$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe05e5-1df2-3e28-ab8b-de82a2d80a86.roa File: bafe05e5-1df2-3e28-ab8b-de82a2d80a86.roa (raw, json) Hash identifier: pN1yYcQTzcCkSqWSUkNhTZ+Fn7ujoWMln55/0xVh2ts= Subject key identifier: 44:FA:7B:02:CE:6F:D1:DA:34:C1:E0:77:98:97:AF:AD:57:77:D3:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625B56C534B368D7951080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe05e5-1df2-3e28-ab8b-de82a2d80a86.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 2600:880b::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5b:56:c5:34:b3:68:d7:95:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=98e4edde-109d-4814-a4e1-cc6f56acd05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:57:95:42:a9:b7:f5:07:c5:81:1c:6b:31: 23:04:c3:a1:e4:3d:0c:85:2e:b3:8f:ac:8b:4f:66: 6d:87:89:5e:4a:04:63:ca:f6:52:cf:77:9b:92:2b: ff:49:34:8f:68:5b:5d:19:4d:b6:fd:24:d6:67:6c: 7e:89:b2:ee:49:ee:af:90:01:61:12:5e:40:a8:a3: e5:5e:fc:03:64:2d:39:e6:23:25:0b:c3:aa:21:d0: ce:64:c9:7c:a0:82:ea:a1:cf:18:31:eb:43:aa:0d: eb:98:5c:39:4f:08:1e:05:ca:94:ab:df:58:71:8a: 40:3d:12:bc:b7:9f:a6:71:46:20:5a:73:80:3e:0b: e6:79:b5:f1:68:4c:eb:65:36:6f:ea:54:8b:43:44: a0:c5:86:5d:f7:92:31:73:4d:9d:9d:e6:1a:57:f8: d7:2a:d9:ef:53:2a:85:1a:ca:94:2b:67:39:c2:83: 94:7e:aa:fd:d7:55:03:ea:be:2b:2b:f0:6d:20:44: 70:e0:c8:45:50:74:a2:60:03:3a:63:46:53:71:d6: fa:41:10:ca:c6:cd:a8:fe:8f:b0:91:8a:10:18:09: 04:16:0e:5f:18:54:25:f7:ba:2f:dd:da:08:10:88: 8e:7b:11:67:81:1b:a4:32:67:04:57:11:c2:d2:db: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FA:7B:02:CE:6F:D1:DA:34:C1:E0:77:98:97:AF:AD:57:77:D3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe05e5-1df2-3e28-ab8b-de82a2d80a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880b::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c6:d6:71:5d:6f:27:6f:49:02:2d:a1:a7:47:b8:e7:23:e6: 3d:31:4f:22:eb:ed:71:cb:0d:78:43:79:1a:50:7b:13:f9:a0: 04:37:c3:83:48:0e:66:a5:39:9a:b1:3f:6a:41:d0:23:02:7b: 45:06:75:d7:1d:d0:c3:e4:a5:3d:d8:04:e8:dc:d5:c8:b7:85: 83:8b:20:85:55:46:06:ec:06:e2:94:a5:6e:85:0a:92:92:0e: ee:fc:00:c4:f6:c8:58:fb:3d:20:eb:7f:e3:e5:da:a0:16:8f: 75:50:88:a4:5c:c2:21:1f:ef:ad:42:25:52:d4:6d:08:72:3c: 6b:54:2a:f2:ea:08:bc:cf:95:b1:10:a1:7e:dc:7f:26:5c:52: ef:6e:d6:2b:4c:e2:75:43:f9:2b:75:70:71:37:18:25:70:5b: c7:ff:4f:3f:4b:f2:d7:c4:59:02:88:9b:28:86:e9:97:00:88: b1:fe:3f:c4:63:ed:38:4a:53:9e:7b:67:75:22:ab:92:b2:51: 25:71:33:09:65:39:66:53:3d:8b:b1:2e:63:4d:da:c5:4a:6c: a3:9e:23:b7:a8:44:31:8a:ab:28:b4:2d:3d:01:f5:6f:94:51: 0c:8b:0a:ca:d0:1b:25:68:d2:21:c3:2a:7e:20:4c:eb:00:04: fe:ee:b4:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEutYltWxTSzaNeVEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OThlNGVkZGUtMTA5ZC00ODE0LWE0ZTEtY2M2ZjU2YWNkMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXZXlUKpt/UHxYEcazEjBMOh5D0MhS6zj6yL T2Zth4leSgRjyvZSz3ebkiv/STSPaFtdGU22/STWZ2x+ibLuSe6vkAFhEl5AqKPl XvwDZC055iMlC8OqIdDOZMl8oILqoc8YMetDqg3rmFw5TwgeBcqUq99YcYpAPRK8 t5+mcUYgWnOAPgvmebXxaEzrZTZv6lSLQ0SgxYZd95Ixc02dneYaV/jXKtnvUyqF GsqUK2c5woOUfqr911UD6r4rK/BtIERw4MhFUHSiYAM6Y0ZTcdb6QRDKxs2o/o+w kYoQGAkEFg5fGFQl97ov3doIEIiOexFngRukMmcEVxHC0tvPHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFET6ewLOb9HaNMHgd5iXr61Xd9PzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFmZTA1ZTUtMWRmMi0z ZTI4LWFiOGItZGU4MmEyZDgwYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqcbWcV1vJ29JAi2hp0e45yPmPTFPIuvtccsNeEN5GlB7E/mgBDfD g0gOZqU5mrE/akHQIwJ7RQZ11x3Qw+SlPdgE6NzVyLeFg4sghVVGBuwG4pSlboUK kpIO7vwAxPbIWPs9IOt/4+XaoBaPdVCIpFzCIR/vrUIlUtRtCHI8a1Qq8uoIvM+V sRChftx/JlxS727WK0zidUP5K3VwcTcYJXBbx/9PP0vy18RZAoibKIbplwCIsf4/ xGPtOEpTnntndSKrkrJRJXEzCWU5ZlM9i7EuY03axUpso54jt6hEMYqrKLQtPQH1 b5RRDIsKytAbJWjSIcMqfiBM6wAE/u600A== -----END CERTIFICATE-----Generated at Wed Nov 5 06:09:02 2025 by rpki-client