$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fa17f42-af68-320b-830f-f847dbfee22d.roa File: 2fa17f42-af68-320b-830f-f847dbfee22d.roa (raw, json) Hash identifier: 7B/SmDHJBxpwAoRtst+T1pA5sHrEvgy4wS5RvDXub5M= Subject key identifier: 8A:14:AE:C4:B2:4E:FD:6E:62:16:E0:F9:56:DE:62:CA:E8:2E:CA:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01E0156B44D12ADD721000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fa17f42-af68-320b-830f-f847dbfee22d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:8524::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:e0:15:6b:44:d1:2a:dd:72:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=0da5f1c3-d187-40c2-ac41-ef93e15a8641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:e8:61:67:1d:38:ae:75:fc:d0:ab:bf:ad: 03:32:4b:21:a5:6a:cb:c8:12:ad:f7:da:fb:82:0e: 54:5f:f4:2d:b7:f3:e0:b0:7f:03:0a:bd:93:45:15: 72:aa:cc:bb:7b:44:6e:9e:35:34:fc:ab:b5:e7:e9: 73:22:86:38:83:fe:a6:54:69:86:eb:4c:3a:8c:74: a7:7e:06:5e:0a:d3:92:4f:54:44:d8:14:6e:f2:c5: 59:14:a7:2b:65:0b:ca:b8:0e:55:f0:e6:bf:b4:93: 81:c0:f5:07:e9:2a:71:2a:93:ca:2f:3a:c3:05:52: 2b:49:73:01:70:ce:37:d5:9e:5e:7f:8c:5b:f3:d2: 27:99:4f:14:7d:80:93:b6:0e:0a:27:2a:a7:21:d9: 94:91:b1:ef:df:07:34:27:d9:05:9b:5e:6b:ab:0b: 20:3f:a2:34:34:fa:b4:bc:e6:b4:ab:e2:ad:b9:15: 64:b3:ac:ab:d7:1b:3e:df:7b:bc:23:a4:a3:ea:c4: 07:ef:3d:77:cf:ee:3b:1d:17:2d:89:30:d7:c0:88: ea:39:7c:e5:62:8e:8a:b5:65:46:c0:56:ca:f1:17: 42:a6:77:4a:50:da:49:d2:17:a5:ee:5b:91:8e:04: 63:3a:89:62:9b:80:03:6a:65:2e:ad:ca:cc:fe:42: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:AE:C4:B2:4E:FD:6E:62:16:E0:F9:56:DE:62:CA:E8:2E:CA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fa17f42-af68-320b-830f-f847dbfee22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:8524::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e8:05:cd:e7:70:71:85:27:fd:4f:27:aa:16:53:19:89:5c: 7d:59:7f:13:a3:01:47:bf:ec:31:ea:1c:c7:d2:66:d9:39:29: 38:f1:e0:f7:be:1f:9b:fd:71:cc:30:c9:dd:00:5e:31:1f:a7: 20:79:48:23:e4:6a:e2:65:da:db:7c:3c:97:3e:c7:74:d3:e9: 21:14:b4:ff:51:5c:32:04:f4:91:04:07:8b:70:ec:cd:c5:b7: 10:e7:87:70:94:b4:fe:0c:b9:11:07:7e:45:f0:1b:de:db:d5: 48:aa:62:8b:13:61:ab:37:9a:22:e5:60:29:5f:cc:d1:fd:2c: f6:fc:58:23:2f:b2:1c:be:f0:fb:35:8e:68:f1:41:b5:78:22: 5b:f8:88:40:9f:c8:e4:3d:bc:81:e9:75:58:49:a4:45:a8:e0: 8d:c3:04:88:c7:62:89:25:7a:72:23:04:bf:ab:81:ec:12:76: b8:ee:45:64:69:a5:d9:9a:8b:3d:c4:b9:51:3b:5e:8d:18:c3: 7e:5a:05:53:1e:90:28:f8:74:e8:c2:40:10:90:13:8f:d1:32: be:40:95:63:03:6e:05:e0:a9:01:6a:bf:01:53:11:e1:e6:96: d6:ee:de:f9:fb:02:82:65:33:6b:73:d0:34:bf:29:f6:35:f6: 9e:9e:02:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeAVa0TRKt1yEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGRhNWYxYzMtZDE4Ny00MGMyLWFjNDEtZWY5M2UxNWE4NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbfoYWcdOK51/NCrv60DMkshpWrLyBKt99r7 gg5UX/Qtt/PgsH8DCr2TRRVyqsy7e0RunjU0/Ku15+lzIoY4g/6mVGmG60w6jHSn fgZeCtOST1RE2BRu8sVZFKcrZQvKuA5V8Oa/tJOBwPUH6SpxKpPKLzrDBVIrSXMB cM431Z5ef4xb89InmU8UfYCTtg4KJyqnIdmUkbHv3wc0J9kFm15rqwsgP6I0NPq0 vOa0q+KtuRVks6yr1xs+33u8I6Sj6sQH7z13z+47HRctiTDXwIjqOXzlYo6KtWVG wFbK8RdCpndKUNpJ0hel7luRjgRjOolim4ADamUurcrM/kJMrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoUrsSyTv1uYhbg+VbeYsroLsrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmZhMTdmNDItYWY2OC0z MjBiLTgzMGYtZjg0N2RiZmVlMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYUk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXoBc3ncHGFJ/1PJ6oWUxmJXH1ZfxOjAUe/7DHqHMfSZtk5KTjx 4Pe+H5v9ccwwyd0AXjEfpyB5SCPkauJl2tt8PJc+x3TT6SEUtP9RXDIE9JEEB4tw 7M3FtxDnh3CUtP4MuREHfkXwG97b1UiqYosTYas3miLlYClfzNH9LPb8WCMvshy+ 8Ps1jmjxQbV4Ilv4iECfyOQ9vIHpdVhJpEWo4I3DBIjHYoklenIjBL+rgewSdrju RWRppdmaiz3EuVE7Xo0Yw35aBVMekCj4dOjCQBCQE4/RMr5AlWMDbgXgqQFqvwFT EeHmltbu3vn7AoJlM2tz0DS/KfY19p6eAiw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:19 2025 by rpki-client