$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa File: 720f3258-f545-3b1f-b696-1c929fc1100d.roa (raw, json) Hash identifier: 4CgSzAxdxTU1xhXks2HQm2fkY70jFaSqQNjUHcpa0/M= Subject key identifier: 5A:18:3E:70:0A:BF:50:E3:82:31:21:9D:DC:67:7C:E9:0B:D3:76:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D413AEA9DB5224BB4C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:578:8a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d4:13:ae:a9:db:52:24:bb:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2028a6e0-bd66-494f-8751-a3262d83df19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:e0:f2:bf:25:9e:ed:4b:0f:3f:9a:f3:d6: a6:e9:0d:86:87:19:f4:31:50:f4:ce:f3:9b:3c:f3: ba:e1:e4:d3:9a:6c:70:5c:a2:bc:ee:f6:d5:67:ce: 62:46:d6:72:4d:a4:19:24:d4:bc:36:df:0a:ea:7e: 84:a6:01:49:04:66:2e:5e:76:04:12:4e:ce:a5:8a: 8d:81:c1:84:66:56:87:87:5c:f0:91:6d:f6:d9:46: 43:2e:94:91:a7:75:07:bd:81:92:ed:8f:4c:de:26: cb:cc:4b:00:6f:1f:1f:38:38:54:ca:f7:3f:c9:09: 13:d6:e1:1e:9d:96:bf:d3:01:35:21:c4:22:ff:b1: 9a:bd:2a:11:33:28:e1:09:ea:49:7c:84:fe:e6:f9: a0:e0:4e:2b:fd:2b:48:a2:93:51:15:0c:dc:6f:46: 33:0d:06:35:e1:d5:ce:c2:53:70:00:c2:c9:c9:b4: f3:3d:0f:ed:e6:72:1b:26:45:42:88:e4:97:0d:c6: c1:f8:a8:11:a3:46:b5:f1:70:d2:b0:13:0c:aa:7b: e3:05:f2:05:e1:98:3d:91:fa:c4:22:ca:89:e3:0c: 24:bd:0c:86:91:66:a4:e7:a1:bd:a7:46:cf:d2:20: fc:7b:89:cb:0c:e9:b5:7e:6e:ed:52:82:9e:55:88: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:18:3E:70:0A:BF:50:E3:82:31:21:9D:DC:67:7C:E9:0B:D3:76:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:3a:e6:67:b8:19:ae:ea:f7:be:6f:8f:8a:c7:4d:72:f8: d3:dc:3a:76:a0:99:59:43:c3:28:38:52:f0:52:1b:b2:97:bd: a0:9e:08:b3:f2:7e:b6:c5:79:91:3c:99:ea:a8:a7:ea:a2:08: 98:a3:34:07:00:1a:f9:fd:26:4c:a1:74:ae:9d:f7:63:6c:05: cb:10:b7:96:2a:62:5e:44:3b:d1:50:3e:7b:7c:81:3d:61:ab: b9:60:ef:be:ff:90:07:54:6f:a8:21:d8:48:c0:44:33:59:e2: 21:f8:cb:f7:b6:08:1d:a8:5b:4a:38:9f:02:15:28:d5:00:f4: 96:57:80:c3:c7:dd:83:f1:3c:04:bc:84:c5:ca:b6:1d:96:86: e7:34:08:27:62:81:9d:e9:8f:7e:32:85:35:18:ff:d3:45:7f: f2:b2:bc:50:ec:63:c6:ee:0b:79:33:b2:5c:75:f1:ec:86:2f: 62:f2:ec:a0:a0:d2:39:de:42:7b:09:af:3a:b1:a7:e0:cb:d4: 2e:9e:23:52:50:9e:fd:18:77:84:5a:c3:7c:ff:32:7f:56:82: a2:dd:43:0e:6f:7c:11:fc:23:b3:86:ee:07:eb:f5:60:8c:54: f9:cc:e2:6f:cb:01:31:d9:be:78:20:2f:4f:49:3a:e6:6d:06: 2e:9e:6b:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAdQTrqnbUiS7TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjAyOGE2ZTAtYmQ2Ni00OTRmLTg3NTEtYTMyNjJkODNkZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaPg8r8lnu1LDz+a89am6Q2Ghxn0MVD0zvOb PPO64eTTmmxwXKK87vbVZ85iRtZyTaQZJNS8Nt8K6n6EpgFJBGYuXnYEEk7OpYqN gcGEZlaHh1zwkW322UZDLpSRp3UHvYGS7Y9M3ibLzEsAbx8fODhUyvc/yQkT1uEe nZa/0wE1IcQi/7GavSoRMyjhCepJfIT+5vmg4E4r/StIopNRFQzcb0YzDQY14dXO wlNwAMLJybTzPQ/t5nIbJkVCiOSXDcbB+KgRo0a18XDSsBMMqnvjBfIF4Zg9kfrE IsqJ4wwkvQyGkWak56G9p0bP0iD8e4nLDOm1fm7tUoKeVYhiMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFoYPnAKv1DjgjEhndxnfOkL03YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzIwZjMyNTgtZjU0NS0z YjFmLWI2OTYtMWM5MjlmYzExMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAip MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpAOuZnuBmu6ve+b4+Kx01y+NPcOnagmVlDwyg4UvBSG7KXvaCe CLPyfrbFeZE8meqop+qiCJijNAcAGvn9JkyhdK6d92NsBcsQt5YqYl5EO9FQPnt8 gT1hq7lg777/kAdUb6gh2EjARDNZ4iH4y/e2CB2oW0o4nwIVKNUA9JZXgMPH3YPx PAS8hMXKth2Whuc0CCdigZ3pj34yhTUY/9NFf/KyvFDsY8buC3kzslx18eyGL2Ly 7KCg0jneQnsJrzqxp+DL1C6eI1JQnv0Yd4Raw3z/Mn9WgqLdQw5vfBH8I7OG7gfr 9WCMVPnM4m/LATHZvnggL09JOuZtBi6ea4I= -----END CERTIFICATE-----Generated at Wed Oct 15 23:52:42 2025 by rpki-client