$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddca6b76-8af7-302c-98ec-d178154f3fbe.roa File: ddca6b76-8af7-302c-98ec-d178154f3fbe.roa (raw, json) Hash identifier: ih1CcEmbYD4HCTbWJS8BOVnmcHKX6CmRgmFrqHy4hbI= Subject key identifier: 2D:CF:0C:1B:91:20:02:1B:2E:AD:75:48:7E:4C:62:E8:D9:56:77:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BA667B1430CA162E5BBFBE900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddca6b76-8af7-302c-98ec-d178154f3fbe.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 2600:880a:c000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b1:43:0c:a1:62:e5:bb:fb:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a8f049ec-af09-4d58-ad15-4fb150761799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:f3:30:8a:8f:bf:c0:51:36:a0:3e:df:f6: 08:e8:6e:c0:9c:b8:bd:fe:74:cf:44:a3:37:46:e8: ca:8a:fd:c9:a8:82:e8:17:f8:d4:23:93:23:b3:d9: 63:fc:f4:87:6b:7c:a8:dd:b0:d5:fd:0e:ce:47:db: 62:e4:90:3a:7d:e7:9d:c9:55:09:2f:76:5c:72:51: 31:2c:ad:06:95:9b:50:fd:b5:c1:87:32:dd:94:1a: f4:25:b8:df:9f:3e:e7:e1:50:c1:df:f9:40:03:5d: 89:6d:3e:51:27:71:7e:dd:ca:4f:f2:a7:bb:90:9d: 0c:a8:4b:cf:f2:ef:7b:d9:5b:70:36:33:28:a3:af: 29:27:8c:68:8c:60:04:0f:82:ee:a5:60:11:ee:50: 3a:35:71:59:ae:92:5f:d3:2e:1a:b0:bb:58:23:a1: 98:70:27:0d:ef:81:3d:fa:ab:d2:2d:46:db:a4:67: 7c:b8:80:23:7f:73:df:e3:fe:64:4b:f5:0b:21:f2: 2e:97:e4:79:5c:00:84:d6:ac:07:47:94:58:c6:39: da:6b:f0:52:61:85:eb:ac:b3:35:8e:9d:f5:3c:f2: 9d:ae:7f:ee:4c:fc:86:bf:e2:8c:03:11:ac:a7:cf: fd:d5:94:47:6a:c9:96:c4:8a:07:e5:30:26:2a:bc: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CF:0C:1B:91:20:02:1B:2E:AD:75:48:7E:4C:62:E8:D9:56:77:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddca6b76-8af7-302c-98ec-d178154f3fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:c000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6f:44:89:75:6b:a3:ff:0a:c8:56:eb:2f:70:bb:5a:2a:3a: 68:b4:d0:f3:3d:14:ac:af:7e:40:23:5a:90:6f:5a:e8:1e:64: cd:60:35:73:c8:15:77:83:ed:26:5a:ba:ce:8e:21:ff:5e:24: cd:f7:97:fe:8a:16:de:f2:0b:88:5f:02:57:d6:c6:73:67:ad: 58:01:08:e2:f3:18:ca:2f:2c:53:79:69:52:c6:20:72:8b:25: 14:12:33:7d:a9:5f:6c:b7:cf:40:c2:85:20:3d:58:ab:47:98: 7e:5c:a1:df:50:4c:fa:6e:fc:bc:34:a8:37:f9:95:3c:b4:0b: e8:4d:7b:fb:dc:72:3d:cc:99:89:46:ae:fd:77:31:8f:71:4b: a3:48:09:b6:89:d1:93:22:f9:e7:ec:28:5c:fd:e8:ff:78:61: 37:0f:0c:09:ae:15:a2:20:2a:68:1c:d0:0b:f9:a4:d2:a4:d1: 8f:d4:b1:99:1d:f9:91:27:50:8d:6e:24:35:06:3e:5b:1a:35: 70:c0:7f:c8:0e:60:21:93:7d:b5:59:5d:a9:d0:59:25:a9:fb: 34:32:16:da:7a:2c:2f:63:52:e3:13:6a:70:11:76:4b:83:73: 58:87:ec:32:3e:bb:3b:3b:15:f9:ee:eb:25:1e:54:10:bd:35: d8:43:ca:ae -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEumZ7FDDKFi5bv76QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YThmMDQ5ZWMtYWYwOS00ZDU4LWFkMTUtNGZiMTUwNzYxNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbzMIqPv8BRNqA+3/YI6G7AnLi9/nTPRKM3 RujKiv3JqILoF/jUI5Mjs9lj/PSHa3yo3bDV/Q7OR9ti5JA6feedyVUJL3ZcclEx LK0GlZtQ/bXBhzLdlBr0Jbjfnz7n4VDB3/lAA12JbT5RJ3F+3cpP8qe7kJ0MqEvP 8u972VtwNjMoo68pJ4xojGAED4LupWAR7lA6NXFZrpJf0y4asLtYI6GYcCcN74E9 +qvSLUbbpGd8uIAjf3Pf4/5kS/ULIfIul+R5XACE1qwHR5RYxjnaa/BSYYXrrLM1 jp31PPKdrn/uTPyGv+KMAxGsp8/91ZRHasmWxIoH5TAmKrzPewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC3PDBuRIAIbLq11SH5MYujZVneOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRjYTZiNzYtOGFmNy0z MDJjLTk4ZWMtZDE3ODE1NGYzZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICsAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABm9EiXVro/8KyFbrL3C7Wio6aLTQ8z0UrK9+QCNakG9a6B5kzWA1 c8gVd4PtJlq6zo4h/14kzfeX/ooW3vILiF8CV9bGc2etWAEI4vMYyi8sU3lpUsYg coslFBIzfalfbLfPQMKFID1Yq0eYflyh31BM+m78vDSoN/mVPLQL6E17+9xyPcyZ iUau/Xcxj3FLo0gJtonRkyL55+woXP3o/3hhNw8MCa4VoiAqaBzQC/mk0qTRj9Sx mR35kSdQjW4kNQY+Wxo1cMB/yA5gIZN9tVldqdBZJan7NDIW2nosL2NS4xNqcBF2 S4NzWIfsMj67OzsV+e7rJR5UEL012EPKrg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:54 2025 by rpki-client