$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9beb4b09-313e-3485-911b-621188a46361.roa File: 9beb4b09-313e-3485-911b-621188a46361.roa (raw, json) Hash identifier: cUM7Dg0woRAw/+CMUgli9HPDv54RAo1jU+V0OvxPdJ0= Subject key identifier: F9:A8:F8:87:D7:92:A6:C6:64:56:EF:8C:07:90:E0:AB:74:B1:62:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F291F91279D4D31C9780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9beb4b09-313e-3485-911b-621188a46361.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:3ec8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f2:91:f9:12:79:d4:d3:1c:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d3e5ca3a-8667-4ffe-bf31-e8923f61af15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:76:6c:7c:aa:9b:b9:d3:24:e2:dd:a3:61: 46:b9:a6:09:a3:dc:c4:e7:1f:08:02:15:19:95:16: 4b:36:33:67:5b:54:fc:32:a8:d6:7d:76:55:c7:38: c2:b0:40:5b:15:8e:f6:fe:d7:b7:b0:73:7b:ff:2b: 87:ec:b6:23:c3:d4:0d:53:81:5b:c3:02:d3:9f:31: 30:9a:9d:05:67:79:92:9e:99:39:92:37:a0:88:fb: de:b1:b8:79:c3:5d:47:7c:be:1e:ec:19:6f:67:5d: 37:d7:c5:23:96:a6:14:5b:e0:7c:19:96:11:dc:ba: 59:d5:5a:06:43:70:eb:ee:27:15:98:91:c5:58:f9: cc:0a:20:51:f3:0c:f3:cc:0d:46:55:2c:ad:a5:44: ff:72:1d:b5:97:be:2c:26:46:4d:f6:67:1f:76:0b: 9f:2d:31:1e:08:da:01:45:3f:e8:d7:71:7d:94:53: 01:c3:10:a0:52:14:c2:be:7d:7d:41:94:59:4d:08: 73:36:a9:1e:00:74:38:40:6a:13:69:c1:36:90:c7: 51:c7:6d:a2:1d:be:cb:d7:db:be:30:7d:26:a7:f6: da:b1:33:22:81:d0:cb:6d:21:29:df:5b:6f:e5:63: 0f:07:b1:dd:c0:e7:93:60:09:ea:84:69:99:26:c7: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A8:F8:87:D7:92:A6:C6:64:56:EF:8C:07:90:E0:AB:74:B1:62:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9beb4b09-313e-3485-911b-621188a46361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3ec8::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:36:a5:91:29:e9:c4:9b:e5:9d:15:b2:19:64:a0:cb:8a:2a: 80:6e:b0:4e:f1:cd:73:b1:bd:a6:04:4a:a2:b7:78:ac:e2:cb: 9d:3a:49:15:a7:85:c6:ec:7c:06:9d:b3:0a:50:09:1d:77:cb: 49:36:99:27:8d:5b:fa:b4:52:9b:71:99:e4:53:30:ce:8f:9e: a8:dc:95:4f:4d:01:65:e3:21:4b:08:a0:67:62:a3:42:09:30: 28:a5:18:33:0c:29:89:85:65:68:67:8e:27:42:21:7b:7d:cd: 7e:98:cc:ce:0e:e3:60:86:0e:bf:55:c8:41:a4:50:87:fb:46: 0f:3f:09:5b:22:bd:18:a2:1f:bf:46:c5:62:ab:93:4f:d2:57: c6:4f:ad:3a:ad:2d:b2:de:f8:b5:2e:36:41:67:ac:a6:4d:08: 78:87:3e:86:1d:e7:ac:bc:f9:07:84:97:0d:a7:67:7d:22:16: e2:01:74:3c:34:1b:27:06:4b:41:1b:6c:3e:f5:cf:f8:fb:2b: cb:ae:3e:1d:85:85:d4:64:38:b7:60:a9:32:b1:29:a1:86:c9: e1:54:63:d3:48:22:40:44:a1:4b:42:48:21:76:e3:53:14:2c: fa:f3:0e:a6:08:9b:8f:b9:cf:87:de:04:28:66:bc:5e:35:00: 00:5c:2e:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfKR+RJ51NMcl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDNlNWNhM2EtODY2Ny00ZmZlLWJmMzEtZTg5MjNmNjFhZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3t2bHyqm7nTJOLdo2FGuaYJo9zE5x8IAhUZ lRZLNjNnW1T8MqjWfXZVxzjCsEBbFY72/te3sHN7/yuH7LYjw9QNU4FbwwLTnzEw mp0FZ3mSnpk5kjegiPvesbh5w11HfL4e7BlvZ10318UjlqYUW+B8GZYR3LpZ1VoG Q3Dr7icVmJHFWPnMCiBR8wzzzA1GVSytpUT/ch21l74sJkZN9mcfdgufLTEeCNoB RT/o13F9lFMBwxCgUhTCvn19QZRZTQhzNqkeAHQ4QGoTacE2kMdRx22iHb7L19u+ MH0mp/basTMigdDLbSEp31tv5WMPB7HdwOeTYAnqhGmZJsdSDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPmo+IfXkqbGZFbvjAeQ4Kt0sWLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWJlYjRiMDktMzEzZS0z NDg1LTkxMWItNjIxMTg4YTQ2MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD7I MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADU2pZEp6cSb5Z0VshlkoMuKKoBusE7xzXOxvaYESqK3eKziy506 SRWnhcbsfAadswpQCR13y0k2mSeNW/q0UptxmeRTMM6PnqjclU9NAWXjIUsIoGdi o0IJMCilGDMMKYmFZWhnjidCIXt9zX6YzM4O42CGDr9VyEGkUIf7Rg8/CVsivRii H79GxWKrk0/SV8ZPrTqtLbLe+LUuNkFnrKZNCHiHPoYd56y8+QeElw2nZ30iFuIB dDw0GycGS0EbbD71z/j7K8uuPh2FhdRkOLdgqTKxKaGGyeFUY9NIIkBEoUtCSCF2 41MULPrzDqYIm4+5z4feBChmvF41AABcLoo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:54:25 2025 by rpki-client