$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a127d011-956c-3549-b31e-a79ab3dd3221.roa File: a127d011-956c-3549-b31e-a79ab3dd3221.roa (raw, json) Hash identifier: o6fE87/z/XlqT5LnTzfU5d3/folUdDCRHTdYLfW0tYA= Subject key identifier: DE:33:B2:17:65:CB:E3:36:1F:80:9B:29:77:C3:87:A1:1D:E1:6D:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F020C2717F99930E78FF400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a127d011-956c-3549-b31e-a79ab3dd3221.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:8e1a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:0c:27:17:f9:99:30:e7:8f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=dd13b1f3-68b6-4c6e-95f8-db2dea8ad2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:a2:41:32:e5:0a:5f:69:3b:80:4c:5e:a4: ef:43:7d:54:be:73:46:60:51:a2:b4:5f:15:0f:d1: 50:60:fb:11:ae:2b:99:de:e3:84:74:2f:40:4d:49: 56:f9:ce:ee:8b:6a:f8:c8:4d:44:96:9b:ca:4a:aa: 09:f1:e9:d8:c8:75:c2:fb:33:93:2a:eb:af:ea:2c: 0e:f0:00:2c:a2:51:98:76:99:c7:65:9d:89:da:96: f6:f8:8b:da:d5:00:00:ac:4c:05:59:74:ff:cd:23: 9c:66:c4:3c:3f:b8:74:06:83:38:73:44:20:25:d9: 0a:e8:02:32:9b:f7:60:a5:9c:d8:00:33:3f:d5:b6: 95:f5:54:fa:a9:64:e3:5c:f0:07:99:d1:72:a0:bd: 81:78:6f:2c:94:47:43:af:e3:90:a5:fa:04:fa:d1: 4a:5b:93:53:15:f1:80:d7:2a:0e:66:c5:e4:89:6b: e0:cc:40:06:a5:be:e6:9d:28:d6:da:a0:a2:8b:6d: 32:87:39:0f:db:b6:ea:8c:c1:40:d3:d3:de:33:1d: ab:eb:e7:38:ea:f6:b6:b3:28:34:2f:05:a7:90:b2: 75:35:8d:ab:dc:b6:7b:1b:17:2f:3a:41:34:c9:c2: 70:32:13:dd:d4:df:c0:fc:94:06:5e:e7:47:ea:dc: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:33:B2:17:65:CB:E3:36:1F:80:9B:29:77:C3:87:A1:1D:E1:6D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a127d011-956c-3549-b31e-a79ab3dd3221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8e1a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:e2:49:f1:8a:b8:d7:46:bb:da:c6:06:e1:4a:8c:cb:cf: 79:00:23:45:15:01:3d:ce:03:14:55:4c:69:18:6c:fb:53:e4: 5c:9c:8c:03:6d:5a:36:33:6d:9e:e6:49:e8:e9:c8:72:9a:c2: 8f:90:41:1d:4a:c9:ef:56:fb:74:63:44:57:e2:b9:7f:ac:51: 51:4f:05:73:7b:a7:a4:71:b1:39:28:78:ca:ff:65:30:f5:cf: 3a:3e:a0:c2:62:b3:d2:3b:1c:80:0b:70:23:9e:b8:b8:83:58: e3:f7:56:94:ce:38:06:1d:c6:d7:b9:03:62:d7:08:f5:b3:d5: a2:ad:03:cf:c9:f2:2e:ef:0e:cf:72:18:66:6f:ef:fc:b8:06: b2:40:91:44:45:04:f9:99:46:1b:18:f1:12:45:b9:a3:6c:43: db:0e:1a:60:36:be:37:38:e5:26:94:48:98:ca:f0:63:12:c9: 7d:6f:ab:79:28:9d:02:7d:e3:31:95:71:ea:ff:c2:a7:b6:ac: 0e:90:fd:49:14:c1:cb:a3:90:c7:9b:b9:a0:d2:38:d6:1d:03: 77:83:2e:68:b2:ae:2d:72:02:04:5f:c8:8e:27:d1:56:6f:fe: 34:6c:55:8b:6d:29:4c:28:ea:54:69:42:dc:18:28:42:c4:77: f4:07:33:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgwnF/mZMOeP9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGQxM2IxZjMtNjhiNi00YzZlLTk1ZjgtZGIyZGVhOGFkMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C2iQTLlCl9pO4BMXqTvQ31UvnNGYFGitF8V D9FQYPsRriuZ3uOEdC9ATUlW+c7ui2r4yE1ElpvKSqoJ8enYyHXC+zOTKuuv6iwO 8AAsolGYdpnHZZ2J2pb2+Iva1QAArEwFWXT/zSOcZsQ8P7h0BoM4c0QgJdkK6AIy m/dgpZzYADM/1baV9VT6qWTjXPAHmdFyoL2BeG8slEdDr+OQpfoE+tFKW5NTFfGA 1yoOZsXkiWvgzEAGpb7mnSjW2qCii20yhzkP27bqjMFA09PeMx2r6+c46va2syg0 LwWnkLJ1NY2r3LZ7GxcvOkE0ycJwMhPd1N/A/JQGXudH6tzavQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4zshdly+M2H4CbKXfDh6Ed4W1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTEyN2QwMTEtOTU2Yy0z NTQ5LWIzMWUtYTc5YWIzZGQzMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAI4a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFl4knxirjXRrvaxgbhSozLz3kAI0UVAT3OAxRVTGkYbPtT5Fyc jANtWjYzbZ7mSejpyHKawo+QQR1Kye9W+3RjRFfiuX+sUVFPBXN7p6RxsTkoeMr/ ZTD1zzo+oMJis9I7HIALcCOeuLiDWOP3VpTOOAYdxte5A2LXCPWz1aKtA8/J8i7v Ds9yGGZv7/y4BrJAkURFBPmZRhsY8RJFuaNsQ9sOGmA2vjc45SaUSJjK8GMSyX1v q3konQJ94zGVcer/wqe2rA6Q/UkUwcujkMebuaDSONYdA3eDLmiyri1yAgRfyI4n 0VZv/jRsVYttKUwo6lRpQtwYKELEd/QHMwA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:58 2025 by rpki-client