$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc14535c-d355-37e5-8251-6a65b048ed8d.roa File: dc14535c-d355-37e5-8251-6a65b048ed8d.roa (raw, json) Hash identifier: 3WYT4RSflx0vPb2VyZ2L4E1MyxjXt/O2rhhiwKQUZuk= Subject key identifier: BF:A0:BA:A7:93:1D:63:99:03:DE:99:0E:3B:7F:EE:E1:CC:D7:AA:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F021E96996FC770C6164680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc14535c-d355-37e5-8251-6a65b048ed8d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:1e:96:99:6f:c7:70:c6:16:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=bd9836a9-68a2-4a64-83bf-c8ad103c7c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:54:6c:98:7a:18:a0:b2:c4:95:a6:5e:77: 48:ac:ff:e2:4c:27:ed:dc:50:a7:63:a3:e6:0a:82: c2:e7:eb:5e:49:82:81:db:f8:83:c8:fc:1b:05:86: 0c:f4:1c:1e:7d:cb:1d:98:53:ab:41:6b:ab:59:43: a5:d1:c1:26:34:c0:88:b6:9f:94:dd:b7:20:64:36: 1f:23:36:5d:06:5a:8f:6b:64:a5:bc:4d:5b:98:48: 81:fb:7b:1f:f2:4e:4f:a9:37:84:45:d9:d3:4e:1b: c7:29:0f:ed:13:11:3c:bf:41:40:ab:15:60:a5:e0: 74:50:06:03:eb:73:9b:73:d7:4f:9c:57:31:1c:65: 5e:be:95:ac:b0:20:28:30:2c:22:1c:df:22:cf:11: 3d:a7:a4:3c:a9:32:45:74:fd:1b:bf:a6:6b:31:8a: c1:a7:83:b7:d2:d5:5d:73:c0:d8:5b:5d:71:49:4c: de:b8:71:b0:b2:e1:44:26:23:b5:0b:60:07:40:f4: f2:c3:fb:9f:ca:62:86:ab:a2:cd:d4:78:2b:9c:45: cf:aa:50:41:7c:b4:8d:c7:25:1c:a4:36:e3:8d:f0: 8f:3f:27:7c:d0:d9:96:b2:7f:73:0f:f0:46:03:22: d8:d6:4f:78:81:1b:e8:c6:3d:b5:79:81:0e:25:cd: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:BA:A7:93:1D:63:99:03:DE:99:0E:3B:7F:EE:E1:CC:D7:AA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc14535c-d355-37e5-8251-6a65b048ed8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:21:25:2a:0a:df:6c:f9:91:9d:0c:ed:cc:68:c4:d3:72:7b: f9:15:14:3e:dc:9b:f4:c4:10:0b:7c:c2:e3:3f:60:57:18:c3: 24:5a:93:62:94:f6:15:60:ae:7c:ab:f5:9b:08:97:18:24:4a: 56:1b:5b:7f:fa:11:67:c6:f3:58:6b:b4:be:40:b7:a1:d7:60: 23:ca:98:c9:4d:7e:c6:97:cd:ce:ce:e0:9f:85:34:c2:d3:6b: 8f:9d:73:c2:2f:39:a3:2e:30:74:9f:75:83:9d:29:bf:19:bf: a3:8b:47:75:ea:e2:ab:08:6d:b5:37:17:ce:51:b8:d7:ff:ac: fb:76:f8:1e:1a:af:a6:7f:07:8a:6b:4b:ac:56:8a:bb:03:c3: 6a:d2:a8:84:8b:5d:d8:b6:e7:47:7e:b4:4b:9f:e3:24:8b:a8: b7:10:e8:9b:46:ce:d8:35:4f:c2:da:91:28:0f:60:5f:53:45: 6e:5c:01:c1:e2:3d:0b:98:92:22:fb:37:77:69:70:63:c0:a2: 6a:09:7f:45:75:86:66:e4:9c:2e:ed:b9:23:ed:38:11:b4:b2: 30:da:d1:fc:1c:8f:8d:0a:e1:64:0b:22:74:9a:af:45:20:ca: 87:a6:87:e0:0e:5b:eb:43:06:e9:19:d7:75:87:3f:72:00:8b: e6:69:a2:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAh6WmW/HcMYWRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmQ5ODM2YTktNjhhMi00YTY0LTgzYmYtYzhhZDEwM2M3YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV5UbJh6GKCyxJWmXndIrP/iTCft3FCnY6Pm CoLC5+teSYKB2/iDyPwbBYYM9BwefcsdmFOrQWurWUOl0cEmNMCItp+U3bcgZDYf IzZdBlqPa2SlvE1bmEiB+3sf8k5PqTeERdnTThvHKQ/tExE8v0FAqxVgpeB0UAYD 63Obc9dPnFcxHGVevpWssCAoMCwiHN8izxE9p6Q8qTJFdP0bv6ZrMYrBp4O30tVd c8DYW11xSUzeuHGwsuFEJiO1C2AHQPTyw/ufymKGq6LN1HgrnEXPqlBBfLSNxyUc pDbjjfCPPyd80NmWsn9zD/BGAyLY1k94gRvoxj21eYEOJc2x5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+guqeTHWOZA96ZDjt/7uHM16q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGMxNDUzNWMtZDM1NS0z N2U1LTgyNTEtNmE2NWIwNDhlZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYhJSoK32z5kZ0M7cxoxNNye/kVFD7cm/TEEAt8wuM/YFcYwyRa k2KU9hVgrnyr9ZsIlxgkSlYbW3/6EWfG81hrtL5At6HXYCPKmMlNfsaXzc7O4J+F NMLTa4+dc8IvOaMuMHSfdYOdKb8Zv6OLR3Xq4qsIbbU3F85RuNf/rPt2+B4ar6Z/ B4prS6xWirsDw2rSqISLXdi250d+tEuf4ySLqLcQ6JtGztg1T8LakSgPYF9TRW5c AcHiPQuYkiL7N3dpcGPAomoJf0V1hmbknC7tuSPtOBG0sjDa0fwcj40K4WQLInSa r0Ugyoemh+AOW+tDBukZ13WHP3IAi+Zpoik= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:21 2025 by rpki-client