$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d805257-ca0c-30bb-ad79-788a45d4f11e.roa File: 8d805257-ca0c-30bb-ad79-788a45d4f11e.roa (raw, json) Hash identifier: n1haIgOEyVgSw/ZOrYMumkStHVh9ZwTX4aSCgBHdA9A= Subject key identifier: 4B:5B:3F:27:A8:0F:F5:82:A0:24:2B:50:86:83:F4:FD:29:43:C7:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01EE51F6175A0D6C63BC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d805257-ca0c-30bb-ad79-788a45d4f11e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:3e04::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ee:51:f6:17:5a:0d:6c:63:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=abdaf4ba-2241-4d67-b62c-edb2fd09bee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:04:1c:12:03:4d:36:c7:2b:21:dd:f8:35: e1:9e:3a:96:60:4a:fd:8a:12:60:d2:66:09:e4:39: 44:ca:d1:45:3f:80:4c:13:08:4a:84:1b:54:f5:99: 9e:33:80:96:ae:1b:d7:96:05:1b:36:07:db:65:2b: 81:9c:b9:4b:21:70:b9:55:49:9e:0a:65:c3:61:78: 97:99:91:a9:12:14:de:4d:a9:c7:53:e5:7e:ca:c9: d1:34:f1:b1:0c:18:02:49:5d:72:31:95:f7:e5:d0: 03:95:0e:c9:e7:2c:a3:29:b6:b3:75:39:7e:c9:2f: d5:a1:44:f8:2e:a9:1a:c3:30:c6:de:de:44:be:d2: df:1f:46:54:7b:df:98:e8:2e:b2:05:b9:80:f3:04: a2:f3:73:66:5f:4b:d7:06:d9:76:19:56:3d:97:e3: 93:6a:6a:ab:a8:11:76:67:c5:fd:58:7d:d9:19:c5: 48:68:2e:c8:f6:8c:04:45:13:ac:eb:94:16:4f:2c: b2:d3:82:39:5b:c7:28:29:63:67:09:83:bb:69:7e: 60:81:03:1e:80:8c:1d:d6:93:b7:28:7f:a3:02:c1: d2:a0:7f:fb:64:cf:d7:45:2f:9f:39:44:00:c3:fa: 49:d9:ab:5c:57:30:38:30:8b:c2:a9:b3:7b:e3:6a: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:3F:27:A8:0F:F5:82:A0:24:2B:50:86:83:F4:FD:29:43:C7:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d805257-ca0c-30bb-ad79-788a45d4f11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3e04::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:11:76:7c:b5:9c:93:52:6e:24:8c:1b:4f:54:e1:40:12:6e: f4:60:cc:d5:06:cf:5f:b5:6b:e6:19:e4:77:0a:06:b3:dd:4b: 04:59:f9:e8:73:42:5e:cc:cb:57:ef:9a:65:b8:81:81:9f:16: 8c:6d:59:92:37:3d:44:69:e2:75:fe:c7:7f:82:6e:c2:32:06: fc:ad:c6:5d:c1:fd:ca:d7:74:18:06:e6:0b:90:86:5a:66:68: d3:d6:1e:4f:27:04:6d:08:bc:90:56:b5:f5:4a:12:52:70:5c: 09:56:53:24:a2:12:21:c2:6a:b9:6d:45:a9:0b:d2:7a:c8:a4: 79:c2:27:2c:e9:45:57:1c:95:44:5e:72:2a:86:fd:5b:2f:0b: 25:85:8c:e3:b2:eb:09:ee:9c:fe:dd:02:1c:a4:c3:92:ed:48: 0d:b3:b2:8e:a8:a7:e9:6e:8d:9e:5f:a9:15:5c:7f:41:a9:92: 37:83:29:c8:6d:0b:c3:6e:78:cf:aa:15:75:2c:8e:20:2e:32: f4:19:f9:82:31:12:12:d8:55:f7:7e:8f:19:d1:b5:3f:c3:3d: 41:6a:6c:3f:33:73:6b:11:8e:39:80:e6:3e:ba:f6:4e:42:6a: 54:d2:e6:59:1a:a9:02:2b:26:cd:dc:7d:62:fc:03:23:2d:ec: 12:a9:95:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAe5R9hdaDWxjvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWJkYWY0YmEtMjI0MS00ZDY3LWI2MmMtZWRiMmZkMDliZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFAEHBIDTTbHKyHd+DXhnjqWYEr9ihJg0mYJ 5DlEytFFP4BMEwhKhBtU9ZmeM4CWrhvXlgUbNgfbZSuBnLlLIXC5VUmeCmXDYXiX mZGpEhTeTanHU+V+ysnRNPGxDBgCSV1yMZX35dADlQ7J5yyjKbazdTl+yS/VoUT4 LqkawzDG3t5EvtLfH0ZUe9+Y6C6yBbmA8wSi83NmX0vXBtl2GVY9l+OTamqrqBF2 Z8X9WH3ZGcVIaC7I9owERROs65QWTyyy04I5W8coKWNnCYO7aX5ggQMegIwd1pO3 KH+jAsHSoH/7ZM/XRS+fOUQAw/pJ2atcVzA4MIvCqbN742qSQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtbPyeoD/WCoCQrUIaD9P0pQ8eAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQ4MDUyNTctY2EwYy0z MGJiLWFkNzktNzg4YTQ1ZDRmMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD4E MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQRdny1nJNSbiSMG09U4UASbvRgzNUGz1+1a+YZ5HcKBrPdSwRZ +ehzQl7My1fvmmW4gYGfFoxtWZI3PURp4nX+x3+CbsIyBvytxl3B/crXdBgG5guQ hlpmaNPWHk8nBG0IvJBWtfVKElJwXAlWUySiEiHCarltRakL0nrIpHnCJyzpRVcc lUReciqG/VsvCyWFjOOy6wnunP7dAhykw5LtSA2zso6op+lujZ5fqRVcf0GpkjeD KchtC8NueM+qFXUsjiAuMvQZ+YIxEhLYVfd+jxnRtT/DPUFqbD8zc2sRjjmA5j66 9k5CalTS5lkaqQIrJs3cfWL8AyMt7BKplf8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:07 2025 by rpki-client