$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa File: 389efdd0-3f48-3fce-9374-6a5befd823be.roa (raw, json) Hash identifier: 4WsGe/QH/2RmRSpv7DnVJE92/c0icwk08WYL7M6pFtg= Subject key identifier: 42:C5:69:62:C9:7C:8C:E8:D6:CF:70:1F:6E:9F:D4:11:C5:30:74:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B3DBA22D4A94093277645E840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:a088::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:22:d4:a9:40:93:27:76:45:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=dbb4183e-a73a-4761-ba79-6d992980179f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:a2:7d:8b:52:11:62:7a:1a:81:05:4e:73: c9:9a:36:a3:d5:db:05:5a:57:6d:3b:de:ee:2e:4f: 61:3d:36:d4:ef:48:48:1f:6a:f3:cc:33:df:99:cd: f9:09:d6:a8:db:ce:1a:3c:29:45:6f:77:eb:40:2e: 95:28:dc:36:cc:fa:71:a3:fc:a0:55:8b:15:28:37: 39:5c:47:df:0a:eb:df:af:e7:c7:e4:1b:ee:7d:5c: e3:d9:7b:9b:81:c4:1e:71:3e:76:6f:3d:1b:c2:e7: 6e:8c:25:b2:8d:6e:19:16:aa:9d:20:42:c1:88:64: d0:fa:33:a3:f4:f0:c3:42:a9:10:61:68:39:94:c1: b8:52:07:b0:c1:f1:30:26:34:8a:ba:94:c2:70:84: 3a:c2:c3:ad:5e:50:eb:e3:d3:0d:e6:b7:af:27:6b: f7:de:c2:9c:27:cf:78:9d:dc:db:1f:ab:1c:74:f2: 9d:42:ea:08:23:23:99:a4:fc:fb:66:68:5a:10:0f: 7d:80:6d:52:8e:63:d5:54:55:65:f7:e3:58:59:2f: 86:b6:97:7a:34:92:c9:85:3b:c2:04:c5:39:40:14: 09:6e:80:9b:19:9d:29:3e:71:a1:91:9e:64:6e:06: 2b:d6:c2:97:16:43:93:07:0e:ee:09:21:af:7b:1f: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:69:62:C9:7C:8C:E8:D6:CF:70:1F:6E:9F:D4:11:C5:30:74:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:a088::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8e:70:14:b0:cf:31:7e:cb:ee:a1:e3:1e:a2:fb:fb:30:8d: 83:b9:f2:f6:4f:24:36:15:6c:11:f7:5f:a7:27:80:c7:a3:ce: e9:47:84:97:64:ee:08:9b:9a:69:3d:a6:91:eb:92:64:c5:84: 70:f0:86:6e:35:5d:02:b0:4a:ab:6b:04:a4:7f:22:42:c0:ce: e7:63:0d:93:36:81:b3:7a:24:f2:8a:35:82:5c:a3:8b:18:8a: 6a:e1:1d:04:8e:ab:22:80:09:08:ff:fa:da:76:cc:6d:f1:e2: 8e:bc:e0:fe:30:e8:ba:28:13:88:c9:b0:9f:bf:f3:56:ab:13: d2:a7:fa:32:12:f0:68:36:be:d2:8a:16:91:ac:5f:77:b9:41: 5b:c9:ee:ff:ac:43:4f:d1:1c:9d:35:f5:65:83:4d:41:1b:72: bc:72:03:5e:e4:1c:0f:c3:80:4e:3a:a5:f7:fe:9e:ef:5c:72: 22:06:98:7f:0e:02:95:51:9d:d1:29:76:1a:2f:4b:33:57:f6: ba:30:9e:11:55:71:a9:10:14:59:97:1f:a1:7f:1e:50:72:e2: 60:a0:77:4c:65:20:1d:49:c6:9f:ce:fe:9c:58:5a:13:c5:79: 0c:40:9a:8a:84:3a:58:fd:73:9b:67:de:22:05:54:98:81:ca: fa:16:13:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uiLUqUCTJ3ZF6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGJiNDE4M2UtYTczYS00NzYxLWJhNzktNmQ5OTI5ODAxNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2eifYtSEWJ6GoEFTnPJmjaj1dsFWldtO97u Lk9hPTbU70hIH2rzzDPfmc35Cdao284aPClFb3frQC6VKNw2zPpxo/ygVYsVKDc5 XEffCuvfr+fH5BvufVzj2XubgcQecT52bz0bwudujCWyjW4ZFqqdIELBiGTQ+jOj 9PDDQqkQYWg5lMG4UgewwfEwJjSKupTCcIQ6wsOtXlDr49MN5revJ2v33sKcJ894 ndzbH6scdPKdQuoIIyOZpPz7ZmhaEA99gG1SjmPVVFVl9+NYWS+Gtpd6NJLJhTvC BMU5QBQJboCbGZ0pPnGhkZ5kbgYr1sKXFkOTBw7uCSGvex88RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELFaWLJfIzo1s9wH26f1BHFMHSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg5ZWZkZDAtM2Y0OC0z ZmNlLTkzNzQtNmE1YmVmZDgyM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeaCI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKOcBSwzzF+y+6h4x6i+/swjYO58vZPJDYVbBH3X6cngMejzulH hJdk7gibmmk9ppHrkmTFhHDwhm41XQKwSqtrBKR/IkLAzudjDZM2gbN6JPKKNYJc o4sYimrhHQSOqyKACQj/+tp2zG3x4o684P4w6LooE4jJsJ+/81arE9Kn+jIS8Gg2 vtKKFpGsX3e5QVvJ7v+sQ0/RHJ019WWDTUEbcrxyA17kHA/DgE46pff+nu9cciIG mH8OApVRndEpdhovSzNX9rownhFVcakQFFmXH6F/HlBy4mCgd0xlIB1Jxp/O/pxY WhPFeQxAmoqEOlj9c5tn3iIFVJiByvoWEw8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:27 2025 by rpki-client