$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/707db026-b92f-3d04-929c-506643af0327.roa File: 707db026-b92f-3d04-929c-506643af0327.roa (raw, json) Hash identifier: 4NtK73+CIVN/H4QxVCgP1/UVO6HDEvOyiQVnBz+TCkc= Subject key identifier: 96:B0:EA:51:FB:B1:F4:59:1D:D6:77:B7:74:AC:7F:83:62:47:09:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02117504B22240BDB9E040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/707db026-b92f-3d04-929c-506643af0327.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:a704::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:11:75:04:b2:22:40:bd:b9:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=eeba2713-5e6b-47ef-93cb-a72f97a3d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:28:af:19:34:e1:23:eb:7d:a2:ca:09:0f: fd:ad:85:01:b9:c7:08:f4:3f:3d:2a:85:bb:d7:4f: 25:3f:2f:c8:ac:ad:3f:5e:cd:d1:3a:22:e4:34:b1: 30:36:90:30:61:14:44:30:33:08:7c:51:fd:c9:64: d4:bb:63:fc:30:bf:63:0c:81:5e:19:49:8a:7f:a6: 2a:9f:40:bf:48:f8:cb:0b:71:23:de:57:04:05:51: d8:a6:d4:2e:93:bd:7c:f6:6f:66:16:e5:7a:7e:4c: d2:67:09:2b:d5:ce:27:7b:f3:6c:b4:dd:f5:d5:fd: e0:ad:45:d6:f9:f9:9f:ed:45:91:f9:40:ce:a4:4b: 5a:6f:df:da:70:c6:7d:99:af:23:fa:5a:c9:d2:4a: 19:5f:d3:c0:9f:36:da:19:c1:6b:25:53:49:e1:f2: d0:20:89:5c:df:e0:b7:46:45:0a:c9:6d:35:63:11: 91:f3:71:c5:97:a5:9c:30:67:7d:02:cf:d1:9b:01: 75:b9:9b:d8:a2:c5:11:8c:93:16:a8:14:09:a8:6d: 11:bb:a0:73:d7:da:89:01:93:7b:5e:4b:c3:dc:25: 34:f2:24:fd:84:1f:ac:6e:86:5b:27:b5:19:c8:31: 9d:b7:5b:65:e6:aa:ff:d9:51:20:89:02:09:fc:d7: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B0:EA:51:FB:B1:F4:59:1D:D6:77:B7:74:AC:7F:83:62:47:09:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/707db026-b92f-3d04-929c-506643af0327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:a704::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:09:6d:f0:98:fa:67:2f:32:1f:c4:c6:66:df:35:ef:f2:6e: d9:79:f9:4f:cb:5a:4d:02:3c:cb:6b:85:df:fc:72:44:98:16: 18:22:a4:15:27:46:eb:b9:fb:ca:69:6a:ff:5d:2f:89:5d:1a: 8c:50:4c:2b:45:e2:77:f2:23:3d:8c:7d:3d:2a:bf:1b:9e:87: bd:a0:44:f9:f1:14:63:66:7f:ff:53:c7:d9:36:b6:14:37:65: 13:b4:95:90:cf:2e:30:25:ed:c8:2a:21:8a:77:e5:ac:45:b4: 19:56:4a:f7:6e:ec:7e:a8:00:8b:8a:92:71:12:32:10:1c:a1: b4:d5:17:62:06:c8:4d:d8:68:bc:26:35:9b:f8:5f:89:be:f0: c8:3d:b4:33:fa:3b:45:3f:ca:a5:51:3f:87:77:54:94:50:90: 9d:1c:81:5a:30:45:9e:20:14:75:84:df:50:0e:3b:6b:0e:be: fb:17:a0:db:a7:18:5e:89:7d:74:f8:b6:c3:42:72:3b:64:af: f0:33:74:b0:f2:10:a0:45:c2:b7:5c:24:ba:b1:37:5c:f3:8d: 7b:7e:19:b9:80:94:9f:86:49:a4:9f:aa:d6:75:ab:8d:76:89: 93:e4:e6:5f:86:dc:e6:23:f6:80:c7:7d:c7:a8:82:09:8b:da: 37:09:ff:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhF1BLIiQL254EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWViYTI3MTMtNWU2Yi00N2VmLTkzY2ItYTcyZjk3YTNkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgosorxk04SPrfaLKCQ/9rYUBuccI9D89KoW7 108lPy/IrK0/Xs3ROiLkNLEwNpAwYRREMDMIfFH9yWTUu2P8ML9jDIFeGUmKf6Yq n0C/SPjLC3Ej3lcEBVHYptQuk7189m9mFuV6fkzSZwkr1c4ne/NstN311f3grUXW +fmf7UWR+UDOpEtab9/acMZ9ma8j+lrJ0koZX9PAnzbaGcFrJVNJ4fLQIIlc3+C3 RkUKyW01YxGR83HFl6WcMGd9As/RmwF1uZvYosURjJMWqBQJqG0Ru6Bz19qJAZN7 XkvD3CU08iT9hB+sboZbJ7UZyDGdt1tl5qr/2VEgiQIJ/Nc7WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJaw6lH7sfRZHdZ3t3Ssf4NiRwmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA3ZGIwMjYtYjkyZi0z ZDA0LTkyOWMtNTA2NjQzYWYwMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAKcE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkJbfCY+mcvMh/ExmbfNe/ybtl5+U/LWk0CPMtrhd/8ckSYFhgi pBUnRuu5+8ppav9dL4ldGoxQTCtF4nfyIz2MfT0qvxueh72gRPnxFGNmf/9Tx9k2 thQ3ZRO0lZDPLjAl7cgqIYp35axFtBlWSvdu7H6oAIuKknESMhAcobTVF2IGyE3Y aLwmNZv4X4m+8Mg9tDP6O0U/yqVRP4d3VJRQkJ0cgVowRZ4gFHWE31AOO2sOvvsX oNunGF6JfXT4tsNCcjtkr/AzdLDyEKBFwrdcJLqxN1zzjXt+GbmAlJ+GSaSfqtZ1 q412iZPk5l+G3OYj9oDHfceoggmL2jcJ/+E= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:15 2025 by rpki-client