$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/676916d8-3ff2-3def-9e01-f96d997e6c64.roa File: 676916d8-3ff2-3def-9e01-f96d997e6c64.roa (raw, json) Hash identifier: ZeJIEioZjusmgwNxiZZiGiYNP78lBJmEf4GtwU40B7I= Subject key identifier: 31:9B:9B:C0:82:E2:8A:84:5E:A9:DB:E4:CA:D6:52:3E:17:61:10:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F4E0D30A103366D14C60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/676916d8-3ff2-3def-9e01-f96d997e6c64.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:4c12::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f4:e0:d3:0a:10:33:66:d1:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=1a5b3796-3049-4142-a5f9-146d3da9d81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:3f:17:1b:b8:3c:8f:bf:96:03:d8:6d:7e: bc:df:76:80:c0:79:2f:c7:73:e1:46:2c:58:f3:75: 0f:73:02:42:51:b4:51:24:f3:30:91:b4:0d:48:cc: 9c:a0:14:fd:bc:74:fa:83:5f:cc:c0:4c:83:a6:f5: c5:ac:30:53:26:fe:1c:1b:2f:31:10:5a:60:78:ad: 4c:61:a9:fa:07:09:04:5a:76:bf:e7:a2:c4:ff:82: 53:98:b2:3b:7e:0d:d2:19:a8:35:81:0f:ff:2a:1d: 36:af:6d:e8:71:cf:09:6e:47:52:10:a4:54:83:99: 59:db:04:60:13:10:16:56:db:33:a9:0e:7e:a2:64: ab:ea:6f:21:42:58:94:73:19:a1:b9:94:f2:36:c9: fb:bc:3c:0e:93:79:fb:bf:b3:13:b3:e8:fc:5a:fa: 6e:ce:39:66:f5:a9:c0:5f:b1:c7:65:e2:e6:a1:7d: f7:f0:36:54:49:27:58:d2:70:78:8b:e0:a3:47:cd: c0:7a:26:50:6f:9c:ce:b7:9c:27:84:1d:d4:fc:6c: 25:e5:66:a1:c2:97:ed:2d:58:9a:bd:c3:d0:c0:b5: 51:0d:71:1b:ed:7f:3d:9b:d6:48:b0:d3:80:3f:74: 42:08:78:1c:f3:56:b3:a2:29:c5:71:9a:2f:33:d1: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:9B:C0:82:E2:8A:84:5E:A9:DB:E4:CA:D6:52:3E:17:61:10:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/676916d8-3ff2-3def-9e01-f96d997e6c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4c12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8e:a8:fd:5d:91:35:34:b1:6f:1f:bd:ee:28:8d:5f:5d:1d: 91:20:19:f7:94:ae:68:21:91:2c:84:82:ad:73:83:b6:d5:b6: 94:59:b1:6a:f4:ac:be:5f:f7:74:af:9e:31:ba:b3:33:ac:44: 03:88:21:d8:6e:f0:3b:1c:a8:eb:6f:f0:00:27:e6:b7:22:9f: 90:5b:6f:a9:20:78:e1:0b:56:1f:68:88:38:c7:5a:d4:df:fe: 4e:4d:a0:c2:52:d6:15:32:cd:e6:8d:55:f3:48:d7:cf:cc:31: 32:a0:be:ec:06:3e:3a:24:19:1e:18:ef:2c:1f:52:c4:fc:ac: 5d:f4:3a:f3:2d:b6:0c:9b:38:09:68:e4:91:46:08:5e:d7:58: 2d:ad:a0:32:9c:8a:03:b2:1b:3e:1b:df:0d:f2:7f:3c:87:ee: c9:30:d5:24:0b:90:aa:06:6e:8a:31:1f:c6:a3:75:3a:ec:f8: 2c:01:54:3f:91:70:29:2f:8b:16:06:bb:78:1e:97:24:6e:e6: f3:2f:27:55:8c:38:e8:e6:82:0a:29:4e:1a:66:69:f3:a7:79: 6a:5e:8d:1e:b9:26:07:7a:87:76:f2:e3:b1:4c:4a:0b:bb:a3: b8:fb:07:6b:50:f0:06:ed:c9:22:9d:77:61:9d:62:a3:f8:a2: 17:34:b0:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfTg0woQM2bRTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWE1YjM3OTYtMzA0OS00MTQyLWE1ZjktMTQ2ZDNkYTlkODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKE/Fxu4PI+/lgPYbX6833aAwHkvx3PhRixY 83UPcwJCUbRRJPMwkbQNSMycoBT9vHT6g1/MwEyDpvXFrDBTJv4cGy8xEFpgeK1M Yan6BwkEWna/56LE/4JTmLI7fg3SGag1gQ//Kh02r23occ8JbkdSEKRUg5lZ2wRg ExAWVtszqQ5+omSr6m8hQliUcxmhuZTyNsn7vDwOk3n7v7MTs+j8Wvpuzjlm9anA X7HHZeLmoX338DZUSSdY0nB4i+CjR83AeiZQb5zOt5wnhB3U/Gwl5WahwpftLVia vcPQwLVRDXEb7X89m9ZIsNOAP3RCCHgc81azoinFcZovM9GGDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGbm8CC4oqEXqnb5MrWUj4XYRDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjc2OTE2ZDgtM2ZmMi0z ZGVmLTllMDEtZjk2ZDk5N2U2YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAEwS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKOqP1dkTU0sW8fve4ojV9dHZEgGfeUrmghkSyEgq1zg7bVtpRZ sWr0rL5f93SvnjG6szOsRAOIIdhu8DscqOtv8AAn5rcin5Bbb6kgeOELVh9oiDjH WtTf/k5NoMJS1hUyzeaNVfNI18/MMTKgvuwGPjokGR4Y7ywfUsT8rF30OvMttgyb OAlo5JFGCF7XWC2toDKcigOyGz4b3w3yfzyH7skw1SQLkKoGbooxH8ajdTrs+CwB VD+RcCkvixYGu3gelyRu5vMvJ1WMOOjmggopThpmafOneWpejR65Jgd6h3by47FM Sgu7o7j7B2tQ8AbtySKdd2GdYqP4ohc0sGI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:51 2025 by rpki-client