$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa File: ceb54af2-67ab-38bf-aac4-925c88aca251.roa (raw, json) Hash identifier: V6GJLk7yWu1CUqg+VqiiQlDI7E1lhhQO8pBsPJaWUL0= Subject key identifier: 58:F1:E7:DF:28:FB:1A:19:D4:9D:BE:1D:C7:D8:C3:91:DE:A5:53:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0220601F52EEFA3886A460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:880a:330::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:20:60:1f:52:ee:fa:38:86:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=595cabf5-cfd6-4fa3-b806-1403887490f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:72:1b:ac:a4:d3:1c:d5:0c:59:cd:9c:5b: d2:53:6d:f3:35:0b:1d:7b:17:be:9c:11:23:2c:e7: 88:d7:42:ac:9e:2d:23:25:fc:6f:fc:ee:89:19:d4: 9a:fe:2e:18:1c:c2:80:6a:ec:fd:66:fa:94:81:ce: 75:5c:c2:af:ac:77:36:f3:58:ea:c4:68:b3:29:33: 26:00:4d:4e:a6:ce:1a:63:e4:3d:1b:55:5b:ee:d8: 41:b6:11:e2:e5:10:2f:68:26:4b:e2:ca:bf:7d:c4: 9d:9f:70:a2:3a:b9:e5:ef:a6:3f:a5:e0:aa:18:9f: 97:89:2e:d3:28:08:67:cf:43:60:bb:33:c5:53:19: eb:b3:e8:9f:2c:ed:64:b3:ef:a0:60:e4:fc:0a:db: 1d:fa:94:f9:98:cc:e2:2c:3f:30:5d:02:9c:bf:19: 45:e0:5e:b5:13:ba:d7:0e:f6:c3:ee:72:2e:0f:e7: 83:04:9e:3b:8d:bc:7b:34:e6:70:2a:c8:a8:84:02: a5:83:63:04:48:3f:23:27:30:a0:f1:78:f4:cc:8d: 6a:e5:6b:19:cf:05:14:b8:35:0d:63:dc:2a:0a:7a: 98:96:29:bf:13:d7:90:b1:23:fc:53:8f:21:75:c8: 75:fd:89:93:80:e2:ee:fd:b2:57:e2:7e:70:df:6e: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F1:E7:DF:28:FB:1A:19:D4:9D:BE:1D:C7:D8:C3:91:DE:A5:53:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:330::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:53:b3:41:46:50:a0:b4:4a:0b:b4:7f:83:08:26:84:34: a3:b5:c4:65:0c:bf:f3:a6:cb:13:fd:1b:bb:32:90:3a:0e:58: 5f:c6:f4:06:9c:40:5e:0d:5d:df:71:9f:64:e3:1c:60:a2:0b: f7:13:38:c6:53:27:18:37:c4:f1:04:7f:ee:09:b2:83:d4:3e: d8:c0:ae:6f:91:07:97:31:00:0c:fc:47:53:80:cc:8f:78:10: f4:34:76:e0:07:44:fd:1a:4c:e2:8a:04:c2:b6:c0:59:04:ab: 69:6b:1f:22:f9:5e:c9:62:62:b6:22:0d:e1:40:b9:0d:72:f0: b2:88:0d:55:e8:af:6d:5a:62:5c:f7:f9:40:e6:ff:e2:e3:a2: 70:a1:24:ac:49:25:7d:c0:d2:a2:33:d4:b4:41:f3:66:00:a0: 73:37:a8:09:f7:12:1e:86:43:20:7d:ee:5a:58:de:b2:0e:da: d7:d3:26:7d:7c:ed:92:da:78:5b:03:6a:13:d2:d5:be:ba:2f: e6:27:9a:b4:f4:b7:84:b2:2f:57:78:03:88:52:2b:0f:6b:80: 7a:24:2b:57:1e:8d:41:ad:1d:db:4b:69:38:4e:80:0b:91:bb: 1c:71:65:02:06:2f:95:61:b8:31:83:c3:b6:80:74:14:94:3c: 42:b9:aa:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAiBgH1Lu+jiGpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTk1Y2FiZjUtY2ZkNi00ZmEzLWI4MDYtMTQwMzg4NzQ5MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswlyG6yk0xzVDFnNnFvSU23zNQsdexe+nBEj LOeI10Ksni0jJfxv/O6JGdSa/i4YHMKAauz9ZvqUgc51XMKvrHc281jqxGizKTMm AE1Ops4aY+Q9G1Vb7thBthHi5RAvaCZL4sq/fcSdn3CiOrnl76Y/peCqGJ+XiS7T KAhnz0NguzPFUxnrs+ifLO1ks++gYOT8Ctsd+pT5mMziLD8wXQKcvxlF4F61E7rX DvbD7nIuD+eDBJ47jbx7NOZwKsiohAKlg2MESD8jJzCg8Xj0zI1q5WsZzwUUuDUN Y9wqCnqYlim/E9eQsSP8U48hdch1/YmTgOLu/bJX4n5w32542QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFjx598o+xoZ1J2+HcfYw5HepVNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ViNTRhZjItNjdhYi0z OGJmLWFhYzQtOTI1Yzg4YWNhMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgMw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNPU7NBRlCgtEoLtH+DCCaENKO1xGUMv/OmyxP9G7sykDoOWF/G 9AacQF4NXd9xn2TjHGCiC/cTOMZTJxg3xPEEf+4JsoPUPtjArm+RB5cxAAz8R1OA zI94EPQ0duAHRP0aTOKKBMK2wFkEq2lrHyL5XsliYrYiDeFAuQ1y8LKIDVXor21a Ylz3+UDm/+LjonChJKxJJX3A0qIz1LRB82YAoHM3qAn3Eh6GQyB97lpY3rIO2tfT Jn187ZLaeFsDahPS1b66L+YnmrT0t4SyL1d4A4hSKw9rgHokK1cejUGtHdtLaThO gAuRuxxxZQIGL5VhuDGDw7aAdBSUPEK5qk4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:14 2025 by rpki-client