$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa98e89d-192b-3ede-9d42-a05cf071b11d.roa File: fa98e89d-192b-3ede-9d42-a05cf071b11d.roa (raw, json) Hash identifier: bYcdR7spIEbh7hgeB6EiCXlsFbjxi74v2YRK4b29hic= Subject key identifier: 9A:AA:82:FA:C1:6C:C7:30:AD:AD:E7:BB:D6:04:0C:FF:C4:A6:A4:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02070ECB5DDB1C44873D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa98e89d-192b-3ede-9d42-a05cf071b11d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:860a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:07:0e:cb:5d:db:1c:44:87:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=df5cbd40-5979-4bdb-b668-33e4c3fe3ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:b9:0e:f7:ee:57:40:78:cb:20:de:6c:08: 4e:9a:88:30:65:03:71:5d:6c:03:fb:38:86:b4:ca: 11:7c:1f:7b:c1:87:2d:ef:c7:de:da:45:2b:c9:bb: eb:5d:fd:31:f8:07:01:84:c8:dd:97:68:20:6d:88: 6b:86:e1:06:79:f5:67:56:b9:e8:48:f6:b5:60:3a: d3:16:c7:93:15:41:1d:20:bc:1f:2e:f0:90:c1:43: 07:b4:17:cb:47:ab:f1:aa:03:79:2e:f0:d4:d1:f7: 39:b3:7e:f5:45:d8:26:6c:4d:af:88:c7:1e:9f:6a: ab:7b:b0:bb:95:5c:7a:0f:a5:f4:a0:7e:f1:b8:ba: e3:78:bb:e2:68:d8:be:66:d8:aa:aa:93:ff:c4:92: 41:3d:66:fe:b5:96:d7:f4:15:68:39:6b:82:ef:d0: 5f:cc:4b:6c:34:54:a3:b9:8e:f0:9a:76:0f:d0:cb: b2:52:5d:9b:44:e4:eb:61:89:fc:80:0d:c2:1e:8c: f0:8b:ef:26:ff:b9:eb:79:87:92:9f:be:2f:6d:5b: 41:b9:b9:7c:0d:d7:44:47:12:49:48:0a:ac:1b:ec: ac:d3:43:fc:80:f2:f4:3d:b9:f9:59:6a:38:a4:21: de:f7:8a:64:0b:76:e6:22:4a:3c:a8:10:eb:dd:09: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:82:FA:C1:6C:C7:30:AD:AD:E7:BB:D6:04:0C:FF:C4:A6:A4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa98e89d-192b-3ede-9d42-a05cf071b11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:860a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c3:22:d6:93:ee:00:5d:a8:54:8f:77:37:10:ed:fd:0b:35: fa:59:4b:2d:5e:f8:ed:a9:41:bd:4c:22:61:6e:91:a3:c5:5a: 27:2d:1a:67:73:6e:06:df:76:2e:f8:e5:ab:7b:dc:72:2b:d6: ef:0b:bb:4e:4d:bf:11:28:c5:72:ab:00:92:14:31:c3:3a:d5: 60:b1:1a:a2:30:f9:58:3d:4a:dd:62:37:6b:66:f3:27:bc:ce: 28:6f:d1:94:4c:bd:88:fb:49:b6:e8:76:8e:61:db:0d:4a:a5: 2f:96:dc:1f:09:2d:f8:c9:30:5e:f8:23:38:1a:b6:24:32:26: 65:34:6e:15:29:d6:31:75:93:47:e4:01:01:fe:a7:4f:86:ee: 28:95:6e:f8:9a:9f:3b:29:e0:7c:54:ac:eb:11:a4:e8:4a:c7: d0:44:c4:a1:24:9a:27:cf:6e:da:b5:4e:29:34:34:8d:df:3c: b1:d9:92:5d:b7:98:5e:30:32:a5:d9:b6:07:34:74:cc:6a:4c: 58:4d:74:3f:51:75:c7:49:de:dc:94:81:c0:fa:6e:2d:b7:7e: 73:4f:e7:2d:7a:0f:2b:2b:4f:03:03:f6:cd:dd:22:97:8c:61: f3:90:3b:cd:b7:78:e4:9f:8c:db:f2:48:3d:39:3d:92:55:64: 0c:6a:1f:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAgcOy13bHESHPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGY1Y2JkNDAtNTk3OS00YmRiLWI2NjgtMzNlNGMzZmUzZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXe5DvfuV0B4yyDebAhOmogwZQNxXWwD+ziG tMoRfB97wYct78fe2kUrybvrXf0x+AcBhMjdl2ggbYhrhuEGefVnVrnoSPa1YDrT FseTFUEdILwfLvCQwUMHtBfLR6vxqgN5LvDU0fc5s371RdgmbE2viMcen2qre7C7 lVx6D6X0oH7xuLrjeLviaNi+ZtiqqpP/xJJBPWb+tZbX9BVoOWuC79BfzEtsNFSj uY7wmnYP0MuyUl2bROTrYYn8gA3CHozwi+8m/7nreYeSn74vbVtBubl8DddERxJJ SAqsG+ys00P8gPL0Pbn5WWo4pCHe94pkC3bmIko8qBDr3QlqYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqqgvrBbMcwra3nu9YEDP/EpqQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmE5OGU4OWQtMTkyYi0z ZWRlLTlkNDItYTA1Y2YwNzFiMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIYK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDDItaT7gBdqFSPdzcQ7f0LNfpZSy1e+O2pQb1MImFukaPFWict Gmdzbgbfdi745at73HIr1u8Lu05NvxEoxXKrAJIUMcM61WCxGqIw+Vg9St1iN2tm 8ye8zihv0ZRMvYj7Sbbodo5h2w1KpS+W3B8JLfjJMF74IzgatiQyJmU0bhUp1jF1 k0fkAQH+p0+G7iiVbvianzsp4HxUrOsRpOhKx9BExKEkmifPbtq1Tik0NI3fPLHZ kl23mF4wMqXZtgc0dMxqTFhNdD9RdcdJ3tyUgcD6bi23fnNP5y16DysrTwMD9s3d IpeMYfOQO823eOSfjNvySD05PZJVZAxqH9c= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:53 2025 by rpki-client