$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91b656d2-5470-3599-a310-7c2f6ec075c3.roa File: 91b656d2-5470-3599-a310-7c2f6ec075c3.roa (raw, json) Hash identifier: JZfonKl3e9YlBPPMlw+KGlfxxOa9AmjatIwPBLqiL0s= Subject key identifier: D1:91:FD:78:33:BE:05:9A:39:61:9A:50:1C:EA:3C:5C:41:6A:0B:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02253B320D658C38ABE180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91b656d2-5470-3599-a310-7c2f6ec075c3.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:1014::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:25:3b:32:0d:65:8c:38:ab:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=b9cd68a0-9f3f-4df8-8112-ca0f2d414bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:f5:0e:05:06:76:a9:7c:31:69:cb:2f:86: a1:ad:44:dc:c2:f0:a6:be:7d:73:d1:e5:32:06:63: 31:99:fb:e9:a4:c9:5c:c1:f8:6f:f9:e6:50:03:65: 45:58:a5:5a:01:e7:58:b7:d6:24:0b:79:89:e1:69: e5:6b:be:23:8f:8e:18:2b:a5:3f:08:9d:fb:a8:64: f9:e4:aa:2a:43:be:19:43:d8:b6:eb:a2:71:f8:1d: 5d:54:b8:fe:7c:f9:e7:71:81:00:96:2d:34:12:b5: d3:29:96:9d:d7:74:0a:67:19:a9:dd:fa:e9:e2:25: c9:10:83:14:5a:d3:47:4c:6b:dd:d0:3e:85:7d:28: 50:93:21:9f:5a:06:57:4c:20:7c:46:e3:2f:71:ef: fa:4f:8b:0a:66:c7:c4:51:41:9c:36:32:e8:33:94: 2b:af:fb:1c:86:06:29:f1:3b:f3:56:6c:2b:92:ab: 84:be:f2:a0:14:d7:8f:a8:7b:08:94:bb:11:6f:40: 08:eb:bd:c7:b9:69:84:03:97:e0:18:2f:ab:53:32: ff:48:76:0d:90:4a:df:29:f5:59:3f:06:35:ad:7b: 80:33:fe:87:1c:df:49:06:7f:1e:51:81:6a:de:be: c1:04:9c:a7:04:41:35:82:2e:e5:d9:69:df:0f:0f: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:FD:78:33:BE:05:9A:39:61:9A:50:1C:EA:3C:5C:41:6A:0B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91b656d2-5470-3599-a310-7c2f6ec075c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:1014::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:60:d7:86:29:a2:1b:09:6c:54:e3:2f:41:4e:69:20:9a: b4:17:e0:c2:4e:44:cc:18:d8:53:0b:47:50:26:2a:24:84:d5: 91:55:29:f6:6c:12:dd:90:0a:d6:b4:dd:53:f9:b8:a2:e3:c2: dc:92:12:a7:3c:6f:c8:f4:7b:b2:ce:5d:d0:05:7c:1a:e0:d7: b4:d7:17:3c:5c:75:15:41:5f:d9:00:89:7d:88:e4:36:ab:df: 54:37:15:f0:45:b6:c5:14:fa:81:ba:c8:96:01:9f:c0:3c:70: 88:51:0b:8f:47:c0:b2:41:fc:d3:39:e3:fd:db:3c:fb:51:0d: e2:eb:49:46:cc:9a:04:8f:31:ac:a8:f6:09:a0:b5:1f:a6:e3: f8:21:58:19:a2:da:0f:a7:32:01:cd:81:c0:53:3c:15:ea:f4: 3a:57:31:60:fe:30:97:1e:36:f6:2f:4f:5c:10:64:8b:64:88: 2b:5c:72:9b:8c:fb:00:11:20:3f:90:9b:40:37:f2:f8:e6:54: ff:24:fa:33:2b:a0:e7:7d:a5:10:76:14:df:8c:ae:4b:2e:f6: ee:2c:68:b9:6e:e9:ce:dd:a9:87:1a:63:14:fc:94:ec:a4:5c: d0:36:a9:50:0c:35:f0:f5:7f:99:11:ec:10:30:53:7d:9f:35: de:31:4e:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiU7Mg1ljDir4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjljZDY4YTAtOWYzZi00ZGY4LTgxMTItY2EwZjJkNDE0YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuf1DgUGdql8MWnLL4ahrUTcwvCmvn1z0eUy BmMxmfvppMlcwfhv+eZQA2VFWKVaAedYt9YkC3mJ4Wnla74jj44YK6U/CJ37qGT5 5KoqQ74ZQ9i266Jx+B1dVLj+fPnncYEAli00ErXTKZad13QKZxmp3frp4iXJEIMU WtNHTGvd0D6FfShQkyGfWgZXTCB8RuMvce/6T4sKZsfEUUGcNjLoM5Qrr/schgYp 8TvzVmwrkquEvvKgFNePqHsIlLsRb0AI673HuWmEA5fgGC+rUzL/SHYNkErfKfVZ PwY1rXuAM/6HHN9JBn8eUYFq3r7BBJynBEE1gi7l2WnfDw/PQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGR/XgzvgWaOWGaUBzqPFxBagucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTFiNjU2ZDItNTQ3MC0z NTk5LWEzMTAtN2MyZjZlYzA3NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEotYNeGKaIbCWxU4y9BTmkgmrQX4MJORMwY2FMLR1AmKiSE1ZFV KfZsEt2QCta03VP5uKLjwtySEqc8b8j0e7LOXdAFfBrg17TXFzxcdRVBX9kAiX2I 5Dar31Q3FfBFtsUU+oG6yJYBn8A8cIhRC49HwLJB/NM54/3bPPtRDeLrSUbMmgSP Mayo9gmgtR+m4/ghWBmi2g+nMgHNgcBTPBXq9DpXMWD+MJceNvYvT1wQZItkiCtc cpuM+wARID+Qm0A38vjmVP8k+jMroOd9pRB2FN+Mrksu9u4saLlu6c7dqYcaYxT8 lOykXNA2qVAMNfD1f5kR7BAwU32fNd4xTnM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:51 2025 by rpki-client