$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa File: ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa (raw, json) Hash identifier: Smv9z808Anz7WAhrfUVPT4ijWsXWEcS202MV6gNLtaY= Subject key identifier: 24:BE:1A:06:1D:B9:F8:F2:37:2D:0F:F0:5D:33:78:4C:67:40:94:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0211ED5EFBB156BDBBDCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:a712::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:11:ed:5e:fb:b1:56:bd:bb:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f699a329-8d72-4167-a058-f9a469c7f64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:cb:38:14:7a:18:42:70:57:53:18:59:e1: d1:de:ac:40:0f:ac:9d:c2:61:9a:1a:5a:a2:70:10: 56:c1:5b:27:49:63:50:b0:05:20:7d:7d:1e:ea:cd: 43:28:10:4d:b6:e8:17:64:4e:eb:df:b5:2e:b2:37: f1:08:c3:8d:48:95:d9:09:ad:85:86:b4:c1:2c:10: ff:8b:b6:fe:77:a7:28:69:b4:9c:7e:6b:58:59:4e: 1b:46:7e:66:5c:c0:dc:94:78:b5:a7:70:d2:97:bd: 05:33:0e:9e:33:72:ff:2a:f7:92:d8:57:16:ef:db: 18:9a:85:84:d9:e4:61:5b:5b:01:22:37:86:7b:24: 29:46:f6:52:18:40:cc:fe:09:90:88:2d:25:93:59: 4b:19:7e:2b:b1:9a:fb:b7:9c:f4:3a:8b:c5:70:01: a7:2a:6a:49:24:58:a0:f3:05:1b:06:df:28:8e:fc: f6:09:99:db:1f:7e:45:60:29:f9:92:eb:4d:17:28: a2:71:6a:24:c5:54:84:67:70:10:e6:52:d5:33:1b: 85:17:62:93:ae:ba:a6:62:fa:56:7e:af:5f:6a:65: 1e:3c:8b:9c:64:20:99:99:1f:fe:d5:72:b6:80:6d: ee:13:09:a4:7d:c6:3e:8d:58:8d:0b:e4:00:1d:81: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:1A:06:1D:B9:F8:F2:37:2D:0F:F0:5D:33:78:4C:67:40:94:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb75158-d0b7-3bdd-a532-262f4c1e72a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:a712::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:24:d4:32:4e:32:b3:62:91:f2:25:59:95:b4:91:0b:06:25: 43:36:3a:4f:fc:fb:98:b5:b4:3d:d3:1c:19:09:a6:99:7c:56: 48:80:44:73:80:aa:07:71:f4:78:b0:7b:01:ac:83:db:4b:23: 99:8c:e5:a7:50:b8:2a:ce:43:52:c9:3c:5c:76:7d:c9:17:58: 89:c2:49:d2:b1:ec:cf:f1:2e:b3:33:71:0b:9e:1d:b7:01:97: 42:27:47:54:bf:e8:d9:c6:74:6a:2c:52:f0:6a:de:69:91:6e: 63:0e:cc:01:19:31:df:94:fb:da:d9:84:be:da:29:6e:ff:b1: 5a:6a:02:86:d2:11:50:f0:b0:5c:a0:87:a4:49:be:87:74:4a: c0:cc:77:7a:a7:02:39:55:6e:67:a6:c2:92:7a:28:ee:76:29: 21:45:66:91:7f:6e:ac:cc:c9:4e:b3:09:c8:2e:c4:72:6f:84: 6e:31:25:67:36:46:b8:24:77:7a:86:0f:5a:8b:f1:af:60:d2: 56:48:cc:cc:d6:77:19:de:ef:92:e5:39:f2:34:c9:c5:c3:dc: 2d:db:7d:28:1f:57:b6:8b:6d:61:60:2f:f9:7f:a0:bd:28:4a: e7:1f:d3:56:86:25:b8:cd:9f:b3:c4:fd:11:39:74:b6:c0:c1: 2d:d7:47:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhHtXvuxVr273MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjY5OWEzMjktOGQ3Mi00MTY3LWEwNTgtZjlhNDY5YzdmNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DLOBR6GEJwV1MYWeHR3qxAD6ydwmGaGlqi cBBWwVsnSWNQsAUgfX0e6s1DKBBNtugXZE7r37UusjfxCMONSJXZCa2FhrTBLBD/ i7b+d6coabScfmtYWU4bRn5mXMDclHi1p3DSl70FMw6eM3L/KveS2FcW79sYmoWE 2eRhW1sBIjeGeyQpRvZSGEDM/gmQiC0lk1lLGX4rsZr7t5z0OovFcAGnKmpJJFig 8wUbBt8ojvz2CZnbH35FYCn5kutNFyiicWokxVSEZ3AQ5lLVMxuFF2KTrrqmYvpW fq9famUePIucZCCZmR/+1XK2gG3uEwmkfcY+jViNC+QAHYFWSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCS+GgYdufjyNy0P8F0zeExnQJTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRiNzUxNTgtZDBiNy0z YmRkLWE1MzItMjYyZjRjMWU3MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAKcS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAok1DJOMrNikfIlWZW0kQsGJUM2Ok/8+5i1tD3THBkJppl8VkiA RHOAqgdx9HiwewGsg9tLI5mM5adQuCrOQ1LJPFx2fckXWInCSdKx7M/xLrMzcQue HbcBl0InR1S/6NnGdGosUvBq3mmRbmMOzAEZMd+U+9rZhL7aKW7/sVpqAobSEVDw sFygh6RJvod0SsDMd3qnAjlVbmemwpJ6KO52KSFFZpF/bqzMyU6zCcguxHJvhG4x JWc2Rrgkd3qGD1qL8a9g0lZIzMzWdxne75LlOfI0ycXD3C3bfSgfV7aLbWFgL/l/ oL0oSucf01aGJbjNn7PE/RE5dLbAwS3XRxg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:40 2025 by rpki-client