$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a59c8e05-c385-3427-90ab-5d5497388cb4.roa File: a59c8e05-c385-3427-90ab-5d5497388cb4.roa (raw, json) Hash identifier: WQKnfgfq4NeGOhm+EDxog7pG5rb9kYg5xlhdhME7l3M= Subject key identifier: DE:86:4A:E9:17:65:2E:DA:A6:17:CB:8E:B6:AD:FB:1C:9B:FD:B3:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02233D9EC30721F9D3B800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a59c8e05-c385-3427-90ab-5d5497388cb4.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:a28::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:23:3d:9e:c3:07:21:f9:d3:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=9dbd1ba4-0c46-42d9-a308-328a0e90625a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:e0:d1:ff:9e:59:04:bc:f7:bd:14:b1:0b: 3f:33:d5:03:e1:85:ec:b4:38:21:1b:84:36:0a:15: 6d:18:06:12:3d:16:b3:82:21:c7:8f:02:c6:82:f8: 91:3d:4c:90:1a:e9:ef:4e:ea:7c:a4:e2:22:3f:8b: 05:66:d8:fc:b3:f2:f9:2d:d4:ab:2c:53:43:3a:e3: 7c:ca:ec:27:88:92:37:25:6a:9b:23:a2:e0:18:67: 39:32:f7:e1:41:c8:59:46:d0:6c:50:d0:7f:c6:00: ea:8a:8c:c1:36:4e:0e:fa:52:22:43:56:6c:64:c4: 04:bf:6d:fd:47:32:a0:d9:b3:35:89:54:ef:5f:5d: 0f:89:42:6c:42:52:cc:b8:dc:1a:05:e7:22:ad:b0: 4c:41:4b:ab:4c:a1:87:72:79:02:86:71:91:cb:89: d4:6d:4f:db:e3:77:38:e4:43:54:b6:bb:11:aa:d5: b7:df:18:5d:fd:15:2c:b9:54:b6:01:4f:0a:36:77: 64:ce:ff:6d:fd:8e:d5:d0:ca:7d:87:ca:fa:98:46: 0e:c8:16:4c:8e:1a:6e:08:20:97:53:34:10:c6:1d: 28:72:61:ea:42:7d:07:09:ca:70:53:b3:07:77:67: 35:83:c9:0c:ce:f4:70:18:5c:8c:2a:d1:73:04:c6: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:4A:E9:17:65:2E:DA:A6:17:CB:8E:B6:AD:FB:1C:9B:FD:B3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a59c8e05-c385-3427-90ab-5d5497388cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:a28::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:4f:aa:fb:65:f5:42:04:84:80:af:96:39:de:23:03:87: 97:64:12:90:b0:2c:6d:24:5b:bf:7c:46:95:ae:0f:fa:78:8c: bf:df:ec:4c:35:45:80:49:58:dc:85:fb:34:6e:a2:bc:c0:35: a6:ed:e7:13:37:d9:7c:32:fb:f6:98:9f:53:38:35:96:bb:aa: d7:c2:ac:e1:c0:d1:f0:72:1a:4f:ae:58:6a:3f:05:db:6d:17: 20:1b:d9:01:51:7c:52:64:ba:e4:92:ff:1c:f8:3f:c0:d3:79: e0:fe:ae:5f:a6:d2:8e:78:e9:e1:17:3c:fb:b5:36:fd:eb:85: 3b:4f:f2:55:c6:53:99:04:de:4f:8c:90:ba:e3:a3:1d:55:1b: 17:db:1a:ce:cd:31:73:5d:71:d3:3a:7c:94:dd:72:8a:27:d4: 58:89:a4:03:a8:d7:a3:6f:48:43:0b:bf:05:df:c4:2d:b1:6c: 75:95:2f:e3:88:ed:cd:c7:57:43:70:39:85:ff:ea:24:fa:b5: 80:df:cf:50:14:c0:99:9b:8a:1d:d9:95:fa:06:bb:f2:37:fe: 3b:20:29:34:aa:bc:e5:28:69:10:2a:8f:d9:8c:65:77:d5:a7: 9e:c8:a0:7b:39:c8:3b:cd:89:1a:46:4d:c6:63:2d:ad:1e:d7: 7c:c3:76:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiM9nsMHIfnTuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OWRiZDFiYTQtMGM0Ni00MmQ5LWEzMDgtMzI4YTBlOTA2MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkrg0f+eWQS8970UsQs/M9UD4YXstDghG4Q2 ChVtGAYSPRazgiHHjwLGgviRPUyQGunvTup8pOIiP4sFZtj8s/L5LdSrLFNDOuN8 yuwniJI3JWqbI6LgGGc5MvfhQchZRtBsUNB/xgDqiozBNk4O+lIiQ1ZsZMQEv239 RzKg2bM1iVTvX10PiUJsQlLMuNwaBecirbBMQUurTKGHcnkChnGRy4nUbU/b43c4 5ENUtrsRqtW33xhd/RUsuVS2AU8KNndkzv9t/Y7V0Mp9h8r6mEYOyBZMjhpuCCCX UzQQxh0ocmHqQn0HCcpwU7MHd2c1g8kMzvRwGFyMKtFzBMa/TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6GSukXZS7aphfLjrat+xyb/bPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU5YzhlMDUtYzM4NS0z NDI3LTkwYWItNWQ1NDk3Mzg4Y2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgoo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTfT6r7ZfVCBISAr5Y53iMDh5dkEpCwLG0kW798RpWuD/p4jL/f 7Ew1RYBJWNyF+zRuorzANabt5xM32Xwy+/aYn1M4NZa7qtfCrOHA0fByGk+uWGo/ BdttFyAb2QFRfFJkuuSS/xz4P8DTeeD+rl+m0o546eEXPPu1Nv3rhTtP8lXGU5kE 3k+MkLrjox1VGxfbGs7NMXNdcdM6fJTdcoon1FiJpAOo16NvSEMLvwXfxC2xbHWV L+OI7c3HV0NwOYX/6iT6tYDfz1AUwJmbih3ZlfoGu/I3/jsgKTSqvOUoaRAqj9mM ZXfVp57IoHs5yDvNiRpGTcZjLa0e13zDdlw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:46 2025 by rpki-client