$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e064fea2-b2ab-376e-86ac-6a6071617b38.roa File: e064fea2-b2ab-376e-86ac-6a6071617b38.roa (raw, json) Hash identifier: 4lU49SNK9qsAOzZIn/bIoOEifDDwngP+M0uodUeiwVg= Subject key identifier: 25:69:87:7D:F8:98:7C:30:43:38:48:57:64:6B:4D:34:86:C8:4C:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0214BFFE53EA58FD3F9CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e064fea2-b2ab-376e-86ac-6a6071617b38.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:af20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:14:bf:fe:53:ea:58:fd:3f:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=bca87541-b76b-487b-8de5-91a10944d102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:3d:eb:b8:70:f0:cf:34:8a:cd:45:21:cf: e1:74:59:dd:48:20:45:0d:bb:79:86:87:f6:3f:9e: 5a:9b:eb:a3:61:66:b1:61:48:ed:37:c3:b1:91:7d: ca:0b:42:08:ff:5a:c5:1e:ca:fd:b9:2c:3e:77:2f: 95:28:ac:4d:26:43:ef:72:ae:1c:a1:30:e7:36:8c: 38:35:9d:ef:ff:80:21:25:de:10:dd:c8:f4:6d:9c: 6c:6e:1c:30:56:c6:38:b5:ad:a0:2c:eb:c0:55:04: 92:eb:43:cc:c5:f8:dd:43:9c:a9:21:e3:01:61:f8: f6:99:b4:4c:cd:d1:fa:ee:2e:f7:34:51:69:00:3d: 88:3d:f9:5e:e7:ed:52:53:21:5c:21:a9:35:c1:d0: a3:7b:9c:a4:d1:b3:40:16:96:0c:c7:de:1b:d9:b3: 28:e9:b4:36:5f:d8:3a:d6:b5:dc:fc:bd:fe:07:d8: 84:c5:7b:e5:8b:4c:22:10:54:ab:88:07:16:2e:21: 2c:50:92:ed:b7:f2:32:47:ec:c5:2f:72:0d:ed:f6: 44:23:ee:2e:8d:8f:aa:12:b2:a3:ba:3c:36:5c:f2: 8b:9f:cf:9f:ee:92:ac:79:b5:b3:b2:f4:20:f5:11: 98:52:61:55:17:19:f3:4c:f2:83:6b:6c:40:5e:41: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:87:7D:F8:98:7C:30:43:38:48:57:64:6B:4D:34:86:C8:4C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e064fea2-b2ab-376e-86ac-6a6071617b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:af20::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:09:2e:4a:23:91:74:d7:bd:f6:cc:bc:4c:d6:11:bd:ab:32: 35:a5:bd:b4:cf:46:08:68:12:78:ae:00:9d:19:36:35:ee:4e: b7:dd:59:d7:5c:63:cb:68:7b:9c:ed:b5:58:51:3a:b5:89:1c: 6a:34:39:78:25:97:ff:b2:21:8f:e0:c7:3b:e1:46:dd:e1:4e: 14:32:e8:26:45:56:25:4f:73:d0:a0:f7:bb:55:72:9d:d4:f3: e0:81:1e:a0:f8:1e:53:38:84:dd:38:35:36:4b:51:d1:31:64: 6e:fb:b4:00:ab:4c:19:b9:9c:3c:6c:b1:86:c3:cc:a1:ac:fa: 8c:89:00:ab:0f:4e:43:e4:4f:e9:df:0e:bd:2f:e8:21:e6:49: c1:69:5d:51:31:ae:5d:4a:26:77:67:f0:3a:86:7f:da:1d:0f: b1:72:1b:c8:0e:76:a5:d6:46:53:f5:fa:ea:f7:42:a1:15:2d: 00:0d:6f:35:0c:67:ce:44:35:0c:2e:b5:69:f2:7c:bc:8a:ef: 10:5c:0a:e0:5f:49:15:ba:4d:c9:03:d6:97:d7:b4:2e:00:e2: bf:3c:cd:90:0a:1a:f7:4b:94:d1:ad:28:d2:f2:91:8e:98:d9: c7:09:80:9f:57:0a:61:35:36:87:7b:91:96:0c:a8:04:c3:cf: 52:9f:dc:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhS//lPqWP0/nMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmNhODc1NDEtYjc2Yi00ODdiLThkZTUtOTFhMTA5NDRkMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktQ967hw8M80is1FIc/hdFndSCBFDbt5hof2 P55am+ujYWaxYUjtN8OxkX3KC0II/1rFHsr9uSw+dy+VKKxNJkPvcq4coTDnNow4 NZ3v/4AhJd4Q3cj0bZxsbhwwVsY4ta2gLOvAVQSS60PMxfjdQ5ypIeMBYfj2mbRM zdH67i73NFFpAD2IPfle5+1SUyFcIak1wdCje5yk0bNAFpYMx94b2bMo6bQ2X9g6 1rXc/L3+B9iExXvli0wiEFSriAcWLiEsUJLtt/IyR+zFL3IN7fZEI+4ujY+qErKj ujw2XPKLn8+f7pKsebWzsvQg9RGYUmFVFxnzTPKDa2xAXkHImQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVph334mHwwQzhIV2RrTTSGyEyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTA2NGZlYTItYjJhYi0z NzZlLTg2YWMtNmE2MDcxNjE3YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAK8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoJLkojkXTXvfbMvEzWEb2rMjWlvbTPRghoEniuAJ0ZNjXuTrfd WddcY8toe5zttVhROrWJHGo0OXgll/+yIY/gxzvhRt3hThQy6CZFViVPc9Cg97tV cp3U8+CBHqD4HlM4hN04NTZLUdExZG77tACrTBm5nDxssYbDzKGs+oyJAKsPTkPk T+nfDr0v6CHmScFpXVExrl1KJndn8DqGf9odD7FyG8gOdqXWRlP1+ur3QqEVLQAN bzUMZ85ENQwutWnyfLyK7xBcCuBfSRW6TckD1pfXtC4A4r88zZAKGvdLlNGtKNLy kY6Y2ccJgJ9XCmE1Nod7kZYMqATDz1Kf3JE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:09 2025 by rpki-client