$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33d1b6e3-532f-3bd8-951a-9b69e1ab5b2a.roa File: 33d1b6e3-532f-3bd8-951a-9b69e1ab5b2a.roa (raw, json) Hash identifier: pKEERWr/gYUj0KiWuQDdtcUuSzwihtofFW3oT6Qd3yw= Subject key identifier: 68:10:28:61:40:0D:51:96:55:90:2E:19:8F:69:B0:1A:64:D3:17:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0225F7CF532E325CA49360 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33d1b6e3-532f-3bd8-951a-9b69e1ab5b2a.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:1120::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:25:f7:cf:53:2e:32:5c:a4:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c8afe8d4-941f-499c-992b-0a2cbf6f2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:78:3d:c1:c9:1c:58:ad:d0:e1:a8:70:91: cc:cd:f6:1e:79:01:65:d4:a2:0a:2f:81:01:0c:01: 14:96:cd:86:9a:9b:a8:1b:9b:83:5e:02:39:da:73: f5:9a:4c:9e:b3:30:b1:79:61:ba:a8:a0:1c:93:24: 12:64:fb:16:88:e8:7e:21:67:17:23:a3:51:39:bf: 04:e6:4e:29:b3:07:28:7a:9b:68:13:0c:0a:9f:30: c7:5d:b5:d5:0c:72:23:4c:09:39:fe:de:b5:df:48: 68:ca:ae:69:0d:af:74:34:6f:26:1a:ec:1f:62:c9: 2c:97:6d:0f:05:08:86:a7:7b:15:96:13:d6:fe:72: a8:3d:a1:9c:25:71:34:2b:c7:c0:f9:1a:69:64:c9: ee:df:05:78:e7:78:1b:1a:eb:f7:b8:80:53:58:44: 5e:8c:f7:54:44:45:a1:25:c6:bb:bc:38:d7:6f:b2: 9e:3a:b1:f4:98:84:99:0b:0a:70:ed:16:32:8a:19: 67:ed:15:29:b3:89:64:51:ab:37:a6:cb:cb:9a:52: fb:54:a7:b5:e3:d4:bd:13:ff:57:1f:31:ee:32:76: 8a:51:7c:2c:ed:db:84:2d:35:51:9e:77:10:a8:31: 55:e9:c0:2c:77:41:6e:9c:df:16:5d:76:cd:a7:4d: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:10:28:61:40:0D:51:96:55:90:2E:19:8F:69:B0:1A:64:D3:17:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33d1b6e3-532f-3bd8-951a-9b69e1ab5b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:1120::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bd:eb:72:16:8e:43:30:e6:b8:6f:65:48:66:e4:cc:c5:9c: d6:31:41:3c:2f:49:2f:e4:92:35:33:32:49:5f:f7:e4:fa:ae: 65:d7:53:80:7b:95:d6:6d:c8:1a:c7:03:95:d6:c4:54:64:3b: 1a:9a:ee:4e:54:57:39:aa:e0:2a:0f:50:fa:c0:fa:5a:97:d9: 54:46:c7:aa:32:1e:e2:8b:79:ec:10:a5:a9:a5:e3:42:be:37: ed:ee:55:9a:52:fe:31:68:e3:20:ff:e5:08:a5:cc:14:7f:4a: ef:18:09:80:e5:07:02:df:72:b2:67:6d:d2:d1:7f:19:4b:dd: f0:3b:64:c2:14:ee:cc:41:ce:9b:fa:1f:42:ff:00:fa:92:bc: 07:78:08:7e:d5:20:54:42:ef:e3:5b:0c:e8:70:52:4a:73:3f: 49:bb:f8:28:1b:c9:3f:16:f8:23:a6:91:2c:b4:71:4c:29:d5: b6:19:dc:6b:22:d8:0a:e5:b1:06:71:36:79:8b:89:5e:d0:05: 57:e3:4a:7d:17:d5:e2:14:b8:74:d1:2c:d6:08:0f:30:00:d8: 4a:6d:87:6f:b9:ca:ab:2d:18:eb:94:0f:e2:fd:13:43:dc:ff: 9f:35:fd:b0:c0:70:b8:bb:1b:f2:2e:a4:e5:42:56:57:db:47: 47:00:38:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiX3z1MuMlykk2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzhhZmU4ZDQtOTQxZi00OTljLTk5MmItMGEyY2JmNmYyZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx14PcHJHFit0OGocJHMzfYeeQFl1KIKL4EB DAEUls2GmpuoG5uDXgI52nP1mkyeszCxeWG6qKAckyQSZPsWiOh+IWcXI6NROb8E 5k4pswcoeptoEwwKnzDHXbXVDHIjTAk5/t6130hoyq5pDa90NG8mGuwfYsksl20P BQiGp3sVlhPW/nKoPaGcJXE0K8fA+RppZMnu3wV453gbGuv3uIBTWERejPdUREWh Jca7vDjXb7KeOrH0mISZCwpw7RYyihln7RUps4lkUas3psvLmlL7VKe149S9E/9X HzHuMnaKUXws7duELTVRnncQqDFV6cAsd0FunN8WXXbNp03kSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgQKGFADVGWVZAuGY9psBpk0xctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNkMWI2ZTMtNTMyZi0z YmQ4LTk1MWEtOWI2OWUxYWI1YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHu963IWjkMw5rhvZUhm5MzFnNYxQTwvSS/kkjUzMklf9+T6rmXX U4B7ldZtyBrHA5XWxFRkOxqa7k5UVzmq4CoPUPrA+lqX2VRGx6oyHuKLeewQpaml 40K+N+3uVZpS/jFo4yD/5QilzBR/Su8YCYDlBwLfcrJnbdLRfxlL3fA7ZMIU7sxB zpv6H0L/APqSvAd4CH7VIFRC7+NbDOhwUkpzP0m7+CgbyT8W+COmkSy0cUwp1bYZ 3Gsi2ArlsQZxNnmLiV7QBVfjSn0X1eIUuHTRLNYIDzAA2Epth2+5yqstGOuUD+L9 E0Pc/581/bDAcLi7G/IupOVCVlfbR0cAOOw= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:38 2025 by rpki-client