$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae573903-82e1-348a-938b-1dfc46efa8f1.roa File: ae573903-82e1-348a-938b-1dfc46efa8f1.roa (raw, json) Hash identifier: moARE0sgQFq6MCZaDkhy+yDwjgiIHA2pqitYo8X6o9w= Subject key identifier: 73:E0:68:54:B7:DB:5E:E4:B8:26:08:4B:C7:EA:86:17:EE:E2:0E:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F021509310223329162B900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae573903-82e1-348a-938b-1dfc46efa8f1.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:af28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:15:09:31:02:23:32:91:62:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=488ee416-97e5-40ec-b85e-d1a33e373ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:6f:4b:d4:a6:e6:c8:74:3c:7e:73:ea:d0: bf:ed:55:ba:70:b3:82:88:b0:18:7e:b2:27:aa:02: 2b:17:6a:fb:48:c2:36:65:71:c8:f0:88:b7:c3:de: c4:99:02:e7:3b:72:0a:dc:06:3e:61:20:e1:fc:d6: 16:c1:0c:ab:f8:4e:3b:30:6f:7d:67:cf:5b:4f:32: c6:09:d4:20:93:00:d6:6c:1f:d1:76:5e:bd:35:98: 9d:ee:1d:91:b0:dc:97:95:f3:71:4c:90:04:53:60: a4:ea:46:02:ed:28:51:8d:b4:3d:7c:c7:18:7d:3e: 5f:e1:90:12:c9:bc:b3:1f:03:2a:6c:13:12:a5:20: 90:56:0f:05:2e:09:db:cb:41:0e:a9:37:95:7a:39: e8:b6:dc:a6:4b:91:7d:4a:55:0d:2b:f1:77:4f:7c: bb:68:1e:56:f2:67:1f:8a:29:6b:9b:95:ac:86:3e: a7:5c:ef:a2:bd:ad:f3:c4:ce:3e:b4:e5:36:bd:00: 2c:9b:e4:d7:42:34:eb:f1:15:48:9f:ea:72:ad:76: ab:16:be:fb:bc:d7:72:67:ad:20:88:92:d0:7c:d3: 14:e4:9f:c8:6f:c8:61:aa:41:14:89:ba:f4:3f:7f: ff:b4:cc:5d:2e:f8:9b:ac:5f:c2:0b:55:2c:7e:e1: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E0:68:54:B7:DB:5E:E4:B8:26:08:4B:C7:EA:86:17:EE:E2:0E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae573903-82e1-348a-938b-1dfc46efa8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:af28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bd:80:d6:8f:3a:7f:e1:57:4b:53:42:ec:47:9a:6f:a4:ef: a8:1c:f7:6f:3b:6f:95:f2:84:30:04:67:9f:99:df:3b:2d:fa: 0e:30:02:09:76:58:68:62:25:47:03:04:3b:44:55:c3:a7:fd: 06:f6:11:a9:f7:ca:f1:a3:9c:af:e7:02:7b:28:a7:1a:2c:ed: 78:38:57:c4:b3:5e:09:df:21:ce:7b:e4:a8:aa:64:07:7a:f9: ac:4f:19:e8:9d:36:4e:06:73:8e:5f:34:8c:c6:b6:78:13:26: a1:82:03:9d:f5:af:80:22:06:3b:8a:db:fc:99:ab:3e:25:13: a0:f1:22:95:4c:7d:24:d8:c7:8f:37:56:22:48:98:e9:2a:34: 21:68:26:2a:0c:1b:83:64:cf:22:f4:06:e2:7f:19:77:da:b3: 74:1b:05:a8:70:3c:12:be:db:03:e7:f2:8d:76:51:dd:72:b9: ee:5c:63:2e:4b:70:6a:ce:4b:fc:41:3c:a3:c1:1d:6a:d7:f7: d2:41:f1:51:9d:ea:e3:b9:fe:e2:53:11:cb:96:b5:aa:1c:67: 08:fe:06:d5:45:f9:e9:51:e3:8a:9c:3a:dd:58:be:b9:e8:7c: 35:03:82:02:f2:3d:bd:e0:e8:c9:b9:5d:51:14:13:f7:bb:a3: d6:dd:e3:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhUJMQIjMpFiuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDg4ZWU0MTYtOTdlNS00MGVjLWI4NWUtZDFhMzNlMzczZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoBvS9Sm5sh0PH5z6tC/7VW6cLOCiLAYfrIn qgIrF2r7SMI2ZXHI8Ii3w97EmQLnO3IK3AY+YSDh/NYWwQyr+E47MG99Z89bTzLG CdQgkwDWbB/Rdl69NZid7h2RsNyXlfNxTJAEU2Ck6kYC7ShRjbQ9fMcYfT5f4ZAS ybyzHwMqbBMSpSCQVg8FLgnby0EOqTeVejnottymS5F9SlUNK/F3T3y7aB5W8mcf iilrm5Wshj6nXO+iva3zxM4+tOU2vQAsm+TXQjTr8RVIn+pyrXarFr77vNdyZ60g iJLQfNMU5J/Ib8hhqkEUibr0P3//tMxdLvibrF/CC1UsfuGFVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHPgaFS3217kuCYIS8fqhhfu4g7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU1NzM5MDMtODJlMS0z NDhhLTkzOGItMWRmYzQ2ZWZhOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAK8o MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKi9gNaPOn/hV0tTQuxHmm+k76gc9287b5XyhDAEZ5+Z3zst+g4w Agl2WGhiJUcDBDtEVcOn/Qb2Ean3yvGjnK/nAnsopxos7Xg4V8SzXgnfIc575Kiq ZAd6+axPGeidNk4Gc45fNIzGtngTJqGCA531r4AiBjuK2/yZqz4lE6DxIpVMfSTY x483ViJImOkqNCFoJioMG4NkzyL0BuJ/GXfas3QbBahwPBK+2wPn8o12Ud1yue5c Yy5LcGrOS/xBPKPBHWrX99JB8VGd6uO5/uJTEcuWtaocZwj+BtVF+elR44qcOt1Y vrnofDUDggLyPb3g6Mm5XVEUE/e7o9bd43A= -----END CERTIFICATE-----Generated at Thu Oct 16 01:37:20 2025 by rpki-client