
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa
File: 8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa (raw, json)
Hash identifier: Q2NB1VRoE9H/4y9ErLqKmuNz4iEx9czYEwcvw8B9t1U=
Subject key identifier: 42:CA:C3:EF:B4:E8:C6:4B:21:1D:9A:20:63:25:D9:DB:41:A5:0B:56
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584B1F01F33F6B654011AF963500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa
Signing time: Mon 08 Sep 2025 01:00:33 +0000
ROA not before: Mon 08 Sep 2025 01:00:33 +0000
ROA not after: Sun 07 Dec 2025 02:00:33 +0000
asID: 22773
IP address blocks: 2600:8800:3f6a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1f:01:f3:3f:6b:65:40:11:af:96:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 8 01:00:33 2025 GMT
Not After : Dec 7 02:00:33 2025 GMT
Subject: CN=76247ff1-5ab9-4cb1-8e49-66132a797838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:31:29:ca:73:fa:56:1c:6a:da:13:62:08:
ad:16:09:d8:a1:7f:cd:86:b1:55:49:0e:a2:cc:82:
9e:87:fc:92:29:1c:08:46:3e:df:17:4b:aa:09:d8:
c4:01:75:0e:a6:de:1b:29:20:d8:13:19:3b:cd:5b:
7d:7c:30:1f:22:9f:86:7c:37:0e:7a:21:3e:ed:85:
c9:a2:45:de:3e:a2:f3:8b:93:9a:31:e9:6e:9f:9c:
c2:3e:8a:cd:68:06:56:dd:24:7d:91:76:81:7a:8a:
7e:68:7c:b3:1c:94:d8:ae:ab:02:0d:4d:80:7c:86:
0e:86:8f:8c:c7:fe:e5:de:16:73:8f:b7:87:a4:38:
e5:a1:8f:48:28:63:7a:b5:47:5d:ea:11:fb:df:78:
56:49:7b:3f:c5:79:30:7b:7a:77:7b:95:ca:8a:2a:
20:45:fa:b6:0b:ca:8e:56:e9:7a:31:d4:58:e3:b0:
09:6a:9f:af:93:9c:b1:d9:92:ea:c5:9f:13:c5:f9:
4c:a9:c9:72:66:c2:58:49:19:84:67:b0:7b:24:c2:
d3:9e:61:0c:45:2e:34:bd:79:46:65:70:48:40:96:
d7:fe:d8:8b:b7:4c:e6:30:e4:12:02:87:6e:72:0d:
20:0a:63:03:fd:de:fd:39:5c:2c:e7:20:87:ef:e6:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:C3:EF:B4:E8:C6:4B:21:1D:9A:20:63:25:D9:DB:41:A5:0B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3f6a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:94:31:e0:01:aa:90:ba:48:ce:a2:25:44:cb:aa:15:87:10:
a6:99:5d:5d:78:1c:4f:7d:e5:3a:2a:4a:03:28:5a:ef:41:30:
f9:19:34:d1:77:d2:83:8e:bd:62:42:44:b0:c7:bb:43:f8:15:
82:6b:c7:fa:81:70:72:59:d9:69:f4:c4:d0:1e:cc:92:a0:35:
c3:90:b4:32:c8:cb:6d:3d:5a:8c:56:4c:88:d7:79:83:99:90:
60:ab:3f:d2:1b:66:d0:f4:b0:47:ae:c2:11:e0:4a:d6:47:36:
4c:27:7e:da:5c:1f:4b:16:1d:a9:4c:6a:ff:9b:6c:cc:42:03:
a4:78:09:8d:42:2a:cb:d1:81:70:f5:97:59:8b:b9:59:98:d5:
6b:44:e6:bf:6d:fe:be:2f:48:6e:45:26:b7:f1:74:ae:39:f5:
2d:1c:a0:00:06:e3:af:0a:32:7d:59:bb:d0:49:bb:50:bf:09:
bb:ca:f2:64:8e:97:56:9c:6d:d8:62:e5:06:5d:e4:d6:b1:7d:
97:f0:c7:b5:41:2c:06:59:96:22:7a:7a:f5:04:72:98:a8:89:
5e:c5:8c:1e:5f:70:81:72:86:cf:3c:97:89:f7:45:03:64:59:
6b:7a:ed:d3:47:e0:af:96:47:ab:68:ce:9e:a8:29:cc:f2:e2:
57:9c:b2:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfM/a2VAEa+WNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NzYyNDdmZjEtNWFiOS00Y2IxLThlNDktNjYxMzJhNzk3ODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP0xKcpz+lYcatoTYgitFgnYoX/NhrFVSQ6i
zIKeh/ySKRwIRj7fF0uqCdjEAXUOpt4bKSDYExk7zVt9fDAfIp+GfDcOeiE+7YXJ
okXePqLzi5OaMelun5zCPorNaAZW3SR9kXaBeop+aHyzHJTYrqsCDU2AfIYOho+M
x/7l3hZzj7eHpDjloY9IKGN6tUdd6hH733hWSXs/xXkwe3p3e5XKiiogRfq2C8qO
Vul6MdRY47AJap+vk5yx2ZLqxZ8TxflMqclyZsJYSRmEZ7B7JMLTnmEMRS40vXlG
ZXBIQJbX/tiLt0zmMOQSAoducg0gCmMD/d79OVws5yCH7+Zn9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFELKw++06MZLIR2aIGMl2dtBpQtWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQyMGZmN2EtMDA0Yy0z
YjRjLWFiMjItNTU3OGJlMTM3OGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD9q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAyUMeABqpC6SM6iJUTLqhWHEKaZXV14HE995ToqSgMoWu9BMPkZ
NNF30oOOvWJCRLDHu0P4FYJrx/qBcHJZ2Wn0xNAezJKgNcOQtDLIy209WoxWTIjX
eYOZkGCrP9IbZtD0sEeuwhHgStZHNkwnftpcH0sWHalMav+bbMxCA6R4CY1CKsvR
gXD1l1mLuVmY1WtE5r9t/r4vSG5FJrfxdK459S0coAAG468KMn1Zu9BJu1C/CbvK
8mSOl1acbdhi5QZd5NaxfZfwx7VBLAZZliJ6evUEcpioiV7FjB5fcIFyhs88l4n3
RQNkWWt67dNH4K+WR6tozp6oKczy4lecshk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:14 2025 by rpki-client