$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b11320e-eeea-3f1e-82f2-41235518cb7f.roa File: 3b11320e-eeea-3f1e-82f2-41235518cb7f.roa (raw, json) Hash identifier: qrWmewTSlrUg+Q0hv2hDEbQL4ErRvut2JsvgN4AaRLY= Subject key identifier: A3:A5:B2:C5:73:EF:E4:77:2C:A4:CF:F8:AB:C8:D5:98:65:68:61:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B609CA8641EDFB9D82D6B9740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b11320e-eeea-3f1e-82f2-41235518cb7f.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:839::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a8:64:1e:df:b9:d8:2d:6b:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=f6a91b6f-cebe-45ce-aa56-47be94ace3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:e0:c4:95:e8:c7:af:d5:f1:d4:9e:f7:aa: df:5d:29:70:a9:7a:5a:17:2a:54:5b:9d:8c:c2:4a: 87:c5:88:d4:6e:11:42:31:2a:24:90:e9:11:ad:ca: ab:40:05:d2:de:29:99:00:10:66:03:b6:f9:91:8c: 77:91:d2:14:5e:8d:8d:77:b9:0d:c7:86:ed:c3:6f: 6f:0c:73:e9:cf:17:31:5a:9d:56:11:0c:70:c4:7e: 85:f5:82:f5:4f:ac:3d:c0:ce:e1:56:25:98:27:b7: 4d:7c:e6:1b:6b:75:16:6e:67:da:37:75:2e:16:43: d3:d3:63:f8:ae:75:f2:57:12:6b:ec:8b:aa:d4:a4: 0a:93:5d:d3:7f:36:7d:5b:03:f8:7a:c6:99:58:0c: 4b:5e:4a:6a:2b:11:c5:ea:2f:02:35:9d:b7:47:d1: 50:be:bd:be:5f:61:49:cc:a6:64:c1:66:4c:29:0d: 05:51:a9:c6:e7:d7:d0:a1:e9:4f:cf:02:0e:65:dd: 97:46:3f:5c:2c:a3:6e:e2:dd:c3:c3:bf:3d:0f:ff: a8:23:d0:18:63:af:2f:0f:f3:73:f6:88:a1:3d:e4: 52:be:00:1f:42:33:15:3f:2c:52:99:2d:46:8c:71: 04:28:87:6e:79:bb:74:f5:50:22:38:07:bb:d7:0c: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A5:B2:C5:73:EF:E4:77:2C:A4:CF:F8:AB:C8:D5:98:65:68:61:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b11320e-eeea-3f1e-82f2-41235518cb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:839::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5f:1f:d5:96:9b:71:11:55:54:dd:56:74:97:13:0f:b3:c6: a2:4c:0d:75:4d:72:4b:18:29:20:ce:f3:40:6b:ff:13:ad:76: 82:7b:20:b7:bd:dd:29:1f:47:d7:35:29:bc:5f:68:e9:39:bf: 56:a9:4e:a2:d9:2a:8d:22:d8:4e:90:0d:5f:f3:89:81:41:d9: 49:1a:75:0f:c9:90:b5:2d:0a:00:65:72:ab:95:ca:37:bf:00: 9a:1e:ad:9e:d4:98:af:9c:b5:78:f7:2d:e4:a3:0a:7f:f3:2b: 2b:61:5a:13:15:8c:85:11:68:03:10:53:d1:45:64:b0:2a:5f: 2b:dc:d8:d3:e7:e4:21:a4:be:c3:7f:69:29:05:a3:4c:7a:71: 08:c6:cd:90:0d:41:3b:a5:23:e7:30:15:3f:8f:6f:a5:c1:c0: fc:16:84:81:19:88:af:72:d9:2c:4d:11:c0:db:43:63:99:8b: d8:61:28:a9:56:b3:2a:69:e2:c7:2c:3b:ca:06:5f:d8:bd:8e: 73:5d:49:d6:f9:44:d4:ad:13:24:75:36:c0:01:9f:1d:b4:b5: a6:91:aa:bf:03:cf:94:e1:c1:dc:78:47:35:08:68:c2:bc:ed: 10:8e:89:08:78:ff:74:af:c1:ea:4d:63:62:bd:b2:33:58:6f: 43:fd:1d:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtgnKhkHt+52C1rl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjZhOTFiNmYtY2ViZS00NWNlLWFhNTYtNDdiZTk0YWNlM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1rgxJXox6/V8dSe96rfXSlwqXpaFypUW52M wkqHxYjUbhFCMSokkOkRrcqrQAXS3imZABBmA7b5kYx3kdIUXo2Nd7kNx4btw29v DHPpzxcxWp1WEQxwxH6F9YL1T6w9wM7hViWYJ7dNfOYba3UWbmfaN3UuFkPT02P4 rnXyVxJr7Iuq1KQKk13TfzZ9WwP4esaZWAxLXkpqKxHF6i8CNZ23R9FQvr2+X2FJ zKZkwWZMKQ0FUanG59fQoelPzwIOZd2XRj9cLKNu4t3Dw789D/+oI9AYY68vD/Nz 9oihPeRSvgAfQjMVPyxSmS1GjHEEKIduebt09VAiOAe71wwfJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKOlssVz7+R3LKTP+KvI1ZhlaGG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2IxMTMyMGUtZWVlYS0z ZjFlLTgyZjItNDEyMzU1MThjYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeQg5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpfH9WWm3ERVVTdVnSXEw+zxqJMDXVNcksYKSDO80Br/xOtdoJ7 ILe93SkfR9c1KbxfaOk5v1apTqLZKo0i2E6QDV/ziYFB2UkadQ/JkLUtCgBlcquV yje/AJoerZ7UmK+ctXj3LeSjCn/zKythWhMVjIURaAMQU9FFZLAqXyvc2NPn5CGk vsN/aSkFo0x6cQjGzZANQTulI+cwFT+Pb6XBwPwWhIEZiK9y2SxNEcDbQ2OZi9hh KKlWsypp4scsO8oGX9i9jnNdSdb5RNStEyR1NsABnx20taaRqr8Dz5Thwdx4RzUI aMK87RCOiQh4/3SvwepNY2K9sjNYb0P9HcY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:34:54 2025 by rpki-client