$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa File: 1187695e-f6c9-3b69-a0de-60371da5a4c3.roa (raw, json) Hash identifier: gVgL1zGWmHc5P40lyTMDBbQdhPtYVWgmCMNUgHQ2SbM= Subject key identifier: C9:81:C8:7D:B2:21:FC:E3:AA:0A:81:00:E0:3C:72:D6:3B:F0:B0:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B609CA8E7DEB21F34EDDD1500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:904b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a8:e7:de:b2:1f:34:ed:dd:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=be89ff5a-55a8-4146-a211-6cd45551cc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:03:d9:cd:86:d8:58:8d:2d:da:bd:27:38: c7:98:4b:54:52:5f:a8:ff:b4:d1:73:e4:1a:ee:bf: 2a:93:79:d6:f7:d2:75:e4:cc:14:b9:9e:da:b6:e5: cc:99:c6:3c:2f:04:c6:e4:4e:73:5f:ea:9f:1e:1f: 41:13:46:35:91:2f:2a:f1:10:5a:c1:5b:28:6d:05: 0b:0b:4f:92:e7:1a:be:18:fb:76:b1:85:69:4f:54: 52:01:d4:1a:fd:54:9c:63:e4:55:de:dc:79:c5:b7: cd:7f:42:bd:bb:8f:78:f4:3d:26:72:d7:eb:47:f3: c4:29:da:25:4f:37:e6:00:10:1d:d8:2b:e4:4c:51: 3c:f7:5e:d8:0a:2c:79:3e:ba:3a:ee:81:2f:c1:46: ef:7c:39:14:5c:bb:00:4c:69:58:5c:2a:47:56:c0: b3:5c:38:2d:90:80:b3:62:3b:bd:71:9d:e4:de:4b: 2f:3d:f9:37:0e:47:63:be:47:5d:1e:42:a7:67:dc: b1:72:9f:67:ea:50:73:f0:55:40:d5:96:1d:94:df: e8:0c:7a:56:50:74:2c:f7:29:d5:01:7b:42:73:69: 74:6e:e8:3e:d2:9e:b6:25:b4:16:41:12:c8:23:ee: c0:05:11:8d:95:2e:22:c7:bf:10:b8:74:01:ca:d8: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:81:C8:7D:B2:21:FC:E3:AA:0A:81:00:E0:3C:72:D6:3B:F0:B0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:904b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c6:a6:85:b7:5b:e0:76:d8:cb:3a:93:9d:4e:99:e6:ec:09: 23:e1:9e:79:9e:5c:13:31:09:dc:1c:cd:be:8e:7f:60:c4:6b: 6c:e7:e6:ef:f1:5e:80:6b:d3:54:2c:0c:ee:bd:53:7f:d3:f4: 29:4b:62:0b:ae:ab:35:ab:29:7a:5a:f3:83:d4:27:ff:7c:4a: f3:ae:0b:06:12:88:5b:ce:4d:ad:0e:d1:b0:da:cd:1e:a3:16: 1d:21:9e:84:8a:7e:f4:54:09:bb:05:4f:26:67:ce:71:0c:dc: ac:86:ab:a6:ce:c6:79:0f:c0:c5:48:54:95:d9:f2:f0:b3:eb: ac:c0:2b:05:9b:69:ce:f9:8b:ab:fc:c3:1a:c7:39:a8:f5:6e: 4b:66:e1:1b:ed:89:02:42:a1:af:4b:32:0b:51:92:2c:70:df: be:01:b5:7e:d3:bc:a0:25:3e:76:e1:45:2e:c0:37:29:7d:89: 9f:9d:1b:b2:fc:36:2a:4a:ad:61:de:0c:2e:0d:92:f5:b8:a3: 14:61:c2:ab:40:77:77:25:52:15:bf:9d:30:46:66:a2:81:51: 0b:18:cf:66:00:a4:45:36:7d:42:08:23:8e:ab:9a:d6:b7:2c: 4c:57:8f:e5:97:86:57:7d:89:5d:f3:81:6a:b0:b6:78:58:b0: 76:a5:ff:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtgnKjn3rIfNO3dFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YmU4OWZmNWEtNTVhOC00MTQ2LWEyMTEtNmNkNDU1NTFjYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnoD2c2G2FiNLdq9JzjHmEtUUl+o/7TRc+Qa 7r8qk3nW99J15MwUuZ7atuXMmcY8LwTG5E5zX+qfHh9BE0Y1kS8q8RBawVsobQUL C0+S5xq+GPt2sYVpT1RSAdQa/VScY+RV3tx5xbfNf0K9u4949D0mctfrR/PEKdol TzfmABAd2CvkTFE8917YCix5Pro67oEvwUbvfDkUXLsATGlYXCpHVsCzXDgtkICz Yju9cZ3k3ksvPfk3DkdjvkddHkKnZ9yxcp9n6lBz8FVA1ZYdlN/oDHpWUHQs9ynV AXtCc2l0bug+0p62JbQWQRLII+7ABRGNlS4ix78QuHQBytgouQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmByH2yIfzjqgqBAOA8ctY78LDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTE4NzY5NWUtZjZjOS0z YjY5LWEwZGUtNjAzNzFkYTVhNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeZBL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbGpoW3W+B22Ms6k51OmebsCSPhnnmeXBMxCdwczb6Of2DEa2zn 5u/xXoBr01QsDO69U3/T9ClLYguuqzWrKXpa84PUJ/98SvOuCwYSiFvOTa0O0bDa zR6jFh0hnoSKfvRUCbsFTyZnznEM3KyGq6bOxnkPwMVIVJXZ8vCz66zAKwWbac75 i6v8wxrHOaj1bktm4RvtiQJCoa9LMgtRkixw374BtX7TvKAlPnbhRS7ANyl9iZ+d G7L8NipKrWHeDC4NkvW4oxRhwqtAd3clUhW/nTBGZqKBUQsYz2YApEU2fUIII46r mta3LExXj+WXhld9iV3zgWqwtnhYsHal/6E= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:16 2025 by rpki-client