$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd1550f9-1385-3b90-b5ed-75de97afa8ec.roa File: cd1550f9-1385-3b90-b5ed-75de97afa8ec.roa (raw, json) Hash identifier: M34fU0/FovLlyU7asDLyGVwXYjuv7tatBG0mKajiViI= Subject key identifier: 42:A8:09:A0:F9:03:70:D8:51:C2:B1:58:33:28:40:64:8F:37:01:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F6A12B69984F78355C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd1550f9-1385-3b90-b5ed-75de97afa8ec.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:4d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f6:a1:2b:69:98:4f:78:35:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=98737a1d-474c-4b33-b82d-dcfbe6779d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9b:8f:35:e1:0c:62:e1:d2:2f:22:82:a6:fc: 56:a8:f3:90:47:53:4f:87:d1:fb:24:7e:59:a3:21: 64:35:20:31:39:98:78:1e:aa:bc:ac:a2:a0:1a:4d: d9:ac:b5:45:22:ad:98:6f:32:b8:8b:73:b9:82:b5: ce:c2:43:79:76:c4:16:83:e2:86:09:80:d3:66:e5: 9b:51:4c:a8:58:8b:65:fa:eb:ca:82:18:63:a1:97: 3d:ba:c6:5b:6a:fa:a7:90:23:c4:54:42:0d:59:10: 86:f9:9a:a8:cc:21:39:8a:6e:52:cc:06:59:af:19: 51:14:69:c7:9c:f0:f0:22:47:be:6d:20:4b:6c:4e: d7:59:f0:f1:40:b4:56:55:ab:6f:b7:43:21:d6:93: 0d:e6:bb:e9:3b:10:e7:e0:c9:82:72:2d:ea:f8:85: 04:40:c7:b0:1a:7b:b9:3b:03:37:0f:f2:19:6d:70: ee:7b:72:9f:22:33:42:ff:1d:b8:7e:15:58:7b:b2: 85:47:a1:95:0c:e4:73:8f:51:4e:4e:68:95:1c:64: 14:9d:76:b6:fd:56:89:0c:9e:1b:90:fd:f1:ee:d0: ea:3c:8d:ee:65:80:9e:76:e7:88:7d:0c:33:8d:bc: 45:93:e2:a6:14:5d:a7:0c:0e:64:ff:e9:7c:8c:25: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:09:A0:F9:03:70:D8:51:C2:B1:58:33:28:40:64:8F:37:01:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd1550f9-1385-3b90-b5ed-75de97afa8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:73:f8:ef:0d:d2:c0:cb:8a:d6:36:9e:3e:60:41:01:dc:87: 86:58:2e:6d:0e:40:c3:ec:70:2f:9c:67:b7:c6:0c:6e:0b:6b: 74:0d:86:bf:d7:a1:5d:27:6b:e7:31:b9:cd:a9:bd:b4:ad:b6: ed:84:ea:ee:97:3b:6e:48:db:58:6b:51:c3:c7:a6:03:8d:9e: a5:36:02:83:1b:c4:b2:af:b0:82:50:40:c4:9f:22:15:ae:92: fb:6d:4d:da:72:de:fa:d8:09:42:43:60:f7:11:de:4d:de:eb: 2d:c5:b5:12:7c:6a:96:28:71:a7:30:78:a3:5d:b7:ff:bf:c0: f8:8d:04:d2:b5:39:4b:d1:99:8b:3f:10:41:d1:ea:db:54:98: bd:a7:f9:c3:cd:ce:e8:8e:92:27:96:41:6b:cd:cc:5e:4a:e1: f8:db:9c:db:13:61:25:cb:39:9e:40:74:0e:d3:65:71:94:57: 1f:fb:f9:76:fc:d3:df:c4:10:59:d6:c1:87:64:30:4f:01:22: 63:83:af:87:dd:f1:ac:83:4a:95:60:36:ca:7d:cb:a4:47:4f: 18:98:d7:c0:eb:eb:5d:fa:f4:99:bc:e8:b0:78:18:0e:fe:ad: 66:d2:80:a4:9a:02:1f:de:d2:4e:5b:9d:a6:46:46:23:bd:34: fd:a2:bd:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfahK2mYT3g1XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTg3MzdhMWQtNDc0Yy00YjMzLWI4MmQtZGNmYmU2Nzc5ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZuPNeEMYuHSLyKCpvxWqPOQR1NPh9H7JH5Z oyFkNSAxOZh4Hqq8rKKgGk3ZrLVFIq2YbzK4i3O5grXOwkN5dsQWg+KGCYDTZuWb UUyoWItl+uvKghhjoZc9usZbavqnkCPEVEINWRCG+ZqozCE5im5SzAZZrxlRFGnH nPDwIke+bSBLbE7XWfDxQLRWVatvt0Mh1pMN5rvpOxDn4MmCci3q+IUEQMewGnu5 OwM3D/IZbXDue3KfIjNC/x24fhVYe7KFR6GVDORzj1FOTmiVHGQUnXa2/VaJDJ4b kP3x7tDqPI3uZYCedueIfQwzjbxFk+KmFF2nDA5k/+l8jCUwywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKoCaD5A3DYUcKxWDMoQGSPNwFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QxNTUwZjktMTM4NS0z YjkwLWI1ZWQtNzVkZTk3YWZhOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAE2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtz+O8N0sDLitY2nj5gQQHch4ZYLm0OQMPscC+cZ7fGDG4La3QN hr/XoV0na+cxuc2pvbSttu2E6u6XO25I21hrUcPHpgONnqU2AoMbxLKvsIJQQMSf IhWukvttTdpy3vrYCUJDYPcR3k3e6y3FtRJ8apYocacweKNdt/+/wPiNBNK1OUvR mYs/EEHR6ttUmL2n+cPNzuiOkieWQWvNzF5K4fjbnNsTYSXLOZ5AdA7TZXGUVx/7 +Xb809/EEFnWwYdkME8BImODr4fd8ayDSpVgNsp9y6RHTxiY18Dr61369Jm86LB4 GA7+rWbSgKSaAh/e0k5bnaZGRiO9NP2ivZ4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:25 2025 by rpki-client