$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa File: 1017c856-cb9a-3204-8b2f-05ad2252d87e.roa (raw, json) Hash identifier: PHUFQ3o7qG+9SbXxydSl//5Tt9Nq+8bDMloLjFaJzFo= Subject key identifier: CD:F9:D2:83:9B:E1:24:7D:48:83:31:01:57:D8:E0:F7:0B:49:92:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02193CB5DC6F8C0BF85F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b71a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:19:3c:b5:dc:6f:8c:0b:f8:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c89ddc57-b877-404a-ae2f-c432d94151ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:a1:08:75:8d:6c:f7:79:8c:37:e2:aa:ce: 02:2d:de:31:05:f8:c7:0f:33:7e:6f:64:46:ed:dd: c8:6f:3c:c1:78:39:9c:60:14:96:ff:40:80:ea:cc: 70:fa:9a:59:67:2e:81:30:82:dc:ff:4d:d7:f2:e3: 62:17:8e:74:bd:7e:35:4d:2a:e5:56:3b:a7:c0:e5: e7:f4:cb:9c:c0:a4:e9:6f:e1:26:98:0a:87:bc:a7: 3b:b1:96:b3:27:3e:ea:c7:e0:b7:22:f3:95:61:78: e0:b4:a0:26:62:a3:f7:6f:0f:4c:8b:af:87:e3:d4: 3b:44:55:4a:0d:e6:10:f6:2f:4f:a9:9a:7b:76:d7: b5:01:49:2c:08:94:75:22:63:9d:00:2d:22:25:46: d4:33:40:4c:c5:58:ff:9f:35:9b:14:19:a7:0e:2d: 98:8d:8b:a5:87:58:5c:22:d3:83:84:1a:d7:f0:9b: db:32:96:3e:f3:16:78:89:6e:6d:94:32:8a:74:7f: f6:ef:6a:30:c0:6f:0a:1c:b2:b6:74:77:fa:3e:7a: bc:1e:2c:c3:b0:66:53:9c:79:52:e0:fa:6f:74:ce: 1a:95:9b:ee:f6:4d:88:f2:c3:b7:ba:eb:1d:5a:f4: 62:f1:f7:6c:09:31:a9:6c:ae:a5:c1:53:60:e2:0a: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F9:D2:83:9B:E1:24:7D:48:83:31:01:57:D8:E0:F7:0B:49:92:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b71a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fb:38:1c:e6:d2:1c:4a:c0:f8:d2:43:cf:67:db:dd:3a:68: d1:30:3d:7f:a8:51:c1:d6:83:a7:9a:cc:8e:3b:a2:e7:eb:b6: 09:7b:86:9a:9a:19:b6:c3:56:99:77:67:72:73:c2:f3:ad:7c: 65:55:55:3d:69:20:f8:0d:68:41:ae:a0:d5:be:ac:ea:47:23: b9:29:a0:2a:e4:26:96:17:f5:fc:bc:6b:6f:e9:f0:a1:f4:4b: 82:0d:39:95:d8:87:80:21:3c:12:24:c7:7c:aa:dc:04:5d:53: aa:ab:43:67:72:db:be:4c:81:f0:fa:9a:c2:4e:5f:79:31:63: 34:cc:18:a4:1a:42:f8:73:11:ac:bd:f8:ac:12:f1:a6:b3:0e: cc:b7:26:dc:d8:bf:a0:75:af:40:1f:45:4c:02:5e:dd:15:f8: 9c:1e:67:71:56:c4:d4:df:5f:54:eb:bb:ec:78:60:48:ba:b2: 7a:de:1d:cc:6f:c5:f4:29:8a:e6:5e:67:d5:fb:39:8d:c4:75: 44:ae:d7:4d:b5:f8:50:b8:37:41:58:30:30:b5:d1:c6:12:7a: 3c:4f:28:e7:a7:9f:3a:e0:b9:3f:20:5a:5b:c2:21:7b:40:71: af:b5:d3:26:a0:00:f1:28:35:5a:6d:7b:de:68:e1:45:16:cc: 35:e2:5f:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhk8tdxvjAv4XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Yzg5ZGRjNTctYjg3Ny00MDRhLWFlMmYtYzQzMmQ5NDE1MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicWhCHWNbPd5jDfiqs4CLd4xBfjHDzN+b2RG 7d3IbzzBeDmcYBSW/0CA6sxw+ppZZy6BMILc/03X8uNiF450vX41TSrlVjunwOXn 9MucwKTpb+EmmAqHvKc7sZazJz7qx+C3IvOVYXjgtKAmYqP3bw9Mi6+H49Q7RFVK DeYQ9i9PqZp7dte1AUksCJR1ImOdAC0iJUbUM0BMxVj/nzWbFBmnDi2YjYulh1hc ItODhBrX8JvbMpY+8xZ4iW5tlDKKdH/272owwG8KHLK2dHf6Pnq8HizDsGZTnHlS 4PpvdM4alZvu9k2I8sO3uusdWvRi8fdsCTGpbK6lwVNg4gou9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM350oOb4SR9SIMxAVfY4PcLSZKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTAxN2M4NTYtY2I5YS0z MjA0LThiMmYtMDVhZDIyNTJkODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALca MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAT7OBzm0hxKwPjSQ89n2906aNEwPX+oUcHWg6eazI47oufrtgl7 hpqaGbbDVpl3Z3JzwvOtfGVVVT1pIPgNaEGuoNW+rOpHI7kpoCrkJpYX9fy8a2/p 8KH0S4INOZXYh4AhPBIkx3yq3ARdU6qrQ2dy275MgfD6msJOX3kxYzTMGKQaQvhz Eay9+KwS8aazDsy3JtzYv6B1r0AfRUwCXt0V+JweZ3FWxNTfX1Tru+x4YEi6snre HcxvxfQpiuZeZ9X7OY3EdUSu1021+FC4N0FYMDC10cYSejxPKOennzrguT8gWlvC IXtAca+10yagAPEoNVpte95o4UUWzDXiXzQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:48 2025 by rpki-client