$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a713949a-367c-3209-b686-2e830a789fa2.roa File: a713949a-367c-3209-b686-2e830a789fa2.roa (raw, json) Hash identifier: lkU+rFAWELzwnCBjv4LCtGY9qgAGAUWtk1UawV6jkTU= Subject key identifier: E0:CE:CA:D8:BD:2A:D1:99:25:4F:D7:3E:39:A7:00:D3:95:98:3B:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02160BC610EC9EA7B16840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a713949a-367c-3209-b686-2e830a789fa2.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b480::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:16:0b:c6:10:ec:9e:a7:b1:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f85e0b5a-c75a-4f6e-a226-08edf9fca380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:d5:bc:57:4e:8b:65:d8:37:d2:e4:fd:c6: 63:46:7d:4c:e0:c2:9d:7a:ec:62:89:56:fd:8a:f6: 0b:29:b3:2e:1a:5a:63:73:e3:dd:a3:54:e1:bc:33: a9:a8:9c:55:27:a1:bb:af:b6:0d:b3:2e:a7:46:42: 3b:90:5d:f1:3c:fb:45:eb:35:f3:97:ed:91:01:80: e7:7c:c0:ff:8a:2f:d5:3a:eb:32:c5:c1:31:d2:6e: 2c:0c:7b:09:17:df:a9:b7:4f:52:80:4e:9e:88:1a: e0:0d:ac:03:b3:8c:44:79:3e:56:d8:ed:8f:04:fc: 5c:5b:55:06:08:3f:0e:e2:56:75:03:bf:d5:73:40: d1:aa:12:c8:64:33:49:6e:66:1d:16:b9:70:78:3a: 8f:2e:c8:59:13:19:0c:fb:8d:7b:a9:89:ff:56:a6: 7a:5a:10:ac:f3:3c:1e:fb:da:ed:35:9f:33:10:b5: 8e:7c:c9:74:ba:29:75:47:fd:66:24:3e:20:5f:68: ab:52:a0:e3:87:c8:25:9a:6e:a0:2b:6e:7b:0c:3f: a0:50:3e:74:16:1b:c4:f4:0e:fb:79:f9:ab:05:63: 09:6d:a8:70:88:38:79:00:a4:80:ea:64:4f:e0:92: 7b:fb:79:92:d5:ae:48:f7:11:5b:f7:3a:42:cf:40: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CE:CA:D8:BD:2A:D1:99:25:4F:D7:3E:39:A7:00:D3:95:98:3B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a713949a-367c-3209-b686-2e830a789fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b480::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7a:bf:36:49:ce:d3:d5:57:3d:32:ac:0b:fc:65:a5:f6:3f: 5d:62:29:c4:e3:b4:d6:63:2d:48:d0:28:8d:25:cd:2e:98:4f: 03:e7:8d:17:a7:c8:51:16:1f:4c:8b:17:1a:86:94:ac:40:d6: c6:a6:bd:c7:0b:a4:74:1a:90:29:8e:74:9b:7c:bb:bd:7e:1a: 01:26:e9:fc:bf:09:a0:7e:a2:f8:52:bd:85:08:11:0f:95:87: 96:4b:99:00:ce:49:ea:5b:46:b0:b7:64:5f:29:63:45:8b:15: bf:da:57:34:e4:d1:18:f3:fc:79:85:43:e5:07:d7:09:c7:03: 25:e8:be:74:45:8c:e0:de:06:21:c8:85:21:59:34:5b:d7:71: ff:27:01:9f:8c:b3:88:81:1c:fb:67:a2:e4:78:f0:5c:09:c7: 89:7c:37:60:0b:94:0d:7a:9c:32:31:96:b5:a3:24:37:f6:28: df:a8:1c:7e:af:b0:c8:ea:e3:ed:98:9e:bb:f2:e8:03:ae:e0: 9c:bb:e4:70:c1:50:f9:f5:67:93:31:31:50:0f:1a:d5:07:08: 41:8b:4a:35:54:57:ca:4a:58:75:43:b4:fe:f9:cd:c0:72:37: cc:45:fc:4a:94:66:eb:38:86:56:6f:cc:88:f0:52:43:7f:43: e0:8d:a2:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhYLxhDsnqexaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Zjg1ZTBiNWEtYzc1YS00ZjZlLWEyMjYtMDhlZGY5ZmNhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+PVvFdOi2XYN9Lk/cZjRn1M4MKdeuxiiVb9 ivYLKbMuGlpjc+Pdo1ThvDOpqJxVJ6G7r7YNsy6nRkI7kF3xPPtF6zXzl+2RAYDn fMD/ii/VOusyxcEx0m4sDHsJF9+pt09SgE6eiBrgDawDs4xEeT5W2O2PBPxcW1UG CD8O4lZ1A7/Vc0DRqhLIZDNJbmYdFrlweDqPLshZExkM+417qYn/VqZ6WhCs8zwe +9rtNZ8zELWOfMl0uil1R/1mJD4gX2irUqDjh8glmm6gK257DD+gUD50FhvE9A77 efmrBWMJbahwiDh5AKSA6mRP4JJ7+3mS1a5I9xFb9zpCz0Dc/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFODOyti9KtGZJU/XPjmnANOVmDt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTcxMzk0OWEtMzY3Yy0z MjA5LWI2ODYtMmU4MzBhNzg5ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIALSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACF6vzZJztPVVz0yrAv8ZaX2P11iKcTjtNZjLUjQKI0lzS6YTwPn jRenyFEWH0yLFxqGlKxA1samvccLpHQakCmOdJt8u71+GgEm6fy/CaB+ovhSvYUI EQ+Vh5ZLmQDOSepbRrC3ZF8pY0WLFb/aVzTk0Rjz/HmFQ+UH1wnHAyXovnRFjODe BiHIhSFZNFvXcf8nAZ+Ms4iBHPtnouR48FwJx4l8N2ALlA16nDIxlrWjJDf2KN+o HH6vsMjq4+2Ynrvy6AOu4Jy75HDBUPn1Z5MxMVAPGtUHCEGLSjVUV8pKWHVDtP75 zcByN8xF/EqUZus4hlZvzIjwUkN/Q+CNovM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:07 2025 by rpki-client