$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a763f6a5-a148-3afe-931e-9a7e5bdb43d3.roa File: a763f6a5-a148-3afe-931e-9a7e5bdb43d3.roa (raw, json) Hash identifier: Y2C/UeHtYaZnqUMJfjRfUXl1/pqARlebB5Qqo5Ts98o= Subject key identifier: 95:E5:61:53:66:19:8C:5A:0E:23:59:F9:35:E3:C9:86:E0:A4:49:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0207A35708777FFB878380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a763f6a5-a148-3afe-931e-9a7e5bdb43d3.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:868e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:07:a3:57:08:77:7f:fb:87:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=1271c3f6-a426-464f-aedc-59d14c4d4ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:44:96:07:42:74:dd:9c:0b:79:e2:7e:04:fd: e2:bd:0f:52:f5:88:05:be:93:84:b4:dc:1b:80:3c: 4e:49:7a:e7:e4:d4:2f:a3:9e:d8:a0:5d:27:6e:3b: 8d:d6:5d:e7:ff:5b:1c:bf:01:2d:af:4f:93:59:60: cc:4b:7f:3c:53:58:4b:50:09:da:72:ed:fe:6d:0a: 68:6b:5e:e5:c6:37:34:48:e1:eb:77:81:fe:2f:17: d9:12:21:41:53:e3:ce:c3:b8:e7:9c:08:7f:8a:a0: 32:f2:3a:50:10:d1:66:ae:cc:66:f2:04:0a:50:70: 6a:13:a9:7d:f9:58:75:90:f7:6c:43:98:76:d2:fd: 0a:b4:c1:7d:b2:2d:19:f8:0a:e6:f9:c4:63:d3:69: a4:33:53:0a:7b:96:b1:81:f0:45:a3:e1:25:9f:f4: e2:c7:bf:5c:6b:dd:a7:1b:46:06:4b:ac:1c:74:ca: 02:95:65:a7:dc:a9:e5:51:b4:23:fe:5d:6f:03:be: f0:41:50:c8:07:9b:e3:29:f7:45:cb:7b:fb:54:d8: c5:e3:b7:10:06:6a:fe:66:a7:53:6d:3f:e7:b6:eb: 73:9b:f3:9b:06:0b:bd:96:f4:b6:14:79:f2:84:48: ee:e3:4a:09:ea:59:44:b6:1d:df:bb:11:bc:f9:80: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:61:53:66:19:8C:5A:0E:23:59:F9:35:E3:C9:86:E0:A4:49:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a763f6a5-a148-3afe-931e-9a7e5bdb43d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:868e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c5:82:1a:27:f5:41:61:be:05:cf:a9:a7:75:19:ad:85:0e: 20:1e:92:d6:8e:0e:43:0c:a2:81:0c:c4:03:0c:c2:a6:ad:b9: a5:88:2e:a1:cb:d0:3d:5d:72:ba:45:c6:22:be:16:49:81:bd: fe:48:5a:e6:ea:17:67:20:45:44:41:0f:99:de:7b:e1:e2:74: f4:d2:a9:ad:a2:1b:98:fd:65:2a:3d:99:b5:fd:5f:3d:ab:6f: b5:dd:6d:4a:17:b0:ea:b6:77:d9:99:7d:00:dc:3b:d1:5c:bf: 13:e5:16:31:b6:e7:8f:a1:ed:54:05:4c:51:f5:06:61:9d:96: 33:24:c8:25:ac:ce:5e:65:59:a2:2d:45:b2:9f:00:6e:94:e0: 91:1f:24:3f:ab:b4:f6:31:7d:17:5a:1c:bb:aa:39:d5:48:4a: 94:1f:d6:46:9c:7c:dc:35:df:1d:43:7a:8c:92:83:b1:5e:68: 45:1e:01:1d:79:c0:b1:04:40:d0:62:bf:5e:8d:e0:37:30:ad: ea:3b:38:d8:7a:d9:b7:10:65:d7:d8:63:51:fa:bf:41:46:0f: e0:b8:c9:a5:dd:56:25:b5:9a:dc:7e:23:02:12:36:6c:e3:92: 15:3c:ee:46:e1:c9:ba:b2:66:85:da:eb:09:01:6f:15:35:b0: f9:e7:8f:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgejVwh3f/uHg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTI3MWMzZjYtYTQyNi00NjRmLWFlZGMtNTlkMTRjNGQ0ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ESWB0J03ZwLeeJ+BP3ivQ9S9YgFvpOEtNwb gDxOSXrn5NQvo57YoF0nbjuN1l3n/1scvwEtr0+TWWDMS388U1hLUAnacu3+bQpo a17lxjc0SOHrd4H+LxfZEiFBU+POw7jnnAh/iqAy8jpQENFmrsxm8gQKUHBqE6l9 +Vh1kPdsQ5h20v0KtMF9si0Z+Arm+cRj02mkM1MKe5axgfBFo+Eln/Tix79ca92n G0YGS6wcdMoClWWn3KnlUbQj/l1vA77wQVDIB5vjKfdFy3v7VNjF47cQBmr+ZqdT bT/ntutzm/ObBgu9lvS2FHnyhEju40oJ6llEth3fuxG8+YDCnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXlYVNmGYxaDiNZ+TXjyYbgpEk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTc2M2Y2YTUtYTE0OC0z YWZlLTkzMWUtOWE3ZTViZGI0M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLFghon9UFhvgXPqad1Ga2FDiAektaODkMMooEMxAMMwqatuaWI LqHL0D1dcrpFxiK+FkmBvf5IWubqF2cgRURBD5nee+HidPTSqa2iG5j9ZSo9mbX9 Xz2rb7XdbUoXsOq2d9mZfQDcO9FcvxPlFjG254+h7VQFTFH1BmGdljMkyCWszl5l WaItRbKfAG6U4JEfJD+rtPYxfRdaHLuqOdVISpQf1kacfNw13x1DeoySg7FeaEUe AR15wLEEQNBiv16N4Dcwreo7ONh62bcQZdfYY1H6v0FGD+C4yaXdViW1mtx+IwIS NmzjkhU87kbhybqyZoXa6wkBbxU1sPnnj1Q= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:21 2025 by rpki-client