$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68f17952-8739-3db5-b03d-4e2948d471d2.roa File: 68f17952-8739-3db5-b03d-4e2948d471d2.roa (raw, json) Hash identifier: XEb8SoDurF2ynL07pjJH9tx4v8V30ppiPO0NkGtWdSk= Subject key identifier: 8A:4A:B9:C1:F7:D7:53:31:45:21:79:35:B0:D4:18:18:E4:6F:74:EA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01FA4738303AA4036A1A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68f17952-8739-3db5-b03d-4e2948d471d2.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:5652::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:fa:47:38:30:3a:a4:03:6a:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=67637ce7-cfcb-45d1-96d1-f3b6349e0d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:c4:f0:90:04:b8:f9:62:cd:0c:52:62:12: 4e:4b:82:24:75:4d:b0:01:db:c4:4a:32:9e:b0:0d: 4e:7e:78:42:e8:b9:a1:bb:ec:4d:e3:ae:be:81:1c: 3f:15:90:f1:20:d4:a1:cf:01:68:79:05:de:09:63: 96:d9:7a:f3:07:cc:0c:72:af:57:92:57:b5:94:44: 19:51:09:78:5e:7a:86:d6:47:98:32:62:5d:bf:53: d6:40:12:6c:25:97:47:8a:f1:3d:3e:7d:b1:aa:e5: 44:d9:ed:d8:be:7d:03:61:63:32:a7:62:45:8b:a0: 91:d8:ea:de:e7:50:d0:d2:b0:f9:e2:27:b1:79:b8: e2:e1:d2:6d:08:58:d3:bb:00:75:ed:eb:e0:ff:b4: 63:6c:37:0c:71:25:76:aa:5e:96:26:7a:2e:95:bd: be:97:36:fb:63:b6:c6:7d:99:a8:3c:6d:ee:76:0c: 48:59:16:61:79:90:64:16:4b:ce:84:5c:52:45:86: cb:4f:5f:14:c0:88:0c:3a:ee:f4:49:95:cd:dd:7c: c5:ba:ee:fc:be:09:95:e1:44:96:3b:36:f6:a2:bb: 5c:a3:5c:9f:b6:a3:cc:5b:f3:c6:4c:4a:e0:90:f0: 36:a8:16:fb:46:c9:7a:62:26:a9:26:65:67:3f:6c: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4A:B9:C1:F7:D7:53:31:45:21:79:35:B0:D4:18:18:E4:6F:74:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68f17952-8739-3db5-b03d-4e2948d471d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5652::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:01:83:b5:7e:f5:79:7a:4e:91:22:6d:51:ec:c1:24:39:0b: 05:70:c8:0b:ed:0b:e3:2d:a6:b3:f6:c6:3c:9a:82:9e:83:97: fe:14:ed:6a:f4:45:9a:80:dd:09:b6:4e:c2:c0:b8:85:a7:4d: 12:6d:5a:c2:4f:6b:70:78:25:75:75:71:0b:55:d8:1a:df:af: db:cd:f7:ca:63:0b:5a:44:2f:04:f7:cb:06:fa:06:0a:cb:15: 5f:d1:7c:e4:29:b5:66:15:16:67:a2:34:81:50:d6:3b:af:07: 9c:45:ce:54:75:c3:02:a5:83:56:d5:47:73:39:46:17:eb:b2: 83:13:c9:ee:5c:c5:01:0c:7d:4b:f3:82:44:af:e2:3b:70:d1: 74:a8:ee:67:f5:b6:6d:9a:88:f8:ac:c6:d6:ba:ab:14:a5:99: ec:e1:12:be:6e:b2:af:34:90:45:fa:c0:97:c2:07:ee:29:2b: 90:20:0b:f7:42:f1:eb:27:65:cf:a8:a5:01:24:39:b8:11:e5: 95:31:f5:28:5d:4a:f3:61:fc:29:5a:f6:39:e3:aa:71:d6:57: 18:02:fa:a9:7b:ed:70:e7:f7:46:1d:26:88:b8:cb:b0:c8:64: a5:37:7b:97:1f:fc:c9:b8:d7:cd:33:aa:f2:49:7e:05:c7:b9: 8a:07:1f:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfpHODA6pANqGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Njc2MzdjZTctY2ZjYi00NWQxLTk2ZDEtZjNiNjM0OWUwZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvfE8JAEuPlizQxSYhJOS4IkdU2wAdvESjKe sA1OfnhC6Lmhu+xN466+gRw/FZDxINShzwFoeQXeCWOW2XrzB8wMcq9Xkle1lEQZ UQl4XnqG1keYMmJdv1PWQBJsJZdHivE9Pn2xquVE2e3Yvn0DYWMyp2JFi6CR2Ore 51DQ0rD54iexebji4dJtCFjTuwB17evg/7RjbDcMcSV2ql6WJnoulb2+lzb7Y7bG fZmoPG3udgxIWRZheZBkFkvOhFxSRYbLT18UwIgMOu70SZXN3XzFuu78vgmV4USW Ozb2ortco1yftqPMW/PGTErgkPA2qBb7Rsl6YiapJmVnP2xwYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIpKucH311MxRSF5NbDUGBjkb3TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjhmMTc5NTItODczOS0z ZGI1LWIwM2QtNGUyOTQ4ZDQ3MWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFZS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwBg7V+9Xl6TpEibVHswSQ5CwVwyAvtC+MtprP2xjyagp6Dl/4U 7Wr0RZqA3Qm2TsLAuIWnTRJtWsJPa3B4JXV1cQtV2Brfr9vN98pjC1pELwT3ywb6 BgrLFV/RfOQptWYVFmeiNIFQ1juvB5xFzlR1wwKlg1bVR3M5RhfrsoMTye5cxQEM fUvzgkSv4jtw0XSo7mf1tm2aiPisxta6qxSlmezhEr5usq80kEX6wJfCB+4pK5Ag C/dC8esnZc+opQEkObgR5ZUx9ShdSvNh/Cla9jnjqnHWVxgC+ql77XDn90YdJoi4 y7DIZKU3e5cf/Mm4180zqvJJfgXHuYoHHwk= -----END CERTIFICATE-----Generated at Thu Oct 16 04:52:43 2025 by rpki-client