$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac96aca-bb24-33f2-a674-3bc4c116aced.roa File: 9ac96aca-bb24-33f2-a674-3bc4c116aced.roa (raw, json) Hash identifier: 7qnsNuesTXmWb2pS4n4xmpYU+MxEluQ/9uMb9Kgjza4= Subject key identifier: 89:DF:0E:76:7D:FC:88:CB:53:5E:DA:81:45:56:CA:93:70:06:FA:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F02224E8F8675A094109580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac96aca-bb24-33f2-a674-3bc4c116aced.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:820::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:22:4e:8f:86:75:a0:94:10:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8ff53811-52f0-44c2-91a4-fba212594577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:f7:4b:0c:0d:96:13:d8:f7:dc:75:cb:f6: b3:32:89:0f:12:3c:09:7d:35:05:63:e2:50:39:9e: 9d:a7:32:af:bb:78:a9:14:5c:63:18:bf:a8:16:d6: 59:3f:52:b6:6d:d2:1e:ad:af:b5:1c:0b:8c:1f:cd: 0e:8a:f6:91:f4:a2:ac:a9:e1:c7:9a:76:2f:d8:8b: 15:2d:e7:1c:e1:30:23:8f:49:be:aa:dc:fb:0f:d3: 0b:73:de:88:d6:10:90:8e:69:2f:73:d2:cd:26:1e: f4:ce:96:3a:2b:95:83:4f:25:c6:58:ad:51:2d:1b: 25:00:03:9f:8f:1e:bd:95:5a:cd:67:76:83:93:5d: 98:42:f4:d5:84:5f:c3:79:5e:11:aa:3b:e7:69:2f: 98:11:92:e2:ba:db:3e:ad:fb:a3:64:9c:cf:d6:4a: 03:94:d8:02:75:5a:26:74:2a:9f:af:e5:c1:78:07: 52:f3:23:32:c1:89:00:80:37:43:a5:11:7e:8a:10: 23:13:f9:2d:54:dd:b5:ef:96:8f:f3:ba:6f:5f:cf: 13:36:68:48:05:16:f5:be:22:ba:c8:d6:3d:d6:8f: 2d:bc:6c:2d:5b:cc:a7:2a:48:47:87:87:ef:b5:80: 85:a8:19:7f:c5:59:ca:a0:e9:ca:d0:9b:95:f0:1c: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DF:0E:76:7D:FC:88:CB:53:5E:DA:81:45:56:CA:93:70:06:FA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ac96aca-bb24-33f2-a674-3bc4c116aced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:820::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a3:2b:08:3b:34:21:48:d2:f0:45:34:18:e8:f8:90:b6:55: 55:b0:c3:bd:66:fa:a3:39:a8:a6:7d:53:71:a5:a9:c7:6b:ce: ba:09:52:b6:92:d9:3f:56:e1:55:7a:0d:d1:86:1d:24:97:9a: 4d:8d:24:33:63:33:e4:af:83:c2:ff:23:6c:6c:71:c5:1c:81: 2d:e4:5d:6e:f4:2b:97:d8:58:ff:2e:c2:99:1f:0f:97:ff:b2: 87:43:be:41:43:6f:f9:e0:c5:eb:17:32:33:4d:bf:2e:0e:f0: 99:74:de:68:b0:75:24:5d:d3:dd:c4:fa:a4:94:f0:b7:0a:82: e7:0b:0e:b6:0a:4a:f3:91:d2:5f:eb:87:e5:6e:a4:a7:03:5e: fc:bf:b7:c6:a3:5d:4a:75:d8:99:64:bd:be:28:71:92:0c:ac: 49:fc:a8:64:bf:66:fa:46:24:05:e0:84:ac:89:96:d7:ca:a0: 85:8d:ac:e8:1c:d4:e7:1f:11:85:bf:b0:f0:b0:14:2f:de:32: 5a:ff:e4:a0:c2:13:92:07:8d:03:ad:b1:be:75:7c:23:b5:07: 99:ec:e6:d4:a1:ba:ac:19:3e:78:50:b9:68:cc:98:93:c1:a8: fd:f7:c1:e8:3b:40:c5:fd:0d:ae:a3:67:47:93:e1:d3:81:d9: b2:bc:ae:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiJOj4Z1oJQQlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGZmNTM4MTEtNTJmMC00NGMyLTkxYTQtZmJhMjEyNTk0NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcr3SwwNlhPY99x1y/azMokPEjwJfTUFY+JQ OZ6dpzKvu3ipFFxjGL+oFtZZP1K2bdIera+1HAuMH80OivaR9KKsqeHHmnYv2IsV Lecc4TAjj0m+qtz7D9MLc96I1hCQjmkvc9LNJh70zpY6K5WDTyXGWK1RLRslAAOf jx69lVrNZ3aDk12YQvTVhF/DeV4RqjvnaS+YEZLiuts+rfujZJzP1koDlNgCdVom dCqfr+XBeAdS8yMywYkAgDdDpRF+ihAjE/ktVN2175aP87pvX88TNmhIBRb1viK6 yNY91o8tvGwtW8ynKkhHh4fvtYCFqBl/xVnKoOnK0JuV8BxG7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFInfDnZ9/IjLU17agUVWypNwBvrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFjOTZhY2EtYmIyNC0z M2YyLWE2NzQtM2JjNGMxMTZhY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICggg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACijKwg7NCFI0vBFNBjo+JC2VVWww71m+qM5qKZ9U3GlqcdrzroJ UraS2T9W4VV6DdGGHSSXmk2NJDNjM+Svg8L/I2xsccUcgS3kXW70K5fYWP8uwpkf D5f/sodDvkFDb/ngxesXMjNNvy4O8Jl03miwdSRd093E+qSU8LcKgucLDrYKSvOR 0l/rh+VupKcDXvy/t8ajXUp12Jlkvb4ocZIMrEn8qGS/ZvpGJAXghKyJltfKoIWN rOgc1OcfEYW/sPCwFC/eMlr/5KDCE5IHjQOtsb51fCO1B5ns5tShuqwZPnhQuWjM mJPBqP33weg7QMX9Da6jZ0eT4dOB2bK8rsY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:28 2025 by rpki-client