$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d7b6aa-14fe-3470-817a-5ff3ac48c446.roa File: 89d7b6aa-14fe-3470-817a-5ff3ac48c446.roa (raw, json) Hash identifier: hCc0fvrE91LGzF6PYhdFY3arSbNB+UEiREl02qtEPFM= Subject key identifier: 9F:5B:9B:CD:1F:D0:63:17:B5:AC:56:E5:FA:ED:39:94:C3:AB:7E:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0216EB2461CBB72B45E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d7b6aa-14fe-3470-817a-5ff3ac48c446.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b640::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:16:eb:24:61:cb:b7:2b:45:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=01115482-82f3-4a73-88fa-33d12a152c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5f:12:87:23:61:bf:c9:d4:93:b7:bb:3b:7a: 8b:5f:2c:4f:3e:b7:d9:0d:27:a7:87:d4:c6:15:e2: 78:7d:41:2f:32:da:d6:f7:ee:33:51:da:91:dc:2b: b8:25:b2:45:06:3b:43:b7:7c:c6:cb:34:7b:3c:7c: 60:7e:77:65:68:c6:0a:29:41:5e:69:a9:3b:f4:fd: 89:af:b1:22:da:c9:13:78:be:6a:70:09:8c:50:e4: a0:24:fb:84:e7:48:98:d0:ce:58:43:57:7f:ea:9c: 89:7d:cb:53:ea:43:41:38:16:3b:8d:e5:0f:08:b2: 03:09:3a:9f:c2:2e:11:f1:ad:46:3e:d4:d7:ae:05: 5d:00:76:2e:4e:4c:54:62:ff:74:3f:9b:b8:7d:04: 57:27:72:47:54:68:21:ca:28:f5:07:d7:19:f9:c8: e3:5a:59:5f:cb:77:ff:91:9a:7e:7c:6c:a2:ac:67: cd:cf:4c:4a:be:cf:bd:7a:4e:e9:d4:e8:c2:f1:a4: 4e:28:b9:5c:24:97:b1:e1:d0:28:82:e4:70:b7:5d: d4:ef:7f:53:c0:ed:56:b3:7b:d1:1e:61:be:54:6b: 0a:84:3f:e5:99:14:80:ea:bf:f9:57:ab:ed:23:9a: 99:2f:c6:bf:99:a5:9b:f9:9a:99:31:ea:7c:27:87: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:9B:CD:1F:D0:63:17:B5:AC:56:E5:FA:ED:39:94:C3:AB:7E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89d7b6aa-14fe-3470-817a-5ff3ac48c446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b640::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:db:87:16:4e:c7:f0:0c:62:d7:fc:68:3c:10:e9:96:8a:72: 2e:ca:de:2c:14:af:26:0c:20:4b:8b:b1:94:1d:39:dc:a3:1c: cb:68:6e:ec:39:89:62:4f:35:84:9c:2a:a6:5c:0c:7c:36:92: b1:bb:b6:62:2f:b5:cd:c2:30:a1:66:3f:ee:63:1a:62:54:b5: a2:c5:72:52:e2:73:2b:3f:5f:e6:1e:ca:c9:1d:f8:82:0f:fa: 6c:f3:80:6e:67:83:59:d1:30:62:55:25:cf:4f:b5:98:a3:8f: 56:24:4f:52:f6:a7:08:45:b4:5f:9f:bf:a3:c8:7e:75:d4:37: 0e:80:a5:ed:54:32:ff:ac:c6:ac:6c:61:48:d4:a9:f9:7e:06: 2e:e4:7c:58:71:76:d2:80:ca:e1:a1:24:6d:92:7f:7d:09:86: 38:5d:bd:3d:44:6c:31:07:f4:2c:07:f1:f1:7a:8e:ad:e9:c5: 67:9b:6a:0d:0e:88:88:ee:9e:cb:64:8e:67:7e:e2:59:f7:af: 1e:05:94:73:ef:75:2a:ba:f7:70:9a:e6:63:14:b2:ca:92:e9: f7:c0:9a:33:75:07:17:c4:43:44:fb:2a:23:b1:ae:f9:62:0e: 0b:35:b4:b2:b5:18:21:d0:de:76:a3:e3:5b:2c:dd:5f:83:5c: 4c:86:f6:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhbrJGHLtytF4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDExMTU0ODItODJmMy00YTczLTg4ZmEtMzNkMTJhMTUyYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA218ShyNhv8nUk7e7O3qLXyxPPrfZDSenh9TG FeJ4fUEvMtrW9+4zUdqR3Cu4JbJFBjtDt3zGyzR7PHxgfndlaMYKKUFeaak79P2J r7Ei2skTeL5qcAmMUOSgJPuE50iY0M5YQ1d/6pyJfctT6kNBOBY7jeUPCLIDCTqf wi4R8a1GPtTXrgVdAHYuTkxUYv90P5u4fQRXJ3JHVGghyij1B9cZ+cjjWllfy3f/ kZp+fGyirGfNz0xKvs+9ek7p1OjC8aROKLlcJJex4dAoguRwt13U739TwO1Ws3vR HmG+VGsKhD/lmRSA6r/5V6vtI5qZL8a/maWb+ZqZMep8J4dnwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9bm80f0GMXtaxW5frtOZTDq34PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlkN2I2YWEtMTRmZS0z NDcwLTgxN2EtNWZmM2FjNDhjNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIALZA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3bhxZOx/AMYtf8aDwQ6ZaKci7K3iwUryYMIEuLsZQdOdyjHMto buw5iWJPNYScKqZcDHw2krG7tmIvtc3CMKFmP+5jGmJUtaLFclLicys/X+Yeyskd +IIP+mzzgG5ng1nRMGJVJc9PtZijj1YkT1L2pwhFtF+fv6PIfnXUNw6Ape1UMv+s xqxsYUjUqfl+Bi7kfFhxdtKAyuGhJG2Sf30JhjhdvT1EbDEH9CwH8fF6jq3pxWeb ag0OiIjunstkjmd+4ln3rx4FlHPvdSq693Ca5mMUssqS6ffAmjN1BxfEQ0T7KiOx rvliDgs1tLK1GCHQ3naj41ss3V+DXEyG9og= -----END CERTIFICATE-----Generated at Tue Nov 4 18:42:56 2025 by rpki-client