$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa File: 1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa (raw, json) Hash identifier: iTkGypPjhXToWmjKOmIcAd+rmfQngq70CGJVQ0fOhEE= Subject key identifier: D8:52:0C:CF:D9:E0:1C:01:D0:8A:27:CB:D8:A7:61:53:95:EB:27:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D20AF6C8DF57350400CE33680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 22773 IP address blocks: 2001:579:b888::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:6c:8d:f5:73:50:40:0c:e3:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=979763ae-e6be-450a-a435-ce26e0afcfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:4f:d3:9b:1b:be:24:2f:6c:49:2d:af:93: 13:0c:e5:be:57:b3:ad:71:d2:16:ee:4d:38:83:0c: 5b:fb:5a:03:22:55:db:4d:ee:c4:74:92:1f:fa:9f: 2d:7a:76:02:7a:58:b8:b1:46:bc:0d:a9:5c:22:5f: 96:73:a1:54:ec:4f:ac:e5:1d:e7:2d:40:5f:e8:aa: 8f:9c:ae:ba:5b:05:53:69:91:1d:a8:4b:60:62:21: d3:b5:85:c3:bd:39:ba:2c:c4:ef:85:c3:5d:a4:0d: d5:ad:eb:0d:0b:cb:77:a1:11:9c:d1:c6:ee:59:2b: bd:c0:df:b1:28:4b:34:03:de:02:cd:1f:33:c6:33: 12:53:48:92:15:fa:16:f2:62:dc:85:0d:fb:9d:6c: 45:e5:6b:62:81:29:bd:74:00:15:1c:09:ba:b2:96: 04:26:68:b4:53:d5:26:61:d0:b1:4b:b5:d3:79:2e: 0d:8b:50:1e:ca:f7:48:b1:a7:39:58:56:c1:cb:40: 71:45:e2:cb:39:4a:60:50:7f:fd:bb:91:7c:70:81: a1:45:e8:f6:f8:10:9b:b7:9c:8c:a9:d9:97:74:86: 5a:3f:8a:2d:96:71:1a:9f:09:7d:79:90:71:06:fb: 49:b8:d3:82:f8:d5:63:4a:2d:ec:3c:cf:ec:43:6e: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:52:0C:CF:D9:E0:1C:01:D0:8A:27:CB:D8:A7:61:53:95:EB:27:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:b888::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:be:75:68:8d:a6:0b:92:01:e8:3f:c8:53:1f:d5:2f:24:0e: e0:de:e0:94:58:54:69:0c:7a:94:b5:c4:3a:bd:8d:e3:2c:28: 8f:4b:3f:7b:0b:cf:ed:3e:4d:8f:97:65:81:ce:f7:36:6e:80: 25:85:9a:c8:ca:21:95:a3:dd:24:21:cd:64:c2:7b:8a:dd:ca: 07:d3:d3:82:0e:85:46:df:34:1d:ae:31:43:7d:2e:df:91:e2: 45:89:67:b3:0b:dd:66:f9:c6:c1:c3:82:eb:8d:20:0d:37:0c: bd:76:ba:40:e1:0b:6b:75:72:f9:2a:2c:56:4c:3c:b0:7f:89: 41:c4:eb:eb:a3:e3:09:6a:f6:8e:ff:8f:02:46:3f:af:cd:bd: f1:10:c2:9f:6c:70:42:e0:21:7f:0e:c9:9b:85:b0:31:1a:b2: c5:72:0d:2d:85:4d:fc:fb:d4:b0:f6:df:02:8e:8f:77:e8:01: 74:29:e8:6b:50:b7:78:b2:b6:13:72:ab:0b:14:8d:3b:fe:f2: 10:52:0d:5d:52:aa:2d:3b:3f:47:75:39:27:c6:9a:b0:4d:1c: 52:f9:aa:db:7e:03:60:5d:9e:c9:fd:59:98:31:41:e3:74:3b: 68:d8:31:15:6f:78:c4:5f:00:ea:9b:a7:30:25:15:4e:e4:5e: 7c:f8:f5:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0gr2yN9XNQQAzjNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OTc5NzYzYWUtZTZiZS00NTBhLWE0MzUtY2UyNmUwYWZjZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7RP05sbviQvbEktr5MTDOW+V7OtcdIW7k04 gwxb+1oDIlXbTe7EdJIf+p8tenYCeli4sUa8DalcIl+Wc6FU7E+s5R3nLUBf6KqP nK66WwVTaZEdqEtgYiHTtYXDvTm6LMTvhcNdpA3VresNC8t3oRGc0cbuWSu9wN+x KEs0A94CzR8zxjMSU0iSFfoW8mLchQ37nWxF5WtigSm9dAAVHAm6spYEJmi0U9Um YdCxS7XTeS4Ni1AeyvdIsac5WFbBy0BxReLLOUpgUH/9u5F8cIGhRej2+BCbt5yM qdmXdIZaP4otlnEanwl9eZBxBvtJuNOC+NVjSi3sPM/sQ25fawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhSDM/Z4BwB0Iony9inYVOV6ydbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWZlZjVhYWEtY2ExOS0z ZDk4LWFhYWEtOGE2N2ZiN2ExN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFebiI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJK+dWiNpguSAeg/yFMf1S8kDuDe4JRYVGkMepS1xDq9jeMsKI9L P3sLz+0+TY+XZYHO9zZugCWFmsjKIZWj3SQhzWTCe4rdygfT04IOhUbfNB2uMUN9 Lt+R4kWJZ7ML3Wb5xsHDguuNIA03DL12ukDhC2t1cvkqLFZMPLB/iUHE6+uj4wlq 9o7/jwJGP6/NvfEQwp9scELgIX8OyZuFsDEassVyDS2FTfz71LD23wKOj3foAXQp 6GtQt3iythNyqwsUjTv+8hBSDV1Sqi07P0d1OSfGmrBNHFL5qtt+A2Bdnsn9WZgx QeN0O2jYMRVveMRfAOqbpzAlFU7kXnz49e4= -----END CERTIFICATE-----Generated at Wed Mar 25 12:19:58 2026 by rpki-client