$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa File: 28f0a707-e669-336f-addb-ee06fbd6ad78.roa (raw, json) Hash identifier: NPTZwzcubtMbm8ilKbZZYOO8G6f/nWu2k8UdKqE2Yeg= Subject key identifier: 17:D2:06:2A:05:08:65:A0:52:CD:FA:9E:43:3E:86:16:00:45:04:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD6286F69BBAE22E6B012C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 2600:880b:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:86:f6:9b:ba:e2:2e:6b:01:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=bc7eda50-10de-4de4-9028-dd9439d616f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:2b:b4:04:6d:d1:8f:d1:b4:14:06:39:5d: a2:fd:14:5d:95:9d:72:e0:88:8e:61:1d:24:32:b5: 0a:20:98:26:b4:09:ab:d8:c6:ca:10:1f:c8:82:b9: 9e:f7:7a:d1:df:35:f4:eb:40:9f:55:3c:52:bc:fa: b4:5a:d2:30:6b:a2:b9:04:3b:9f:ac:56:b4:56:65: f3:cc:a4:e8:67:db:1c:ef:1f:11:ce:1a:d5:29:81: 34:8e:b8:e6:ec:75:14:f5:82:d8:b2:cb:ec:95:00: 81:90:5e:1d:c1:3c:d0:1b:1f:4c:65:7b:27:fc:52: 90:e5:47:d1:53:78:c2:aa:1e:59:31:1e:68:b6:e0: 02:81:23:78:5f:32:ca:25:ee:ab:47:a7:96:2d:17: 71:07:01:d0:5b:d5:df:40:42:01:39:2d:53:29:75: e6:41:9a:3f:ba:50:33:23:8c:31:a3:db:ad:c0:5d: 3f:bc:0c:20:3a:d2:e9:77:a3:cd:9f:c9:22:a4:58: 7b:a4:c1:40:4a:14:1f:dc:00:50:39:b9:73:c4:80: fd:5c:b1:d7:f0:de:a5:2d:8b:0a:7c:96:02:8b:7e: 92:87:4e:f1:b3:72:a4:2f:d2:cc:cc:a2:9f:a7:54: bf:24:a2:0e:4c:b2:f3:e2:10:5f:ba:74:ae:c3:e7: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:06:2A:05:08:65:A0:52:CD:FA:9E:43:3E:86:16:00:45:04:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880b:2000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5e:d4:b5:ae:77:44:72:e5:cb:f7:a1:e8:1b:34:57:bb:c7: 5a:7c:40:c2:db:c5:0c:16:01:02:62:49:3c:bd:8a:82:bb:ef: 20:78:52:46:1c:c0:ae:b5:96:80:e7:6b:38:15:fb:0e:5d:fb: 72:d1:ad:f9:82:b1:eb:72:cc:96:32:88:b7:2d:3e:12:b7:d0: 34:1e:2e:1e:6c:f9:82:32:1f:8c:78:c7:f1:53:99:06:67:0e: 31:27:e9:23:90:6e:07:5b:e9:95:69:52:2b:9f:f2:92:85:42: ef:b3:c9:bd:00:03:6c:b0:a3:65:d0:0e:d3:0f:da:63:27:f1: 38:fe:f5:46:ca:e9:6c:6b:4a:6c:5e:05:ac:c8:b9:11:5b:78: 94:92:74:9d:e0:40:70:15:43:39:ac:cc:68:23:c4:ff:ab:8e: 7b:a3:08:4f:9a:29:63:41:2b:1a:26:25:20:f6:37:96:95:72: 69:16:8f:d4:66:c2:78:43:36:be:6b:26:7c:fa:51:0a:03:42: f1:1a:3b:37:36:cf:28:1b:ec:11:a5:5b:42:6c:f8:f3:b0:ce: b0:f3:e1:ee:21:33:13:a7:d3:97:c4:f9:6c:8f:62:cd:0e:6f: c4:f4:1f:a6:53:f3:11:7b:8f:b8:0a:71:ef:f7:22:17:45:98: 97:a7:5c:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEutYob2m7riLmsBLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmM3ZWRhNTAtMTBkZS00ZGU0LTkwMjgtZGQ5NDM5ZDYxNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw0rtARt0Y/RtBQGOV2i/RRdlZ1y4IiOYR0k MrUKIJgmtAmr2MbKEB/Igrme93rR3zX060CfVTxSvPq0WtIwa6K5BDufrFa0VmXz zKToZ9sc7x8RzhrVKYE0jrjm7HUU9YLYssvslQCBkF4dwTzQGx9MZXsn/FKQ5UfR U3jCqh5ZMR5otuACgSN4XzLKJe6rR6eWLRdxBwHQW9XfQEIBOS1TKXXmQZo/ulAz I4wxo9utwF0/vAwgOtLpd6PNn8kipFh7pMFAShQf3ABQOblzxID9XLHX8N6lLYsK fJYCi36Sh07xs3KkL9LMzKKfp1S/JKIOTLLz4hBfunSuw+cL1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBfSBioFCGWgUs36nkM+hhYARQR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmMGE3MDctZTY2OS0z MzZmLWFkZGItZWUwNmZiZDZhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARV7Uta53RHLly/eh6Bs0V7vHWnxAwtvFDBYBAmJJPL2KgrvvIHhS RhzArrWWgOdrOBX7Dl37ctGt+YKx63LMljKIty0+ErfQNB4uHmz5gjIfjHjH8VOZ BmcOMSfpI5BuB1vplWlSK5/ykoVC77PJvQADbLCjZdAO0w/aYyfxOP71RsrpbGtK bF4FrMi5EVt4lJJ0neBAcBVDOazMaCPE/6uOe6MIT5opY0ErGiYlIPY3lpVyaRaP 1GbCeEM2vmsmfPpRCgNC8Ro7NzbPKBvsEaVbQmz487DOsPPh7iEzE6fTl8T5bI9i zQ5vxPQfplPzEXuPuApx7/ciF0WYl6dcag== -----END CERTIFICATE-----Generated at Tue Nov 4 16:26:17 2025 by rpki-client