$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8840058-6527-3a6c-84de-e32165ae37d8.roa File: a8840058-6527-3a6c-84de-e32165ae37d8.roa (raw, json) Hash identifier: NyXZVgkjsNGYqvOsOfDEaR7VqmOT5ygBKrL+AxT9u5g= Subject key identifier: 90:5D:3A:F6:B3:97:DD:13:0C:DB:F4:38:94:1E:16:9F:4B:88:2E:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01E8863A7AE851BE465800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8840058-6527-3a6c-84de-e32165ae37d8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:270a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:e8:86:3a:7a:e8:51:be:46:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a6efaed3-db82-4bbb-8064-87f9e2543c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:b9:27:e4:77:5c:6d:ac:5f:24:22:4e:bc: e6:21:b4:71:82:2a:a2:49:fc:5d:9d:64:f8:1b:89: 57:d3:bc:aa:e8:f0:9a:04:f7:65:95:c4:71:4b:c6: a8:71:bf:c4:6d:b2:fb:6e:08:9f:f9:09:12:63:b1: ad:5a:59:0e:21:b2:4e:8f:a0:f2:9c:6b:4c:8a:f4: 45:ec:08:69:67:21:7d:4c:ad:8a:44:0c:8c:1b:c1: 08:87:22:f9:08:7f:22:4f:24:ca:c4:d6:52:91:a8: c5:b9:aa:14:e9:1b:9f:20:51:4c:fe:7c:1b:fa:19: 79:8c:c4:81:18:85:82:79:d9:4e:b1:19:68:e8:92: a4:9d:11:0c:2d:48:22:42:7b:ed:10:0c:5c:15:c5: 28:95:c9:ab:da:1d:f9:c3:06:30:4e:10:9b:ce:97: be:b0:09:3d:c8:10:33:3d:97:1a:96:66:5e:b2:9f: df:ba:88:da:8b:cd:80:2c:28:ee:ea:d8:bc:b1:0c: 08:9a:11:e3:28:b9:d9:db:3d:e3:3d:76:41:85:a1: a2:59:bb:da:60:4d:69:3c:44:6b:99:7f:8e:53:2a: 72:d6:be:e6:9c:c4:84:3c:6f:f9:a5:5f:59:5d:d0: 69:a6:94:77:f2:49:f2:15:14:65:ed:88:a0:6e:dd: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:3A:F6:B3:97:DD:13:0C:DB:F4:38:94:1E:16:9F:4B:88:2E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8840058-6527-3a6c-84de-e32165ae37d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:270a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d6:07:63:7d:da:1a:63:86:bb:53:01:46:d8:6c:91:9d:51: d9:76:2c:3e:4c:4f:25:1e:b0:35:16:e4:0a:25:bc:f4:d1:90: eb:0c:b8:da:d1:8f:45:1f:6e:3c:00:8c:07:78:d3:10:2e:ba: b2:5e:5a:95:4c:89:2e:fa:30:1f:72:11:f4:3c:f1:9a:3d:be: 33:18:04:31:68:88:fe:91:04:ae:2a:44:7a:66:46:0b:9e:d0: 95:b9:5d:9e:70:da:f2:16:35:00:ad:5f:62:81:f5:65:ea:b5: 5d:b1:3d:3d:c3:fb:79:93:3c:df:0a:87:83:56:c4:13:82:00: 40:55:14:3e:5c:3e:c8:ac:f2:96:e8:ee:19:c2:91:f0:62:5c: d7:91:5d:24:eb:1f:5b:11:65:dc:7c:ac:e8:83:66:ce:a1:fa: 41:4a:83:b2:cf:3b:a8:73:51:ef:03:04:88:00:f1:e9:e7:41: a6:73:84:bc:b7:c9:b1:84:27:c1:9a:55:af:b9:7e:a2:53:b0: f4:7f:1c:f5:d5:e2:a3:36:6e:eb:99:c2:82:8d:25:2e:66:59: e7:c1:5e:59:33:49:0b:5f:71:4a:40:d2:44:bc:4f:8f:ec:c6: 71:42:81:38:e9:56:d9:39:1c:13:e2:b7:44:73:02:07:66:f6: 47:34:f4:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeiGOnroUb5GWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTZlZmFlZDMtZGI4Mi00YmJiLTgwNjQtODdmOWUyNTQzYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrS5J+R3XG2sXyQiTrzmIbRxgiqiSfxdnWT4 G4lX07yq6PCaBPdllcRxS8aocb/EbbL7bgif+QkSY7GtWlkOIbJOj6DynGtMivRF 7AhpZyF9TK2KRAyMG8EIhyL5CH8iTyTKxNZSkajFuaoU6RufIFFM/nwb+hl5jMSB GIWCedlOsRlo6JKknREMLUgiQnvtEAxcFcUolcmr2h35wwYwThCbzpe+sAk9yBAz PZcalmZesp/fuojai82ALCju6ti8sQwImhHjKLnZ2z3jPXZBhaGiWbvaYE1pPERr mX+OUypy1r7mnMSEPG/5pV9ZXdBpppR38knyFRRl7Yigbt2BXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBdOvazl90TDNv0OJQeFp9LiC5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTg4NDAwNTgtNjUyNy0z YTZjLTg0ZGUtZTMyMTY1YWUzN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIACcK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHWB2N92hpjhrtTAUbYbJGdUdl2LD5MTyUesDUW5AolvPTRkOsM uNrRj0UfbjwAjAd40xAuurJeWpVMiS76MB9yEfQ88Zo9vjMYBDFoiP6RBK4qRHpm Rgue0JW5XZ5w2vIWNQCtX2KB9WXqtV2xPT3D+3mTPN8Kh4NWxBOCAEBVFD5cPsis 8pbo7hnCkfBiXNeRXSTrH1sRZdx8rOiDZs6h+kFKg7LPO6hzUe8DBIgA8ennQaZz hLy3ybGEJ8GaVa+5fqJTsPR/HPXV4qM2buuZwoKNJS5mWefBXlkzSQtfcUpA0kS8 T4/sxnFCgTjpVtk5HBPit0RzAgdm9kc09Hk= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:48 2025 by rpki-client