9:b5:29:01:f7:1d:80:0a:e6:d9:5d:01:01:54:84:9b:d6:3e: 30:fb:71:84:c9:a0:b8:10:ad:8a:82:7e:3e:b7:5e:4a:38:81: 78:ae:dd:4e:2d:39:26:67:64:04:be:c9:7c:24:0e:2e:06:a5: 74:6e:b2:59:dd:b5:65:d4:bf:70:77:df:43:5e:4a:8f:d8:bf: 8b:35:14:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgLsn6rMToeMeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTVjOWExYzUtMjAwOS00MTRlLTk1OGEtZGRjODMyMTIwMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpCcuFImWtxNd4tdcV3Pr3QCo556NZme9zUW hnLynLllj2lRhOSCO/6hs1aGppk6L6GAvAUyL24DSkiwVSpy22DG5HhfSUmEtyKo CirshKrXH8f1meu2PFGPkouAFw9B304YI1Y2l4xknidEA7XA/TzJN1QYJb9bk1/v S8FToJ3bzlqllIeoxr0d7B4IjyqmoTEN/5KD8lyBRQelUrzo4hAsxrsHa1DxhLcR 0ub9kDwp5quelKHM88PpwozSB7Rm5Z9dZC6gYaNu6NJzyJOEOQU+BQ/ioRznZrMZ QaoGiHMbSf2mVyYjoe2uywHrcSKTN8tVvIJMU5T/E3a03asZ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4gWPjPQ8Y52UrmKzUhQFFtuJnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg5Nzk2YTAtNjdjMC0z OGEzLWEyZGUtNDUyMzA1ZGNmYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAHQS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVFcbPHds1q7NPBWmS0QzSXOLGfPPnT+g4bKaL7i0uU0rb/a3ar ZmpOEElJroPRW72kZWbTO9vs13+UXslPswtEcQnjABQ09j7QVUvyCL56FmrlOCIK AEGLchgpsfO5aOvBIODhin5mzrvwlI3Kp+YBDnfA884qwA/aZKVEpYNG6SRp1qaD okyzlw5wQftdAnbKjIhtKLi2cHxIY0idyWfQR11TjD0S0DoXQAIIfHDt3Pck+tm1 KQH3HYAK5tldAQFUhJvWPjD7cYTJoLgQrYqCfj63Xko4gXiu3U4tOSZnZAS+yXwk Di4GpXRuslndtWXUv3B330NeSo/Yv4s1FL0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:49 2025 by rpki-client