$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa2fb8a4-4a7a-38a0-b535-aa2f35a27e6d.roa File: fa2fb8a4-4a7a-38a0-b535-aa2f35a27e6d.roa (raw, json) Hash identifier: Ax6EWkBV+uYjxMz/oh8C1A1iCeAg7eY0kVCWqano0BI= Subject key identifier: C5:20:B0:41:E0:69:BF:E2:18:50:7A:E3:9D:7A:66:11:A6:AB:2F:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02076607E8526851D86380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa2fb8a4-4a7a-38a0-b535-aa2f35a27e6d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:8688::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:07:66:07:e8:52:68:51:d8:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=94874ce1-919c-4780-a9e9-fe62a91d78ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:9d:15:0f:d7:a4:5c:c8:8d:ea:62:32:f0: a4:1b:dc:b7:2b:1b:b7:88:8d:65:fd:c4:66:5e:a6: 1c:ff:0c:e8:b1:f1:66:b4:b5:d7:0f:b4:d6:20:68: 40:ed:f0:5b:ab:25:cb:78:52:68:d9:8f:48:ee:8a: 78:49:75:3d:7d:40:ca:a8:f6:05:6e:49:91:fb:ca: f8:e1:ed:f7:6a:53:81:d4:2e:fb:1e:d2:29:e4:87: ae:68:70:60:a7:c2:68:67:d9:0c:52:d0:2f:2f:a4: af:64:cd:36:47:f1:0f:01:bd:7a:23:58:28:43:48: ac:1a:c5:23:96:f0:c1:8a:a4:a3:c9:23:5c:2d:f5: 29:c6:4b:67:b3:08:f8:db:c9:2c:26:88:9e:37:e0: 31:d2:b0:2d:6b:17:e0:3b:94:da:eb:c6:7f:42:65: 1c:ac:ab:cf:62:1d:46:ac:50:fa:8b:e5:e9:e1:44: 77:d1:1a:3c:d1:1d:42:f9:75:fd:7a:55:7a:57:67: b0:cf:bc:49:3f:f5:7b:97:88:3b:ce:64:4d:1a:41: 0e:1c:b1:3e:f4:31:56:a7:69:83:c5:fb:d5:66:06: e1:af:aa:c3:17:e8:59:e0:56:0f:a4:51:f1:e6:1a: d9:48:15:59:c0:57:e5:d1:a0:ae:f9:0c:d2:44:f6: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:B0:41:E0:69:BF:E2:18:50:7A:E3:9D:7A:66:11:A6:AB:2F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa2fb8a4-4a7a-38a0-b535-aa2f35a27e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8688::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b0:9c:2c:60:58:c4:44:49:55:04:9f:65:d7:33:ed:03:2d: 7b:79:38:48:5d:37:58:d0:e9:34:ea:68:ac:42:bd:ec:28:74: 05:50:d2:6a:12:63:bb:0f:75:95:7b:4e:0c:d5:51:1b:57:a1: ec:65:0f:ed:98:f6:aa:f8:b3:c5:e6:3e:38:83:2b:65:d1:7a: 66:1b:be:dc:4f:d3:c5:af:df:0b:99:33:bf:11:3f:cb:9b:95: dd:7f:16:8d:41:39:47:0b:01:3e:d8:34:9a:f7:a7:e7:3f:7a: a4:cb:55:1b:d3:66:52:ca:78:d6:c2:9a:be:fd:43:e7:4f:62: d8:d1:76:1c:f0:ea:5f:d0:fc:0d:b5:07:cd:f6:04:32:5e:f7: d6:59:11:84:23:fd:1a:b4:5b:28:8a:59:7c:1a:9a:92:d1:21: 47:5a:88:f3:68:1e:ee:a2:b5:c3:57:da:15:64:9e:1f:22:ce: 95:f3:3b:45:02:04:7c:76:7b:52:fa:e8:8c:3a:fe:49:e1:62: 27:a3:7d:d1:68:f9:79:81:52:b4:84:3a:da:86:bb:2e:e2:14: ff:8d:e6:14:90:df:c4:78:35:50:fe:80:27:dd:9d:1d:50:ae: 8c:c3:14:2b:e3:7c:56:5d:b4:28:6b:0a:a5:dc:85:17:8c:2f: 74:c1:02:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgdmB+hSaFHYY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTQ4NzRjZTEtOTE5Yy00NzgwLWE5ZTktZmU2MmE5MWQ3OGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XidFQ/XpFzIjepiMvCkG9y3Kxu3iI1l/cRm XqYc/wzosfFmtLXXD7TWIGhA7fBbqyXLeFJo2Y9I7op4SXU9fUDKqPYFbkmR+8r4 4e33alOB1C77HtIp5IeuaHBgp8JoZ9kMUtAvL6SvZM02R/EPAb16I1goQ0isGsUj lvDBiqSjySNcLfUpxktnswj428ksJoieN+Ax0rAtaxfgO5Ta68Z/QmUcrKvPYh1G rFD6i+Xp4UR30Ro80R1C+XX9elV6V2ewz7xJP/V7l4g7zmRNGkEOHLE+9DFWp2mD xfvVZgbhr6rDF+hZ4FYPpFHx5hrZSBVZwFfl0aCu+QzSRPY7gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUgsEHgab/iGFB64516ZhGmqy/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmEyZmI4YTQtNGE3YS0z OGEwLWI1MzUtYWEyZjM1YTI3ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiwnCxgWMRESVUEn2XXM+0DLXt5OEhdN1jQ6TTqaKxCvewodAVQ 0moSY7sPdZV7TgzVURtXoexlD+2Y9qr4s8XmPjiDK2XRemYbvtxP08Wv3wuZM78R P8ubld1/Fo1BOUcLAT7YNJr3p+c/eqTLVRvTZlLKeNbCmr79Q+dPYtjRdhzw6l/Q /A21B832BDJe99ZZEYQj/Rq0WyiKWXwampLRIUdaiPNoHu6itcNX2hVknh8izpXz O0UCBHx2e1L66Iw6/knhYiejfdFo+XmBUrSEOtqGuy7iFP+N5hSQ38R4NVD+gCfd nR1QrozDFCvjfFZdtChrCqXchReML3TBAkQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:43:50 2025 by rpki-client