$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cddcd1cd-58a4-34a2-a334-c38290a795de.roa File: cddcd1cd-58a4-34a2-a334-c38290a795de.roa (raw, json) Hash identifier: rYhpeMRPMr2ULDOyEDBkGhYdCqboOSuLTPUUPpEacLg= Subject key identifier: A0:81:B5:E1:C3:EE:FB:A4:5A:7E:DE:B7:7C:1E:91:15:3E:99:D2:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0206A4871DD882FD5F2800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cddcd1cd-58a4-34a2-a334-c38290a795de.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:8580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:06:a4:87:1d:d8:82:fd:5f:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=51038711-de1f-4af0-8656-b61e16d7a451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:93:5a:b0:84:83:c3:e5:c9:4a:7d:da:28: 13:70:4a:40:f9:71:a5:5e:a7:7f:31:05:0c:f1:2a: 8a:61:18:21:b8:a3:1b:e8:37:a3:c1:47:68:1d:87: a9:fa:94:ba:b3:87:a7:6d:d2:8f:10:4b:fb:89:ce: b8:e6:47:ca:06:c5:af:c4:97:b8:bf:e0:a5:fb:97: fc:20:1d:2d:88:b2:cc:30:47:ef:79:18:1c:94:3a: ab:65:28:57:cf:58:1d:aa:09:9a:fd:ac:19:c9:58: 0f:c1:c4:b9:1c:cb:8f:14:6e:c5:22:11:9d:94:a7: d8:f0:05:43:55:9b:b9:b6:ae:8f:3f:23:1d:7c:6f: 7b:49:14:c9:8b:14:99:8c:29:cb:8a:46:e9:2d:85: b1:20:9c:2a:ce:8f:92:8c:69:11:19:45:98:07:c7: 00:a1:5d:4d:91:8e:ea:98:71:93:70:3c:16:82:8a: 19:0b:19:fe:9f:6d:eb:fe:71:48:67:a4:62:dd:54: db:55:34:84:8a:e7:9f:2f:8d:d1:21:25:cc:8a:f4: 34:32:8c:41:54:04:27:85:eb:fb:c2:87:9e:21:c4: ed:6e:d0:6e:d7:23:42:c4:bd:25:9e:b2:aa:96:06: 64:8c:40:bd:93:26:ce:90:52:80:81:49:76:7b:3b: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:81:B5:E1:C3:EE:FB:A4:5A:7E:DE:B7:7C:1E:91:15:3E:99:D2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cddcd1cd-58a4-34a2-a334-c38290a795de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:02:13:b1:ee:0a:ec:52:d9:10:a2:bf:6c:a7:16:d5:3b:a0: 80:8b:35:2b:65:08:18:a9:9b:cd:d1:a1:88:c5:6e:a6:56:4c: e9:fa:09:8f:e7:12:7e:a2:b2:96:fe:7a:8f:20:f5:d1:fc:2b: ea:c4:ef:05:70:83:31:52:3e:9b:cd:30:a8:5e:34:77:ad:ec: dd:ac:fe:b1:12:eb:40:13:e9:c0:a9:ff:c5:e2:4a:6f:45:89: b6:30:81:3d:c7:60:c1:0d:bf:6b:4d:8c:9b:66:61:45:36:ea: 15:a1:ce:72:55:b2:fe:79:6e:06:c2:ef:9f:0f:21:91:49:52: e5:9a:ef:3f:e2:29:cd:33:12:53:19:6d:a5:73:48:a2:90:c0: 6d:07:f8:a5:25:84:08:15:4d:5d:5a:13:6c:8e:32:e5:8b:83: d4:1f:37:35:58:63:cd:22:98:36:fd:33:df:f8:9f:ef:f3:06: a3:b7:4f:fb:0b:06:01:0f:64:ac:08:df:bd:5d:de:95:d8:51: ca:41:6c:84:d3:62:8e:5d:c7:5f:4a:fd:f7:8c:d7:1f:4b:6a: 36:14:90:01:f0:5c:b7:b1:da:c6:37:a0:0e:30:e8:d5:9d:63: e6:79:87:90:9a:06:8b:cf:be:ba:7a:0e:b7:63:bb:99:15:06: e6:e2:2d:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgakhx3Ygv1fKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTEwMzg3MTEtZGUxZi00YWYwLTg2NTYtYjYxZTE2ZDdhNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY6TWrCEg8PlyUp92igTcEpA+XGlXqd/MQUM 8SqKYRghuKMb6DejwUdoHYep+pS6s4enbdKPEEv7ic645kfKBsWvxJe4v+Cl+5f8 IB0tiLLMMEfveRgclDqrZShXz1gdqgma/awZyVgPwcS5HMuPFG7FIhGdlKfY8AVD VZu5tq6PPyMdfG97SRTJixSZjCnLikbpLYWxIJwqzo+SjGkRGUWYB8cAoV1NkY7q mHGTcDwWgooZCxn+n23r/nFIZ6Ri3VTbVTSEiuefL43RISXMivQ0MoxBVAQnhev7 woeeIcTtbtBu1yNCxL0lnrKqlgZkjEC9kybOkFKAgUl2ezsEPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCBteHD7vukWn7et3wekRU+mdI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2RkY2QxY2QtNThhNC0z NGEyLWEzMzQtYzM4MjkwYTc5NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAIWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsCE7HuCuxS2RCiv2ynFtU7oICLNStlCBipm83RoYjFbqZWTOn6 CY/nEn6ispb+eo8g9dH8K+rE7wVwgzFSPpvNMKheNHet7N2s/rES60AT6cCp/8Xi Sm9FibYwgT3HYMENv2tNjJtmYUU26hWhznJVsv55bgbC758PIZFJUuWa7z/iKc0z ElMZbaVzSKKQwG0H+KUlhAgVTV1aE2yOMuWLg9QfNzVYY80imDb9M9/4n+/zBqO3 T/sLBgEPZKwI371d3pXYUcpBbITTYo5dx19K/feM1x9LajYUkAHwXLex2sY3oA4w 6NWdY+Z5h5CaBovPvrp6Drdju5kVBubiLU4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:05 2025 by rpki-client