$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833498b7-9059-347f-9a90-a3b7fac02d40.roa File: 833498b7-9059-347f-9a90-a3b7fac02d40.roa (raw, json) Hash identifier: M8/iZsO6TkhbIoLawloEiZAQuGgMPbWOWyoWvvYkqcQ= Subject key identifier: 2D:75:DB:11:CE:0C:A1:02:1F:6D:F4:77:86:09:E6:67:7C:3C:A0:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02246258A0D88F0C364580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833498b7-9059-347f-9a90-a3b7fac02d40.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:e00::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:24:62:58:a0:d8:8f:0c:36:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=28eeb52c-85b4-4271-b4d3-305feb60e373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:fc:68:87:13:13:a0:8d:4c:23:e8:68:ff: 68:65:af:af:c0:3e:54:8e:0a:78:da:61:75:5f:50: 7e:00:eb:02:5a:2f:1a:1b:df:37:e8:b9:ff:8c:0a: 9c:3b:db:8a:ae:8d:cf:23:be:3e:6f:e7:5e:b4:21: 98:d1:53:22:49:73:21:61:5a:a2:3c:13:44:f7:c6: 7b:6d:14:ff:fe:f1:f5:d6:60:47:9c:0a:8a:48:7b: 22:ab:4f:3b:0f:51:ae:03:b9:e3:e5:ca:b1:34:01: 81:4d:7b:99:b7:40:8e:bd:5b:e4:1d:ca:be:49:73: 86:95:0a:e6:c3:7f:8c:0a:0d:74:bf:04:d3:85:8e: 0a:5a:73:3c:e6:f3:51:6e:7a:c4:1b:20:8e:6a:6e: b0:31:05:14:ed:11:e3:d6:ba:b7:fa:9d:5c:32:38: 39:32:74:20:fe:62:55:eb:3f:29:9a:ae:4d:03:74: 55:81:cd:77:0e:87:af:40:81:48:79:8a:f6:00:0b: e5:a7:31:09:f5:68:5e:9a:75:0f:73:cd:c7:cc:f8: ee:31:be:0a:20:fa:bb:90:49:80:40:15:20:a7:5d: 74:c1:3a:d3:4e:39:8f:be:c8:7a:19:c3:e4:fe:53: 3f:9d:05:b7:07:8e:06:3c:58:0b:51:11:68:32:a8: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:DB:11:CE:0C:A1:02:1F:6D:F4:77:86:09:E6:67:7C:3C:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833498b7-9059-347f-9a90-a3b7fac02d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:e00::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e2:2a:fb:34:3b:13:4b:ee:ec:bb:9f:9f:0c:7a:bb:fd:fc: 22:cb:94:eb:5e:04:59:c7:49:e3:6a:4d:a5:52:00:9e:f6:2f: 44:d2:63:a6:7a:18:f3:33:8a:6d:46:97:37:f3:c6:35:a4:0f: 87:97:d6:20:9b:c7:25:7e:83:25:4d:81:bb:ec:bb:52:b3:c0: b5:6a:13:4f:37:1d:73:a5:ea:0a:c0:53:52:06:c7:f9:5f:71: b5:25:b5:38:75:9a:d7:7d:92:ba:b6:54:8e:12:4c:9f:9c:f1: 91:36:6c:3a:08:e3:ba:80:42:e4:20:02:81:93:1c:5f:cf:a6: 92:a4:94:04:2a:3a:2a:ef:a7:46:50:67:87:9d:2c:76:e6:a2: 25:04:27:ab:43:66:00:6d:56:4b:d0:ab:a3:27:30:7d:4d:42: da:4c:8f:3b:2d:81:6b:f9:84:d2:5d:b7:af:42:45:11:e4:40: 8f:36:af:8d:3e:9d:88:a4:77:bc:e7:a7:de:a2:b6:42:aa:23: f6:42:17:5e:2b:ca:dc:83:ce:8d:37:80:24:11:6c:eb:f6:d2: d4:60:1e:cc:05:ad:bf:f8:9b:2c:30:37:88:6e:f4:bd:22:c5: 73:75:4b:af:9f:cc:ad:14:7a:3d:27:53:d8:72:21:58:6f:2f: 33:1e:24:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiRiWKDYjww2RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjhlZWI1MmMtODViNC00MjcxLWI0ZDMtMzA1ZmViNjBlMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9D8aIcTE6CNTCPoaP9oZa+vwD5Ujgp42mF1 X1B+AOsCWi8aG9836Ln/jAqcO9uKro3PI74+b+detCGY0VMiSXMhYVqiPBNE98Z7 bRT//vH11mBHnAqKSHsiq087D1GuA7nj5cqxNAGBTXuZt0COvVvkHcq+SXOGlQrm w3+MCg10vwTThY4KWnM85vNRbnrEGyCOam6wMQUU7RHj1rq3+p1cMjg5MnQg/mJV 6z8pmq5NA3RVgc13DoevQIFIeYr2AAvlpzEJ9WhemnUPc83HzPjuMb4KIPq7kEmA QBUgp110wTrTTjmPvsh6GcPk/lM/nQW3B44GPFgLURFoMqjX7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC112xHODKECH230d4YJ5md8PKBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODMzNDk4YjctOTA1OS0z NDdmLTlhOTAtYTNiN2ZhYzAyZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICg4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXiKvs0OxNL7uy7n58Merv9/CLLlOteBFnHSeNqTaVSAJ72L0TS Y6Z6GPMzim1GlzfzxjWkD4eX1iCbxyV+gyVNgbvsu1KzwLVqE083HXOl6grAU1IG x/lfcbUltTh1mtd9krq2VI4STJ+c8ZE2bDoI47qAQuQgAoGTHF/PppKklAQqOirv p0ZQZ4edLHbmoiUEJ6tDZgBtVkvQq6MnMH1NQtpMjzstgWv5hNJdt69CRRHkQI82 r40+nYikd7znp96itkKqI/ZCF14rytyDzo03gCQRbOv20tRgHswFrb/4mywwN4hu 9L0ixXN1S6+fzK0Uej0nU9hyIVhvLzMeJO0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:26 2025 by rpki-client