$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa File: aae0b424-05af-34d8-b1f6-400926f7462b.roa (raw, json) Hash identifier: p3553b3Q+CGi4ZHh3ivT9eCRMhMdGAJoXxocPX/j2BE= Subject key identifier: 26:E0:6D:75:B6:D9:D5:0C:C4:BA:4A:5A:14:69:5A:0B:34:93:68:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F2C2C44009BAEC96BA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:3f00::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f2:c2:c4:40:09:ba:ec:96:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=bdb43a4f-63af-47e0-83c3-30446923b642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:a2:63:f5:34:ca:9b:57:06:79:fb:de:ae: ba:0d:ba:e5:b5:53:2c:a3:b1:92:e3:1f:21:c3:8d: 90:e7:35:53:58:e9:25:36:d3:e5:48:2b:96:9f:fc: df:51:7d:58:33:88:64:0d:c9:5b:b8:19:e7:38:88: 4a:32:25:ee:ed:8d:6a:a2:4b:7e:f5:55:ef:52:9e: a8:1d:a6:f8:31:5d:e4:15:2a:77:28:7c:f7:df:cb: 2c:f0:95:9b:eb:aa:90:fb:ee:95:73:05:d6:80:b2: 69:a6:b8:48:84:0a:98:77:c2:99:53:4c:0d:36:dc: a6:66:2e:45:02:1c:8a:fa:dd:f3:9b:f5:9b:31:fd: 46:1e:fa:68:53:df:50:f6:55:46:61:a7:2e:a2:a8: 0a:b8:68:a5:4f:ab:23:1c:15:9e:60:92:e9:76:54: ee:45:4a:b0:47:69:30:78:9b:9a:8f:80:17:25:09: 46:4a:00:ca:6b:54:af:f5:e8:0f:ed:29:5f:a5:9f: 24:a7:1b:e0:5a:e6:1a:a5:13:46:b5:72:f3:b8:89: 73:32:46:4a:83:2f:3e:8e:40:85:61:22:55:b4:00: e2:d0:69:7c:51:af:f3:72:1b:30:1f:48:79:dd:c6: 34:d3:a6:8f:b7:d4:91:fa:c1:ad:62:80:4d:6a:bb: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E0:6D:75:B6:D9:D5:0C:C4:BA:4A:5A:14:69:5A:0B:34:93:68:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aae0b424-05af-34d8-b1f6-400926f7462b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3f00::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:84:38:36:55:21:65:0b:41:cb:1e:4a:7c:9c:9e:0f:d1:d6: e7:ca:2f:4b:b8:1c:d8:85:33:33:f1:65:21:e7:a4:88:11:e2: 1a:3d:48:5b:ca:e1:50:3b:72:ee:36:9f:d3:fe:62:24:ce:88: 45:a9:f2:9a:40:c4:eb:44:cc:71:10:a3:72:b3:43:01:82:37: ed:7c:31:7d:b5:84:6b:63:3b:e8:52:e5:59:c8:99:c0:29:74: 2e:d6:5a:26:40:9f:9c:47:cd:b0:d0:fd:87:f1:33:c4:29:07: 4f:63:ae:54:59:ee:e3:fb:bd:9a:dd:eb:83:48:7a:e9:ef:76: 28:4f:e5:3a:6a:d6:0e:de:5e:19:2d:cb:5b:da:b8:af:c9:f6: 31:02:c2:2f:c8:d5:c7:ca:f5:27:19:59:45:b6:00:e8:ae:c7: 5b:d9:1b:a6:40:ca:a6:e2:82:b9:62:a9:35:83:b3:8a:12:8e: 78:d5:08:28:9c:82:74:44:94:ff:93:a3:78:d0:5d:e7:75:fb: 68:38:d1:fc:33:4a:02:66:f1:ad:db:33:db:db:91:85:8d:39: 7f:71:d6:e7:0a:6f:28:c1:0d:d3:c1:ed:7c:4d:1f:2f:c1:70: be:cd:a2:ae:4d:bd:e1:c1:d2:c4:01:f8:5d:41:ad:1c:27:62: 4d:51:7d:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfLCxEAJuuyWuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmRiNDNhNGYtNjNhZi00N2UwLTgzYzMtMzA0NDY5MjNiNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKmiY/U0yptXBnn73q66DbrltVMso7GS4x8h w42Q5zVTWOklNtPlSCuWn/zfUX1YM4hkDclbuBnnOIhKMiXu7Y1qokt+9VXvUp6o Hab4MV3kFSp3KHz338ss8JWb66qQ++6VcwXWgLJpprhIhAqYd8KZU0wNNtymZi5F AhyK+t3zm/WbMf1GHvpoU99Q9lVGYacuoqgKuGilT6sjHBWeYJLpdlTuRUqwR2kw eJuaj4AXJQlGSgDKa1Sv9egP7SlfpZ8kpxvgWuYapRNGtXLzuIlzMkZKgy8+jkCF YSJVtADi0Gl8Ua/zchswH0h53cY006aPt9SR+sGtYoBNaruGJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCbgbXW22dUMxLpKWhRpWgs0k2gDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFlMGI0MjQtMDVhZi0z NGQ4LWIxZjYtNDAwOTI2Zjc0NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAD8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOEODZVIWULQcseSnycng/R1ufKL0u4HNiFMzPxZSHnpIgR4ho9 SFvK4VA7cu42n9P+YiTOiEWp8ppAxOtEzHEQo3KzQwGCN+18MX21hGtjO+hS5VnI mcApdC7WWiZAn5xHzbDQ/YfxM8QpB09jrlRZ7uP7vZrd64NIeunvdihP5Tpq1g7e Xhkty1vauK/J9jECwi/I1cfK9ScZWUW2AOiux1vZG6ZAyqbigrliqTWDs4oSjnjV CCicgnRElP+To3jQXed1+2g40fwzSgJm8a3bM9vbkYWNOX9x1ucKbyjBDdPB7XxN Hy/BcL7Noq5NveHB0sQB+F1BrRwnYk1RfVI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:12 2025 by rpki-client