$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86646b6c-8ec4-3106-8998-a1f7b3e76ccd.roa File: 86646b6c-8ec4-3106-8998-a1f7b3e76ccd.roa (raw, json) Hash identifier: Y10F2O9Q5B53ge51QGubMBhgJGKrwPrJ3AyCZUa3bWA= Subject key identifier: B3:D9:E7:3C:3E:22:E9:0A:98:46:C1:95:B2:5E:D8:F6:F0:10:EF:40 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F5578DC54C969A0EFC40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86646b6c-8ec4-3106-8998-a1f7b3e76ccd.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:4c20::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f5:57:8d:c5:4c:96:9a:0e:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=996ba929-9cb4-4358-9d7c-dd7a289fd9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:f4:69:e3:09:ba:3b:2a:44:fe:da:f6:cc: e3:1e:fd:ce:ab:8f:8b:03:46:f5:bc:62:ae:51:f9: f6:ea:8e:10:12:01:88:cd:cf:0a:f3:11:bd:e7:4d: b8:7f:1a:1b:10:1c:32:05:e7:e3:de:9b:96:32:41: fb:d8:80:dd:9c:09:0c:f2:e3:ee:2a:fb:94:f5:61: 74:9d:7a:87:f6:23:d5:e2:ab:30:a8:92:ef:c9:ec: 33:b6:7f:bf:ee:8f:53:60:57:5e:f3:a3:4f:92:bb: ed:82:89:f8:39:2c:6d:43:c6:d0:c4:6b:d4:3a:7a: 9c:04:e0:b9:f8:6e:03:ab:99:35:78:35:b1:8f:80: 49:20:45:84:ad:8e:d8:bf:75:35:81:40:0f:3d:16: 15:3c:d8:6b:a4:d2:6e:c7:17:a9:0f:6a:60:3f:5f: d8:9e:ea:c2:5c:24:e6:73:86:4f:ea:ed:43:81:12: 50:d4:69:52:1e:f6:5b:6e:1e:8f:b9:f0:4b:ad:f3: 81:28:24:e6:80:3d:5a:50:37:34:18:ea:5c:a6:49: 00:b3:42:6a:b1:00:02:ee:4a:c9:1d:7b:8e:54:dd: 23:7f:a4:cc:c4:8f:d8:45:b2:44:c2:3f:3b:51:1c: 33:a0:37:39:d0:e0:fe:d5:05:81:55:06:ca:51:74: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D9:E7:3C:3E:22:E9:0A:98:46:C1:95:B2:5E:D8:F6:F0:10:EF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86646b6c-8ec4-3106-8998-a1f7b3e76ccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4c20::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e0:ed:73:db:29:cf:1b:26:2a:55:b1:a0:f8:b3:0d:65:69: e5:7c:e1:95:b8:40:fb:d6:15:58:a0:63:95:cf:7b:c7:e5:d4: 78:91:d7:3f:20:8a:60:94:ad:e4:d1:97:99:40:61:52:6a:c0: b1:48:bc:9b:83:28:ea:f2:c5:ba:5a:07:e3:c2:86:22:c8:cc: e5:e1:32:1d:c5:e4:c9:0e:a3:43:24:88:03:86:22:86:40:74: b3:80:e5:a4:ea:32:cc:e9:8a:7f:b9:79:19:4b:7c:b9:24:17: 4d:89:e2:10:b7:3d:9b:24:c1:93:f6:a5:25:1f:93:75:b0:1a: 4c:2d:f6:c7:7e:ef:97:f6:07:78:12:4c:53:0f:03:31:c9:49: 02:47:c8:ce:d4:04:31:62:a8:d9:56:5a:cf:f1:9a:b8:19:06: 7a:5b:89:1f:e4:c8:7a:fd:18:0f:26:ae:03:de:bd:6a:c2:b2: 84:fa:9b:f7:02:70:3a:df:57:29:30:47:bc:17:ba:b9:4b:97: 33:cb:22:0c:e4:9e:88:e0:50:58:02:6f:f7:7e:27:ad:04:2b: 12:08:0a:4c:4c:9a:7e:52:18:02:b2:06:be:68:bb:6b:5b:58: be:be:61:4f:14:08:72:9c:18:04:7c:8f:41:51:6f:5f:fa:ec: c7:29:ed:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfVXjcVMlpoO/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTk2YmE5MjktOWNiNC00MzU4LTlkN2MtZGQ3YTI4OWZkOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud/0aeMJujsqRP7a9szjHv3Oq4+LA0b1vGKu Ufn26o4QEgGIzc8K8xG95024fxobEBwyBefj3puWMkH72IDdnAkM8uPuKvuU9WF0 nXqH9iPV4qswqJLvyewztn+/7o9TYFde86NPkrvtgon4OSxtQ8bQxGvUOnqcBOC5 +G4Dq5k1eDWxj4BJIEWErY7Yv3U1gUAPPRYVPNhrpNJuxxepD2pgP1/YnurCXCTm c4ZP6u1DgRJQ1GlSHvZbbh6PufBLrfOBKCTmgD1aUDc0GOpcpkkAs0JqsQAC7krJ HXuOVN0jf6TMxI/YRbJEwj87URwzoDc50OD+1QWBVQbKUXQS7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPZ5zw+IukKmEbBlbJe2PbwEO9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODY2NDZiNmMtOGVjNC0z MTA2LTg5OTgtYTFmN2IzZTc2Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAEwg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvg7XPbKc8bJipVsaD4sw1laeV84ZW4QPvWFVigY5XPe8fl1HiR 1z8gimCUreTRl5lAYVJqwLFIvJuDKOryxbpaB+PChiLIzOXhMh3F5MkOo0MkiAOG IoZAdLOA5aTqMszpin+5eRlLfLkkF02J4hC3PZskwZP2pSUfk3WwGkwt9sd+75f2 B3gSTFMPAzHJSQJHyM7UBDFiqNlWWs/xmrgZBnpbiR/kyHr9GA8mrgPevWrCsoT6 m/cCcDrfVykwR7wXurlLlzPLIgzknojgUFgCb/d+J60EKxIICkxMmn5SGAKyBr5o u2tbWL6+YU8UCHKcGAR8j0FRb1/67Mcp7Yg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:51 2025 by rpki-client