$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de665253-538b-3387-82a2-b7b1ef9341ea.roa File: de665253-538b-3387-82a2-b7b1ef9341ea.roa (raw, json) Hash identifier: Zy8eogIVoP96tJ4aQzOB21/Qth6DKohoLkcHYxQA36o= Subject key identifier: D5:DF:ED:69:92:55:7C:32:26:9E:61:FD:CF:5E:41:55:BD:AE:DE:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02140DAD3C8437ABF77100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de665253-538b-3387-82a2-b7b1ef9341ea.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:af0c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:14:0d:ad:3c:84:37:ab:f7:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d1a2b54c-3386-4163-b558-07b251c6a78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f7:b6:a5:85:0b:81:3d:19:79:15:26:e1:b7: f6:71:a8:f6:8a:e3:44:2f:3b:78:ba:47:d7:22:32: 1d:a2:64:1e:4d:f4:9f:07:b4:b6:c0:4d:78:a4:03: f5:59:0a:72:d3:92:27:84:73:88:86:57:49:bb:1c: 43:e1:6f:6b:29:79:02:4b:de:dc:57:5c:e2:2f:b4: 1a:48:5b:c8:e5:5a:cf:d7:dd:4c:b3:2f:e8:d1:fe: c3:a4:b5:5f:45:33:11:69:f9:30:ad:84:fd:8a:d1: b5:6e:e0:ce:0c:84:84:ca:39:9c:c3:54:e0:83:c6: 8e:40:9b:13:aa:15:22:65:b3:17:12:0f:cd:28:75: e3:9f:ec:cf:dd:7e:5b:85:6b:61:b1:fd:78:da:b3: 22:89:ac:23:ec:a5:9c:e9:60:c5:57:2a:a3:1e:2a: ca:77:03:ba:b6:de:13:88:b9:79:f4:dd:9f:bd:c4: f2:f3:a0:dd:62:ba:25:48:af:79:ef:e1:49:42:5f: 87:21:1b:96:ea:9a:86:69:e9:85:9c:50:a4:f8:18: bb:a3:43:2b:47:ed:54:20:ef:fc:3c:78:9c:84:28: f2:6b:26:3b:87:c2:94:e3:47:4e:b8:b2:c5:8e:29: 54:b8:89:96:fc:a3:91:14:98:5e:10:57:d8:63:b2: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:ED:69:92:55:7C:32:26:9E:61:FD:CF:5E:41:55:BD:AE:DE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de665253-538b-3387-82a2-b7b1ef9341ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:af0c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9c:73:1b:42:81:d6:47:73:66:0a:db:8c:1d:11:08:19:8d: bb:97:eb:f5:f2:b0:67:1c:14:2d:23:f9:27:b6:a0:89:c2:a8: 6d:cd:6b:28:63:0f:f0:b7:75:57:31:46:dd:09:f0:cc:60:2a: 13:c7:ca:e3:e6:84:bb:b6:da:d9:e6:48:8e:f7:40:71:d8:d3: 81:63:1d:aa:e0:76:7a:e6:be:c4:cc:53:ac:72:ee:ff:92:66: 9f:c4:14:b2:74:e0:ef:42:56:92:68:67:a4:a9:32:ca:7f:53: ef:35:a3:4e:ba:19:b5:d1:58:ab:1b:f5:c6:47:fe:96:76:00: a1:fe:3f:ee:ab:0d:9a:83:d7:64:e9:e7:d4:55:04:02:43:55: 70:0c:66:1c:84:1d:ee:a9:97:20:bf:21:42:de:e9:b4:ea:f3: 92:49:1c:9a:22:ff:f7:66:c3:b6:3a:74:fd:2c:d6:5d:25:57: d9:85:08:1c:f7:22:24:e5:81:e7:d9:33:11:7f:98:49:e6:19: da:bd:73:04:48:71:c3:21:87:40:35:77:9d:f2:66:cb:f8:98: f9:ee:47:fd:d8:9d:4c:57:58:90:6c:ea:7a:93:43:78:87:81: 4a:3e:14:94:8c:b7:4a:c7:ec:fa:41:f6:d8:c7:7c:6a:1b:2a: 70:ee:f6:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhQNrTyEN6v3cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDFhMmI1NGMtMzM4Ni00MTYzLWI1NTgtMDdiMjUxYzZhNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Pe2pYULgT0ZeRUm4bf2caj2iuNELzt4ukfX IjIdomQeTfSfB7S2wE14pAP1WQpy05InhHOIhldJuxxD4W9rKXkCS97cV1ziL7Qa SFvI5VrP191Msy/o0f7DpLVfRTMRafkwrYT9itG1buDODISEyjmcw1Tgg8aOQJsT qhUiZbMXEg/NKHXjn+zP3X5bhWthsf142rMiiawj7KWc6WDFVyqjHirKdwO6tt4T iLl59N2fvcTy86DdYrolSK957+FJQl+HIRuW6pqGaemFnFCk+Bi7o0MrR+1UIO/8 PHichCjyayY7h8KU40dOuLLFjilUuImW/KORFJheEFfYY7Le9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXf7WmSVXwyJp5h/c9eQVW9rt7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGU2NjUyNTMtNTM4Yi0z Mzg3LTgyYTItYjdiMWVmOTM0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAK8M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmccxtCgdZHc2YK24wdEQgZjbuX6/XysGccFC0j+Se2oInCqG3N ayhjD/C3dVcxRt0J8MxgKhPHyuPmhLu22tnmSI73QHHY04FjHargdnrmvsTMU6xy 7v+SZp/EFLJ04O9CVpJoZ6SpMsp/U+81o066GbXRWKsb9cZH/pZ2AKH+P+6rDZqD 12Tp59RVBAJDVXAMZhyEHe6plyC/IULe6bTq85JJHJoi//dmw7Y6dP0s1l0lV9mF CBz3IiTlgefZMxF/mEnmGdq9cwRIccMhh0A1d53yZsv4mPnuR/3YnUxXWJBs6nqT Q3iHgUo+FJSMt0rH7PpB9tjHfGobKnDu9uc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:26 2025 by rpki-client