$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d670e02d-98a5-36ce-84b7-53d6f5b8a6c7.roa File: d670e02d-98a5-36ce-84b7-53d6f5b8a6c7.roa (raw, json) Hash identifier: E900i046gUfiIiM7viSbhRK56iQEbj+paMRkM1H4m9I= Subject key identifier: 9B:16:32:0D:ED:CC:19:83:0D:CF:E8:15:9B:41:A2:70:F9:9F:8E:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0217BCEA66AAC054204E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d670e02d-98a5-36ce-84b7-53d6f5b8a6c7.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b6ee::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:17:bc:ea:66:aa:c0:54:20:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=23bed5c3-585a-43fe-84cb-457adf63934b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:bb:65:64:25:a4:c0:a1:11:e7:e5:ea:b5: 48:4c:ef:27:14:f4:1c:25:12:b6:ee:ac:fd:bd:d4: e7:1f:76:d1:81:09:e0:0a:6a:2a:d0:84:a8:e4:a1: dc:d3:04:46:b6:b3:1c:bd:a9:4b:ae:ba:eb:e7:eb: 19:03:be:1b:0b:6e:54:17:e1:45:ca:b0:fc:08:ac: e4:bc:c3:d1:84:88:e5:2d:08:8c:74:5c:f9:9f:c3: db:7a:61:42:1c:99:48:d2:a1:09:10:5f:d0:26:c9: 40:f3:1f:27:83:c7:c5:4e:1f:fb:0e:c5:af:fa:13: a3:7f:8f:b4:2e:07:9f:52:f7:ef:9d:f7:e1:96:94: 35:08:30:b5:c1:6b:ff:2c:7e:f6:81:cd:83:12:5c: 9e:8f:2b:7a:ed:90:ed:1d:0c:94:e1:29:5f:2f:ba: e5:10:41:91:e7:c3:cf:c7:e3:87:11:2d:6f:04:17: b4:f8:b4:63:47:56:94:cc:76:3b:c0:8d:e9:51:b4: 54:86:e4:2d:54:ca:cf:ec:ae:2b:d8:1d:d5:52:54: be:72:73:6c:55:a0:50:67:8e:0b:f3:65:c6:af:0d: 7a:0c:af:3a:c4:0a:fb:c2:21:5b:bc:d2:3f:37:36: 75:a3:b1:5b:8f:92:2e:45:9a:13:96:fd:97:dd:8b: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:16:32:0D:ED:CC:19:83:0D:CF:E8:15:9B:41:A2:70:F9:9F:8E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d670e02d-98a5-36ce-84b7-53d6f5b8a6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b6ee::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6b:d8:b5:f7:f0:bb:96:66:f8:33:9f:2d:2c:34:9f:f0:be: 24:84:88:a9:35:89:ba:bf:3b:c2:0c:3b:46:4e:aa:64:66:4d: 8d:5a:3e:17:c6:2b:16:95:69:3d:b6:3d:1f:a8:59:2f:98:96: c3:ce:53:a0:57:51:07:ee:e5:34:c0:d7:30:90:8c:2e:b4:d7: cd:f9:bb:09:34:a1:87:52:64:51:f0:c0:8c:68:57:68:68:e1: 05:de:b5:ba:4b:b5:77:cd:90:33:41:96:b5:a8:7c:97:d4:34: d6:b8:8f:48:43:d7:c0:f1:d7:72:05:99:c1:cf:52:ff:41:e9: 85:67:e1:f1:1f:fa:0b:35:67:01:32:9f:5e:a1:61:6f:4a:50: 3d:60:c7:c7:b9:5e:01:5c:86:b7:2a:62:47:d0:88:80:42:42: 15:83:28:e9:88:4c:d8:33:d8:d6:f7:89:6e:30:b4:40:8a:5c: 41:b2:ca:03:c3:e5:13:39:ae:51:a8:ac:65:45:af:31:d1:30: 69:62:0d:1e:0d:93:0e:83:ab:68:30:d1:bb:a6:90:94:f4:1f: 5b:b2:fb:67:64:4c:53:b9:46:6a:06:3d:53:68:7c:82:12:79: 9d:7f:fe:a8:28:00:1c:95:2b:4a:54:7c:ee:e5:44:fd:08:19: 1a:6a:2d:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhe86maqwFQgTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjNiZWQ1YzMtNTg1YS00M2ZlLTg0Y2ItNDU3YWRmNjM5MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwS7ZWQlpMChEefl6rVITO8nFPQcJRK27qz9 vdTnH3bRgQngCmoq0ISo5KHc0wRGtrMcvalLrrrr5+sZA74bC25UF+FFyrD8CKzk vMPRhIjlLQiMdFz5n8PbemFCHJlI0qEJEF/QJslA8x8ng8fFTh/7DsWv+hOjf4+0 LgefUvfvnffhlpQ1CDC1wWv/LH72gc2DElyejyt67ZDtHQyU4SlfL7rlEEGR58PP x+OHES1vBBe0+LRjR1aUzHY7wI3pUbRUhuQtVMrP7K4r2B3VUlS+cnNsVaBQZ44L 82XGrw16DK86xAr7wiFbvNI/NzZ1o7Fbj5IuRZoTlv2X3YufFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsWMg3tzBmDDc/oFZtBonD5n44LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDY3MGUwMmQtOThhNS0z NmNlLTg0YjctNTNkNmY1YjhhNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALbu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpr2LX38LuWZvgzny0sNJ/wviSEiKk1ibq/O8IMO0ZOqmRmTY1a PhfGKxaVaT22PR+oWS+YlsPOU6BXUQfu5TTA1zCQjC601835uwk0oYdSZFHwwIxo V2ho4QXetbpLtXfNkDNBlrWofJfUNNa4j0hD18Dx13IFmcHPUv9B6YVn4fEf+gs1 ZwEyn16hYW9KUD1gx8e5XgFchrcqYkfQiIBCQhWDKOmITNgz2Nb3iW4wtECKXEGy ygPD5RM5rlGorGVFrzHRMGliDR4Nkw6Dq2gw0bumkJT0H1uy+2dkTFO5RmoGPVNo fIISeZ1//qgoAByVK0pUfO7lRP0IGRpqLRE= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:45 2025 by rpki-client