$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5724f370-7d68-32e0-8d9f-53145ba59fa3.roa File: 5724f370-7d68-32e0-8d9f-53145ba59fa3.roa (raw, json) Hash identifier: VjSDSJCPwld+aAmtvX2doedsnrenWrGbIMPUGJcxTVc= Subject key identifier: B9:1E:8C:16:99:23:E4:E0:2E:F7:66:7D:A2:C1:29:A8:98:C7:93:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01FA6957AAE207FA111480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5724f370-7d68-32e0-8d9f-53145ba59fa3.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:5656::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:fa:69:57:aa:e2:07:fa:11:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=0e010604-e18f-4a52-883d-9186d1fd5635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:97:46:e0:47:36:3c:d8:ee:2f:92:8b:c6: 13:63:f5:14:ea:6f:b8:23:d3:2b:3e:fd:a4:25:1b: ba:44:0c:09:ba:fe:74:4e:d3:48:c5:92:82:d3:2e: c5:69:0f:f6:c3:6d:98:0d:54:74:47:a3:1b:ae:52: be:a7:49:db:d5:dc:05:f9:65:77:b3:75:f7:c1:cb: 9d:b2:02:b6:22:f2:fb:4d:0e:76:47:b5:51:0a:5f: 3d:36:23:c4:95:45:e9:18:82:94:0e:d5:50:e3:3a: 99:a4:98:35:84:f2:f9:df:d8:79:65:06:53:c4:e8: 99:aa:25:13:11:cd:96:d1:22:0b:e7:ae:fe:47:f9: e7:ed:58:bb:47:3f:5c:04:a9:2e:77:9f:06:ff:13: 52:46:d6:86:30:cc:18:44:62:0b:0c:1a:1b:09:2e: 31:14:b0:fc:b4:1d:64:b3:97:3d:25:58:85:92:12: 21:a3:73:e0:90:cf:1c:aa:de:3b:f8:8c:a6:f3:cc: 84:07:9b:cc:97:b4:81:5c:31:e8:30:e0:5b:6d:48: 0e:5a:38:f3:e7:59:86:1b:bd:bd:63:33:ed:61:06: 3e:7f:89:de:7f:6c:d6:b4:74:81:80:d5:7c:09:00: 41:53:57:a8:55:56:13:19:d3:c6:37:58:65:a7:85: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1E:8C:16:99:23:E4:E0:2E:F7:66:7D:A2:C1:29:A8:98:C7:93:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5724f370-7d68-32e0-8d9f-53145ba59fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5656::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ff:81:09:9d:dc:d2:f8:34:37:65:d4:ff:78:95:e1:9a:6b: f6:ee:9a:e6:3b:07:62:54:ce:ab:1e:54:a8:51:22:00:9e:47: 38:7f:3c:f2:88:e4:ce:ae:ab:a4:1c:1c:cd:44:b1:86:ae:07: cf:11:b4:68:05:1f:14:f3:0e:4f:6a:e6:a0:d4:05:98:5a:67: 64:5e:8b:17:5b:a3:07:0b:4a:41:7d:a8:5b:26:15:bc:01:ac: 42:fc:14:55:8a:69:0d:4d:3a:cd:39:86:53:39:5b:b5:ed:54: 6a:25:c8:de:e4:29:da:d6:65:fc:36:0b:30:de:b3:19:1d:f0: 77:ef:2b:1c:ad:7c:31:91:31:4e:2e:d5:ea:ae:8f:af:db:be: 25:20:ac:b9:3c:ea:7f:51:b4:5a:2d:fc:99:15:57:98:42:53: 07:af:f9:97:78:45:a3:a0:a4:52:7f:26:e9:29:6f:d7:5d:93: 05:d5:f2:86:20:91:cf:c8:d0:3b:b7:aa:0b:2b:e3:10:cc:65: 2b:0a:a7:62:ef:ac:fa:59:67:fd:8b:6b:da:28:23:63:fe:1b: a7:77:58:91:53:ff:35:dd:85:d3:5f:f9:19:b0:e5:21:46:60: 0f:82:b4:76:6a:66:39:94:73:57:87:82:83:91:f7:75:1d:3e: 83:56:93:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfppV6riB/oRFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGUwMTA2MDQtZTE4Zi00YTUyLTg4M2QtOTE4NmQxZmQ1NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2aXRuBHNjzY7i+Si8YTY/UU6m+4I9MrPv2k JRu6RAwJuv50TtNIxZKC0y7FaQ/2w22YDVR0R6MbrlK+p0nb1dwF+WV3s3X3wcud sgK2IvL7TQ52R7VRCl89NiPElUXpGIKUDtVQ4zqZpJg1hPL539h5ZQZTxOiZqiUT Ec2W0SIL567+R/nn7Vi7Rz9cBKkud58G/xNSRtaGMMwYRGILDBobCS4xFLD8tB1k s5c9JViFkhIho3PgkM8cqt47+Iym88yEB5vMl7SBXDHoMOBbbUgOWjjz51mGG729 YzPtYQY+f4nef2zWtHSBgNV8CQBBU1eoVVYTGdPGN1hlp4V6ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkejBaZI+TgLvdmfaLBKaiYx5N6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTcyNGYzNzAtN2Q2OC0z MmUwLThkOWYtNTMxNDViYTU5ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFZW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACH/gQmd3NL4NDdl1P94leGaa/bumuY7B2JUzqseVKhRIgCeRzh/ PPKI5M6uq6QcHM1EsYauB88RtGgFHxTzDk9q5qDUBZhaZ2ReixdbowcLSkF9qFsm FbwBrEL8FFWKaQ1NOs05hlM5W7XtVGolyN7kKdrWZfw2CzDesxkd8HfvKxytfDGR MU4u1equj6/bviUgrLk86n9RtFot/JkVV5hCUwev+Zd4RaOgpFJ/Jukpb9ddkwXV 8oYgkc/I0Du3qgsr4xDMZSsKp2LvrPpZZ/2La9ooI2P+G6d3WJFT/zXdhdNf+Rmw 5SFGYA+CtHZqZjmUc1eHgoOR93UdPoNWkzY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:36 2025 by rpki-client