$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d035548-a487-3139-a127-60c385a17400.roa File: 8d035548-a487-3139-a127-60c385a17400.roa (raw, json) Hash identifier: tH3Knq+J/VOE24nRGSk5kGzx+0t6D1bzuEyl5gyVzFM= Subject key identifier: 85:0B:54:2E:4B:FC:28:A9:F3:66:6C:91:72:E4:13:30:95:1A:C1:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F021570B58A4DE0B941F330 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d035548-a487-3139-a127-60c385a17400.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:15:70:b5:8a:4d:e0:b9:41:f3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ae773da0-52c3-4173-b405-a2cc2b12178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:a8:28:ee:e3:05:3d:24:3d:93:8a:8c:67: 90:4a:9a:da:46:ee:17:d6:57:13:e6:e2:2f:b2:9a: f3:53:7a:61:23:c9:12:21:d4:76:4a:e8:96:9e:a2: c1:b9:8c:f6:c7:11:6c:1c:13:7a:ab:bd:7d:17:8b: 1f:d6:96:31:d1:83:96:8a:c6:b1:2d:0f:90:19:4b: 03:d9:4a:bf:f6:51:9c:b1:57:20:af:55:3e:2e:1f: c0:17:35:02:d9:5d:91:61:84:cc:18:52:9a:a8:54: ec:cd:94:42:8d:4c:d5:18:0d:fb:61:5c:4b:1b:9c: 8b:6c:c7:a4:bd:02:a0:90:0e:ff:37:09:39:80:b1: 8e:b5:bd:60:d7:65:46:45:05:e8:32:eb:88:98:5d: bf:9f:ae:c2:4b:dd:42:d7:0f:4f:c8:bf:14:92:55: 36:c2:e8:78:9b:8e:54:23:ab:b5:d8:59:d4:ce:76: 76:22:e1:45:a8:34:ed:26:c5:0a:f2:06:36:9c:83: 66:2b:06:f9:dc:30:a2:8b:85:a1:d8:b1:8e:c6:bc: c3:1b:92:d5:3e:e8:1a:c4:ab:01:d4:aa:53:fb:67: fe:e6:94:cc:fe:a8:e5:65:c8:31:67:70:72:5e:53: 9d:42:66:8d:b9:c3:fd:e3:1f:22:ae:67:d2:52:b7: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0B:54:2E:4B:FC:28:A9:F3:66:6C:91:72:E4:13:30:95:1A:C1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d035548-a487-3139-a127-60c385a17400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:49:55:4c:46:9a:14:8a:85:30:29:a2:9f:d0:bf:da:cb:f2: da:b9:e9:5f:fa:40:13:6c:5c:c5:62:4f:12:94:a3:d0:eb:44: ba:e3:27:c3:26:a0:57:7d:65:8c:89:df:47:7b:5f:20:18:1d: 7a:4a:31:ce:3e:f8:58:19:a9:c4:63:2c:dc:4f:09:57:08:d1: 85:33:9a:0e:9b:fe:e0:96:82:02:b9:00:b1:0d:ee:b8:c7:c5: 9d:68:82:a2:41:35:65:d5:48:81:ad:e2:1e:4e:da:a6:ad:2d: c8:33:3f:fe:e1:f8:ec:99:5d:2c:d5:64:cc:8e:ab:e5:0a:7f: d0:69:b0:45:91:c6:0c:a2:0f:27:90:0a:02:f2:11:34:a2:95: 15:28:18:4d:d7:3d:38:58:a9:cd:c8:67:7c:85:89:67:06:c3: a8:60:c4:be:61:85:7b:d0:87:13:01:f5:db:89:be:bd:c7:c0: e0:58:a8:3c:6b:4c:5d:03:6c:d2:96:4b:2c:d5:7c:7a:bd:a2: da:7f:4e:1a:ab:34:3a:59:ac:09:94:e3:25:e4:0d:4d:7a:35: f4:1d:b0:96:11:52:7f:60:00:b0:6a:e4:7b:fa:7a:0d:ce:27: 4f:84:ed:46:eb:0d:ca:c3:8c:06:0b:03:f6:82:42:0b:64:ba: 61:3d:f9:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhVwtYpN4LlB8zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWU3NzNkYTAtNTJjMy00MTczLWI0MDUtYTJjYzJiMTIxNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZGoKO7jBT0kPZOKjGeQSpraRu4X1lcT5uIv sprzU3phI8kSIdR2SuiWnqLBuYz2xxFsHBN6q719F4sf1pYx0YOWisaxLQ+QGUsD 2Uq/9lGcsVcgr1U+Lh/AFzUC2V2RYYTMGFKaqFTszZRCjUzVGA37YVxLG5yLbMek vQKgkA7/Nwk5gLGOtb1g12VGRQXoMuuImF2/n67CS91C1w9PyL8UklU2wuh4m45U I6u12FnUznZ2IuFFqDTtJsUK8gY2nINmKwb53DCii4Wh2LGOxrzDG5LVPugaxKsB 1KpT+2f+5pTM/qjlZcgxZ3ByXlOdQmaNucP94x8irmfSUrfSHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIULVC5L/Cip82ZskXLkEzCVGsHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQwMzU1NDgtYTQ4Ny0z MTM5LWExMjctNjBjMzg1YTE3NDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIALEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRJVUxGmhSKhTApop/Qv9rL8tq56V/6QBNsXMViTxKUo9DrRLrj J8MmoFd9ZYyJ30d7XyAYHXpKMc4++FgZqcRjLNxPCVcI0YUzmg6b/uCWggK5ALEN 7rjHxZ1ogqJBNWXVSIGt4h5O2qatLcgzP/7h+OyZXSzVZMyOq+UKf9BpsEWRxgyi DyeQCgLyETSilRUoGE3XPThYqc3IZ3yFiWcGw6hgxL5hhXvQhxMB9duJvr3HwOBY qDxrTF0DbNKWSyzVfHq9otp/ThqrNDpZrAmU4yXkDU16NfQdsJYRUn9gALBq5Hv6 eg3OJ0+E7UbrDcrDjAYLA/aCQgtkumE9+TM= -----END CERTIFICATE-----Generated at Thu Oct 16 04:50:48 2025 by rpki-client