$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/701d2b24-4c36-39c3-bae3-6f15c84d2a77.roa File: 701d2b24-4c36-39c3-bae3-6f15c84d2a77.roa (raw, json) Hash identifier: 9lZPfoX4MMvz6cCBXWH8WQtG/AVn7MnqgH1XOtIzhLI= Subject key identifier: 0C:76:98:9F:E0:11:84:3F:3D:97:60:06:D9:FD:5F:2E:05:22:71:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F022401506184F625E8BC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/701d2b24-4c36-39c3-bae3-6f15c84d2a77.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:d24::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:24:01:50:61:84:f6:25:e8:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=968fc07b-c0e0-4455-ad61-75f3a79f18e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:0c:c2:23:c9:8d:c7:37:98:b4:61:8a:3c: 1d:02:a3:5b:e7:d0:8d:79:4d:1e:c1:e0:24:ce:38: c4:a0:36:51:f0:f5:5c:27:02:82:6e:07:56:8d:3e: f4:59:18:cd:06:7a:1f:5e:48:04:b5:0e:3e:57:ac: e4:d7:4f:2b:3e:b9:86:2d:f5:2f:7a:e0:22:13:74: 1e:7a:29:8d:94:36:c3:c5:90:09:b2:02:19:ae:41: ed:21:6b:0c:78:89:8d:e7:72:8f:35:72:07:08:d9: eb:23:47:41:42:a7:14:12:45:40:f8:ec:63:77:88: 69:53:25:f1:e8:27:43:bc:04:6c:6a:95:fb:18:8c: a0:8e:c3:0e:02:11:b8:c7:eb:07:96:fa:da:87:f7: b4:66:f3:61:36:4a:7f:7a:26:68:fe:67:d7:59:9e: 00:2c:09:d1:3b:52:e7:a0:37:77:b7:c6:7a:36:68: 70:c1:01:4b:ab:a1:7c:ea:62:6f:0e:9c:e1:71:be: df:ae:cc:ee:21:df:0a:9d:ef:56:ea:79:03:37:02: 14:d4:2e:ca:8c:9a:40:f8:bc:a9:79:be:0d:b1:5e: 6b:0f:94:b4:a2:0e:f5:85:54:8b:91:0a:0b:ec:0e: 5f:02:cf:a8:85:ee:e4:7a:85:59:2a:79:fa:6c:23: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:76:98:9F:E0:11:84:3F:3D:97:60:06:D9:FD:5F:2E:05:22:71:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/701d2b24-4c36-39c3-bae3-6f15c84d2a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:d24::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:88:1f:77:94:64:f4:33:c5:b7:1c:cc:5d:63:c6:dd:d4:e6: 13:0a:af:72:9f:6c:8e:f2:b6:f5:1c:01:07:25:29:00:7d:08: f2:e2:e8:06:8a:5c:2f:2a:64:38:3f:b8:67:cb:16:08:47:f7: 90:5c:00:e9:b5:ad:e0:7a:5a:7f:7d:41:a7:96:33:64:c2:ce: 70:33:16:52:81:68:bf:65:71:47:dd:ec:55:84:42:39:e6:c7: 80:42:de:38:41:c5:53:fe:df:90:e8:2b:e2:29:40:8a:86:5c: 80:95:99:2a:d6:b0:48:75:28:c5:08:29:b7:c0:c1:d3:55:e2: 19:c9:cf:40:63:43:1c:b6:57:fc:3c:9c:77:72:b5:d8:40:c7: ad:11:85:c9:77:ea:fa:bc:ca:d6:f2:ba:46:ca:a8:5b:56:1d: 66:b7:9b:36:25:d5:4c:05:d6:b1:45:1d:75:70:1c:13:4d:95: 60:71:07:39:ba:2c:89:d4:ab:5b:26:ad:d9:35:58:d1:4d:1f: 1a:1f:56:92:f8:5b:e7:de:6c:5c:79:93:47:c0:20:35:46:6a: 15:9e:e6:89:96:49:9c:98:f3:16:d9:5b:cc:2f:c9:94:fb:88: 52:25:f0:fa:dd:31:19:dd:f9:8c:a4:4e:4a:d8:36:35:91:00: 63:48:3a:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiQBUGGE9iXovIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTY4ZmMwN2ItYzBlMC00NDU1LWFkNjEtNzVmM2E3OWYxOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHAMwiPJjcc3mLRhijwdAqNb59CNeU0eweAk zjjEoDZR8PVcJwKCbgdWjT70WRjNBnofXkgEtQ4+V6zk108rPrmGLfUveuAiE3Qe eimNlDbDxZAJsgIZrkHtIWsMeImN53KPNXIHCNnrI0dBQqcUEkVA+Oxjd4hpUyXx 6CdDvARsapX7GIygjsMOAhG4x+sHlvrah/e0ZvNhNkp/eiZo/mfXWZ4ALAnRO1Ln oDd3t8Z6NmhwwQFLq6F86mJvDpzhcb7frszuId8Kne9W6nkDNwIU1C7KjJpA+Lyp eb4NsV5rD5S0og71hVSLkQoL7A5fAs+ohe7keoVZKnn6bCMvXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAx2mJ/gEYQ/PZdgBtn9Xy4FInFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzAxZDJiMjQtNGMzNi0z OWMzLWJhZTMtNmYxNWM4NGQyYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICg0k MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2IH3eUZPQzxbcczF1jxt3U5hMKr3KfbI7ytvUcAQclKQB9CPLi 6AaKXC8qZDg/uGfLFghH95BcAOm1reB6Wn99QaeWM2TCznAzFlKBaL9lcUfd7FWE Qjnmx4BC3jhBxVP+35DoK+IpQIqGXICVmSrWsEh1KMUIKbfAwdNV4hnJz0BjQxy2 V/w8nHdytdhAx60Rhcl36vq8ytbyukbKqFtWHWa3mzYl1UwF1rFFHXVwHBNNlWBx Bzm6LInUq1smrdk1WNFNHxofVpL4W+febFx5k0fAIDVGahWe5omWSZyY8xbZW8wv yZT7iFIl8PrdMRnd+YykTkrYNjWRAGNIOjg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:26 2025 by rpki-client