$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6caf12e9-cb55-3760-aaa4-01f56cefdad3.roa File: 6caf12e9-cb55-3760-aaa4-01f56cefdad3.roa (raw, json) Hash identifier: 3axj4CH2It1GrM20ye/suF+I02uWXFjV1oPgYnqsGEU= Subject key identifier: E8:DD:DF:70:F0:CD:4C:5C:9E:12:35:2D:D3:9E:BE:2B:E1:CA:E5:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F020EA38050B1104112B3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6caf12e9-cb55-3760-aaa4-01f56cefdad3.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:8f1c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:0e:a3:80:50:b1:10:41:12:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3b845a84-d8af-4097-ac63-de82fd0e2342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:cc:02:d7:fe:61:4f:5c:b7:90:03:08:03: d9:d8:13:8f:90:b2:70:08:ad:8c:55:0e:36:e0:0a: 7c:e1:e3:0d:7f:ac:d0:3a:d8:43:6b:ec:93:05:68: ee:5c:ed:48:b4:b8:3e:46:e7:d3:88:08:ba:22:99: 57:76:d3:9b:a8:37:b5:11:99:87:03:8b:ca:9a:64: 27:f5:e0:61:5f:04:f2:e8:c8:dd:85:20:cd:25:2a: 4b:4d:f7:1a:2f:95:4f:ee:57:95:1b:1a:60:21:15: 75:e8:bd:58:85:df:b8:1c:c9:f6:5f:4e:ba:a6:4f: 2a:b5:fa:57:69:64:28:bf:f9:51:4c:e7:00:a6:63: a5:13:7a:5a:25:fc:6a:8a:16:10:10:0b:8e:57:fc: 51:d4:a8:ba:36:65:e6:16:33:6e:76:1b:d2:a5:1d: 81:98:68:14:fb:fe:11:93:dc:d6:17:ad:d2:96:e1: 1a:14:64:fd:4e:3d:0e:50:4e:04:61:b6:05:23:da: 63:dd:c4:7a:75:6b:a4:e2:47:ca:78:b7:03:07:e1: 58:06:1e:6e:f1:ad:86:54:91:f6:56:8e:11:aa:66: 90:55:0c:8c:08:c2:3a:60:b3:68:81:49:fe:d6:8c: c4:63:b4:37:6c:1f:78:a6:30:5a:a0:9d:1c:7b:a4: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DD:DF:70:F0:CD:4C:5C:9E:12:35:2D:D3:9E:BE:2B:E1:CA:E5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6caf12e9-cb55-3760-aaa4-01f56cefdad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8f1c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:64:53:b2:91:0a:4c:50:f0:cc:bb:7e:96:50:e0:c5:f6:3b: b0:76:5d:93:a0:af:60:e6:4e:49:4d:fd:47:13:3d:d6:ec:f3: c0:43:b4:cf:37:78:56:49:fa:c0:34:c6:ec:99:ee:8a:90:67: 6a:df:4d:30:a1:2b:01:b6:73:0b:a5:9e:71:3e:7b:e8:14:5a: c7:ce:aa:a8:78:68:52:4c:55:08:43:30:42:7e:07:3e:81:98: 2e:9d:28:0c:b7:cf:dd:e1:18:ff:8b:3f:b1:75:04:ec:a5:01: 69:c0:35:be:a3:c5:5b:31:9b:f1:52:eb:d0:58:96:78:b5:9f: 59:7f:69:71:93:ac:be:24:d0:a3:c2:dc:8f:d0:b7:8f:48:01: 72:bc:43:8a:f5:ca:79:4b:08:3f:48:47:dc:c1:ba:4c:ba:95: c5:ef:46:64:91:2a:ff:a5:d5:43:88:e7:14:41:cb:29:03:07: ad:6c:bc:0e:73:bb:35:a8:c2:46:19:26:6e:cb:ca:c1:99:ef: de:43:d4:fa:f8:27:8c:23:de:dd:19:33:80:8c:4f:02:87:91: 29:27:08:81:e3:f5:b9:2b:22:25:f2:7f:17:4d:0a:7b:7d:e6: 35:7b:5f:4f:9d:6e:d4:6e:cc:62:cb:91:3b:87:59:e0:66:91: ea:d7:df:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAg6jgFCxEEESs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2I4NDVhODQtZDhhZi00MDk3LWFjNjMtZGU4MmZkMGUyMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmljMAtf+YU9ct5ADCAPZ2BOPkLJwCK2MVQ42 4Ap84eMNf6zQOthDa+yTBWjuXO1ItLg+RufTiAi6IplXdtObqDe1EZmHA4vKmmQn 9eBhXwTy6MjdhSDNJSpLTfcaL5VP7leVGxpgIRV16L1Yhd+4HMn2X066pk8qtfpX aWQov/lRTOcApmOlE3paJfxqihYQEAuOV/xR1Ki6NmXmFjNudhvSpR2BmGgU+/4R k9zWF63SluEaFGT9Tj0OUE4EYbYFI9pj3cR6dWuk4kfKeLcDB+FYBh5u8a2GVJH2 Vo4RqmaQVQyMCMI6YLNogUn+1ozEY7Q3bB94pjBaoJ0ce6R1+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjd33DwzUxcnhI1LdOevivhyuUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmNhZjEyZTktY2I1NS0z NzYwLWFhYTQtMDFmNTZjZWZkYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAI8c MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxkU7KRCkxQ8My7fpZQ4MX2O7B2XZOgr2DmTklN/UcTPdbs88BD tM83eFZJ+sA0xuyZ7oqQZ2rfTTChKwG2cwulnnE+e+gUWsfOqqh4aFJMVQhDMEJ+ Bz6BmC6dKAy3z93hGP+LP7F1BOylAWnANb6jxVsxm/FS69BYlni1n1l/aXGTrL4k 0KPC3I/Qt49IAXK8Q4r1ynlLCD9IR9zBuky6lcXvRmSRKv+l1UOI5xRByykDB61s vA5zuzWowkYZJm7LysGZ795D1Pr4J4wj3t0ZM4CMTwKHkSknCIHj9bkrIiXyfxdN Cnt95jV7X0+dbtRuzGLLkTuHWeBmkerX3/8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:08 2025 by rpki-client