$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa File: 2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa (raw, json) Hash identifier: 6Mh4WQDm6NPVW1IrpBwqWis3v/ke8tmcaa3iOTSn0+Y= Subject key identifier: 62:0B:28:85:A8:AF:8B:2D:8C:4E:EC:11:A1:54:8B:AF:B0:81:4A:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01F7A8A24CD8E5D584E200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:5410::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:f7:a8:a2:4c:d8:e5:d5:84:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=dc7b129e-379a-4ce7-a479-6b3f11fb82b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:ce:61:e2:74:88:94:21:96:0d:1f:ac:9a: 81:01:1c:68:cc:7e:31:6e:7e:74:55:51:e9:e1:fc: d7:02:5b:46:2c:fb:94:9d:80:15:4e:ef:6e:22:78: dd:25:a7:a7:62:95:5a:93:6b:65:ea:40:4b:04:cc: 44:b8:01:e7:c6:64:4a:ea:2e:3d:53:ad:1f:52:08: 47:0f:2b:a1:2d:da:e9:f9:31:bc:39:0b:cf:e6:6b: d1:6e:90:a0:64:f8:43:bc:b9:4c:bb:83:61:e4:62: 9f:06:45:1f:ed:3e:5a:6e:f3:5b:74:72:41:59:06: 21:2d:22:54:45:3a:2e:4a:52:3e:d9:c1:fd:9d:83: 43:f1:d5:1b:e5:d1:ca:6d:f4:6b:de:15:e6:81:5d: f6:27:c0:d2:e2:25:54:86:98:40:f2:a8:85:63:8f: 91:9f:b6:05:0c:ee:d5:e2:b5:94:11:7b:ab:55:82: f8:bf:79:96:8c:e4:27:74:4f:27:ce:85:99:2b:c2: 39:a2:29:1c:de:e9:ba:71:51:5e:b8:37:5c:e5:0c: 47:ee:7e:17:38:3a:f3:36:59:65:2d:5a:62:81:00: da:4b:88:4f:19:73:19:e9:3c:1b:19:f9:74:41:c9: a8:98:34:cb:b0:0d:59:29:81:c2:02:b2:47:89:a2: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0B:28:85:A8:AF:8B:2D:8C:4E:EC:11:A1:54:8B:AF:B0:81:4A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5410::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b0:70:75:40:f6:8f:66:61:b5:83:68:78:f9:17:9b:c0:cc: 43:0c:4c:23:07:35:83:67:01:d4:fa:b3:8f:d7:a3:bd:17:cb: 1c:ac:67:5c:26:5b:64:7b:f5:ae:19:f0:98:14:6e:d0:bf:e3: 80:a8:7e:ff:05:72:f3:d1:b8:9a:48:6a:8c:2f:c1:89:97:da: 15:7b:8e:95:92:39:64:30:d9:22:4d:2f:35:ad:e2:e4:c0:5b: 3a:58:b8:8e:09:a7:06:a4:1c:c0:3e:47:74:72:d8:65:2d:c7: 94:ac:70:c9:fd:2f:5b:9e:e5:e3:54:5a:46:ef:e5:79:e2:20: 22:c5:94:96:ed:ac:1d:85:04:2a:6f:c3:2f:96:2b:8d:20:d1: 43:c4:5c:43:fd:8b:7b:a2:8c:7e:66:52:a8:77:99:4b:16:39: 28:a6:58:29:3c:95:da:e0:81:73:1a:cf:29:f6:12:32:cb:a6: 52:e0:cf:23:d2:b1:1d:b7:6d:e2:ac:9f:af:51:a2:d4:76:68: 55:49:49:fc:b4:8a:e6:f9:49:ae:5a:b7:e7:c1:87:77:7a:e2: 9d:94:80:fa:0c:a4:d3:23:ba:3d:bc:10:b7:d9:e3:03:ff:d8: 33:88:52:95:fd:a4:66:d1:5b:18:c9:a7:b4:65:3c:b9:06:9e: 0d:42:97:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfeookzY5dWE4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGM3YjEyOWUtMzc5YS00Y2U3LWE0NzktNmIzZjExZmI4MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFHOYeJ0iJQhlg0frJqBARxozH4xbn50VVHp 4fzXAltGLPuUnYAVTu9uInjdJaenYpVak2tl6kBLBMxEuAHnxmRK6i49U60fUghH DyuhLdrp+TG8OQvP5mvRbpCgZPhDvLlMu4Nh5GKfBkUf7T5abvNbdHJBWQYhLSJU RTouSlI+2cH9nYND8dUb5dHKbfRr3hXmgV32J8DS4iVUhphA8qiFY4+Rn7YFDO7V 4rWUEXurVYL4v3mWjOQndE8nzoWZK8I5oikc3um6cVFeuDdc5QxH7n4XODrzNlll LVpigQDaS4hPGXMZ6TwbGfl0QcmomDTLsA1ZKYHCArJHiaIepwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGILKIWor4stjE7sEaFUi6+wgUoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjY4N2FiN2EtYWIxYi0z MWYyLTllNTMtYjhiN2EyNGEzMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSwcHVA9o9mYbWDaHj5F5vAzEMMTCMHNYNnAdT6s4/Xo70Xyxys Z1wmW2R79a4Z8JgUbtC/44Cofv8FcvPRuJpIaowvwYmX2hV7jpWSOWQw2SJNLzWt 4uTAWzpYuI4JpwakHMA+R3Ry2GUtx5SscMn9L1ue5eNUWkbv5XniICLFlJbtrB2F BCpvwy+WK40g0UPEXEP9i3uijH5mUqh3mUsWOSimWCk8ldrggXMazyn2EjLLplLg zyPSsR23beKsn69RotR2aFVJSfy0iub5Sa5at+fBh3d64p2UgPoMpNMjuj28ELfZ 4wP/2DOIUpX9pGbRWxjJp7RlPLkGng1ClyY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:34 2025 by rpki-client