$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9227d35e-a003-36a8-958c-0bb8cc4a9c66.roa File: 9227d35e-a003-36a8-958c-0bb8cc4a9c66.roa (raw, json) Hash identifier: csALUI9EOnlSLVnycCPbh59Vl5c4nLWNPRLkj6pO2rw= Subject key identifier: 3C:77:05:57:BB:02:83:ED:BF:95:86:F1:F7:3E:9C:9B:92:82:94:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01E6E55710E43B695DD0C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9227d35e-a003-36a8-958c-0bb8cc4a9c66.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:2600::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:e6:e5:57:10:e4:3b:69:5d:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ff30f1ce-ad38-484c-8e8f-44f60bd7b0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:a0:86:d5:9f:c6:39:b4:59:e1:08:70:12: ed:d0:3d:5b:2a:67:3a:45:31:7c:40:40:be:15:9b: 25:f9:a2:5d:3a:75:30:4b:0a:34:01:e9:ed:0b:19: 93:a6:53:2f:71:07:b7:bf:0f:02:7c:20:cb:2d:27: 55:24:ca:9f:08:a0:5f:f2:f0:b9:96:b6:88:4b:a9: 24:b7:59:4f:2e:7c:d0:99:0e:91:12:28:ad:eb:d8: 3d:d2:c5:21:c1:b6:45:01:5c:2a:e1:14:40:7a:fb: b3:70:bc:aa:72:82:92:a9:31:2b:2c:42:55:32:f4: 10:d8:95:ab:00:af:82:61:f7:46:63:5a:34:9d:50: 72:82:b6:86:d9:74:2b:ab:71:b6:f4:a9:68:e8:78: 9c:69:14:7a:2a:36:52:3e:0f:d0:6e:e2:a5:62:70: a3:ab:08:c5:59:09:0b:8c:aa:88:6b:ec:cc:64:c5: 61:4d:dc:fb:b0:b4:fa:22:ef:6c:73:3d:f9:c2:5e: 71:b1:e7:47:a1:2c:b1:9b:0d:ab:5c:50:29:24:76: 9d:e3:5f:43:60:a5:bc:4c:35:0a:0a:81:7c:09:b8: 59:92:d2:07:a7:58:24:75:89:d8:fa:12:c3:d5:54: 05:5e:4b:fc:c2:aa:19:4b:03:2f:72:ce:f5:7c:54: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:05:57:BB:02:83:ED:BF:95:86:F1:F7:3E:9C:9B:92:82:94:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9227d35e-a003-36a8-958c-0bb8cc4a9c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2600::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:20:55:2d:66:21:d5:32:2d:f3:81:d0:a2:24:a6:f3:0f:f9: 15:9e:bc:78:6b:98:ca:a4:9f:1a:04:6a:1b:87:75:fb:b1:2c: 0b:da:e0:84:71:1c:fa:78:bb:7f:01:ae:31:1d:3b:dd:d8:30: a6:05:f0:68:bd:1a:9d:0f:03:72:19:0d:24:e2:af:24:bd:0d: 60:b3:b7:c6:8c:cb:ab:1c:a4:42:c3:ee:b0:7a:7a:7b:71:84: 31:34:10:96:6c:ef:07:72:80:5a:5b:a7:9a:72:33:64:d1:ee: 63:1a:21:5e:cb:f8:79:8d:96:4e:1e:83:43:0b:ed:65:62:c9: d7:4a:f1:11:1c:eb:cd:f4:98:e3:17:63:e0:ad:94:20:eb:31: b8:3a:7f:87:e9:c8:52:26:06:8b:07:34:e2:1a:eb:f3:69:36: 37:7c:67:e9:b6:64:af:e1:c8:ae:b4:99:b4:47:54:38:e5:83: 43:27:42:ea:44:8f:1e:ce:e7:de:98:ea:07:1c:2c:96:38:9b: 0f:e9:cb:cc:1e:df:db:09:69:db:7d:79:75:fc:f6:01:40:26: d6:cb:de:3f:11:bb:c0:16:fb:ce:19:8f:2b:ed:cf:24:6f:75: bd:4b:04:88:79:5d:3d:89:ac:26:45:6d:17:96:18:11:c3:55: 8b:19:a3:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeblVxDkO2ld0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZmYzMGYxY2UtYWQzOC00ODRjLThlOGYtNDRmNjBiZDdiMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFGghtWfxjm0WeEIcBLt0D1bKmc6RTF8QEC+ FZsl+aJdOnUwSwo0AentCxmTplMvcQe3vw8CfCDLLSdVJMqfCKBf8vC5lraIS6kk t1lPLnzQmQ6REiit69g90sUhwbZFAVwq4RRAevuzcLyqcoKSqTErLEJVMvQQ2JWr AK+CYfdGY1o0nVBygraG2XQrq3G29Klo6HicaRR6KjZSPg/QbuKlYnCjqwjFWQkL jKqIa+zMZMVhTdz7sLT6Iu9scz35wl5xsedHoSyxmw2rXFApJHad419DYKW8TDUK CoF8CbhZktIHp1gkdYnY+hLD1VQFXkv8wqoZSwMvcs71fFTO8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDx3BVe7AoPtv5WG8fc+nJuSgpTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTIyN2QzNWUtYTAwMy0z NmE4LTk1OGMtMGJiOGNjNGE5YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIACYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQgVS1mIdUyLfOB0KIkpvMP+RWevHhrmMqknxoEahuHdfuxLAva 4IRxHPp4u38BrjEdO93YMKYF8Gi9Gp0PA3IZDSTiryS9DWCzt8aMy6scpELD7rB6 entxhDE0EJZs7wdygFpbp5pyM2TR7mMaIV7L+HmNlk4eg0ML7WViyddK8REc6830 mOMXY+CtlCDrMbg6f4fpyFImBosHNOIa6/NpNjd8Z+m2ZK/hyK60mbRHVDjlg0Mn QupEjx7O596Y6gccLJY4mw/py8we39sJadt9eXX89gFAJtbL3j8Ru8AW+84Zjyvt zyRvdb1LBIh5XT2JrCZFbReWGBHDVYsZo1M= -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:18 2025 by rpki-client