$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66c7f36a-98b2-3a0e-82b3-33f201661e9e.roa File: 66c7f36a-98b2-3a0e-82b3-33f201661e9e.roa (raw, json) Hash identifier: VZj8uAQOYehbgpy/P05Iaz3yc6Rb03BdhztP2GrMX4M= Subject key identifier: 65:A4:A9:CD:CD:FB:55:18:2D:50:38:B7:CF:E0:59:4C:DB:9F:08:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F98C26CF3F788B30E400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66c7f36a-98b2-3a0e-82b3-33f201661e9e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:5618::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f9:8c:26:cf:3f:78:8b:30:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f43c28f4-664f-4df0-ade0-b30a4ae12f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:71:78:67:24:48:87:23:9d:92:49:88:62: f1:be:bb:34:44:02:74:e5:6d:ab:f2:73:50:61:03: 66:d7:2c:0f:d7:39:95:d1:f8:0d:50:e3:be:7f:80: d6:64:0e:67:11:f0:59:fc:8e:56:55:b7:c1:51:68: 30:33:05:83:b6:a0:2e:25:8d:af:e4:9b:03:54:67: 93:83:ce:61:d3:b5:7b:bc:dc:43:bd:29:69:65:89: 31:59:c5:d5:14:e8:1c:6d:9a:35:a6:c0:5c:23:b3: be:03:d4:47:57:04:7c:b8:15:55:ff:f5:ec:45:8c: c4:66:5c:c2:66:a8:74:36:5a:62:2f:0e:72:3f:e1: 29:dc:43:6f:cb:13:b7:25:0c:16:72:d6:7e:09:35: ab:6e:53:1a:df:7d:a7:9c:6d:e4:bf:3b:ff:f5:86: ea:bf:c6:a6:8d:e0:d6:76:f9:f0:4c:68:3c:0b:2f: bf:ce:a5:60:7b:31:d0:26:f8:85:da:69:b2:72:6d: 7c:7b:af:40:11:1e:c1:27:f4:66:8e:50:c2:3b:24: a0:9e:fa:8d:1e:d3:d1:b9:69:2c:40:16:84:ff:c5: be:3f:9c:71:a3:d4:a1:8d:8f:de:d3:8d:fe:87:19: 0e:d4:0d:69:9e:3a:30:f6:f6:0c:3f:93:44:23:46: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:A9:CD:CD:FB:55:18:2D:50:38:B7:CF:E0:59:4C:DB:9F:08:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66c7f36a-98b2-3a0e-82b3-33f201661e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5618::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:42:77:85:45:bd:1f:44:01:bd:df:d2:bc:a5:d4:09:33:89: 9f:64:32:41:91:94:1e:09:b3:92:15:a7:93:a8:35:bc:fd:52: 21:af:4a:95:dd:3c:0b:e0:df:03:6c:2b:f4:e9:b1:e9:4f:72: 80:a9:83:1b:79:49:3c:b3:f6:41:16:c0:bf:e1:96:d7:aa:26: 94:9e:36:0d:9d:45:cf:0d:43:87:c5:94:0f:c1:86:7e:9e:7a: a0:f8:84:a4:9f:31:72:6b:82:c7:a7:b5:fd:a7:91:5b:94:45: e2:6c:fa:56:bd:07:69:a7:29:08:57:45:51:35:70:b1:de:56: 01:c3:eb:ad:16:a2:ac:de:1f:f2:e6:b9:bd:e2:3c:83:0d:e0: ec:f7:90:95:07:ab:00:5a:56:c0:0d:9d:02:d6:f0:bc:99:78: a9:44:46:d6:42:6d:b0:5c:5c:2e:d1:12:7f:0a:06:f7:61:b2: 03:0b:bb:7e:c5:b9:c9:4f:56:6c:7a:63:09:49:35:ba:e6:f4: d3:b2:fd:f6:eb:fd:46:0a:ef:63:57:e4:9f:c1:a0:4e:2a:81: 3b:5b:e4:d8:6c:95:ef:e3:21:42:1a:44:a9:52:4a:fc:b2:2b: 39:00:2e:e2:a2:db:52:db:8c:39:87:c5:2b:49:6f:66:ba:44: 3f:60:df:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfmMJs8/eIsw5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjQzYzI4ZjQtNjY0Zi00ZGYwLWFkZTAtYjMwYTRhZTEyZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC1xeGckSIcjnZJJiGLxvrs0RAJ05W2r8nNQ YQNm1ywP1zmV0fgNUOO+f4DWZA5nEfBZ/I5WVbfBUWgwMwWDtqAuJY2v5JsDVGeT g85h07V7vNxDvSlpZYkxWcXVFOgcbZo1psBcI7O+A9RHVwR8uBVV//XsRYzEZlzC Zqh0NlpiLw5yP+Ep3ENvyxO3JQwWctZ+CTWrblMa332nnG3kvzv/9Ybqv8amjeDW dvnwTGg8Cy+/zqVgezHQJviF2mmycm18e69AER7BJ/RmjlDCOySgnvqNHtPRuWks QBaE/8W+P5xxo9ShjY/e043+hxkO1A1pnjow9vYMP5NEI0bW7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWkqc3N+1UYLVA4t8/gWUzbnwhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjZjN2YzNmEtOThiMi0z YTBlLTgyYjMtMzNmMjAxNjYxZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFYY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9Cd4VFvR9EAb3f0ryl1AkziZ9kMkGRlB4Js5IVp5OoNbz9UiGv SpXdPAvg3wNsK/TpselPcoCpgxt5STyz9kEWwL/hlteqJpSeNg2dRc8NQ4fFlA/B hn6eeqD4hKSfMXJrgsentf2nkVuUReJs+la9B2mnKQhXRVE1cLHeVgHD660Woqze H/Lmub3iPIMN4Oz3kJUHqwBaVsANnQLW8LyZeKlERtZCbbBcXC7REn8KBvdhsgML u37FuclPVmx6YwlJNbrm9NOy/fbr/UYK72NX5J/BoE4qgTtb5Nhsle/jIUIaRKlS SvyyKzkALuKi21LbjDmHxStJb2a6RD9g32I= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:47 2025 by rpki-client