$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9839da45-e62f-3951-a6e8-bf1834b13106.roa File: 9839da45-e62f-3951-a6e8-bf1834b13106.roa (raw, json) Hash identifier: jHhJd6qkIusQSJpuU8F8++ABbJZoORvKbBmGLTJvrQo= Subject key identifier: AF:B6:A4:1D:83:57:1A:6F:D4:02:C8:9D:DA:22:8D:D0:DA:B8:2A:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01E0D06E67632B8CBF5600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9839da45-e62f-3951-a6e8-bf1834b13106.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:85d4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:e0:d0:6e:67:63:2b:8c:bf:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=953be3c1-17e0-4660-b75c-90b3e6382a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:53:3c:62:96:6d:da:ca:7e:3e:6d:d1:82: 81:45:38:48:ee:08:b2:17:b3:78:fc:f2:56:d2:11: f3:1c:b4:74:f7:cb:d5:99:f7:ec:c3:68:50:de:a9: 8a:93:22:0d:97:6b:00:71:c3:39:c8:58:40:d0:f7: ec:87:2a:9a:97:fd:76:35:85:6a:d8:87:de:50:0e: 03:72:80:93:3a:f5:24:a3:39:f2:ea:c1:78:6b:65: 7d:73:be:db:33:00:82:74:50:2a:5b:d7:e3:9d:a1: e6:d6:1f:14:ec:0d:33:d4:f6:bf:af:87:ad:79:a6: e0:6e:85:6e:09:8c:4c:f6:1e:62:e3:df:1c:e8:54: dc:f4:8b:d3:9c:94:50:d6:f3:bf:61:a5:da:76:83: aa:53:07:bb:fd:a9:58:2e:4a:ea:51:a2:2b:ca:dc: c6:b8:61:e9:62:9c:27:0d:61:d9:cb:8f:6a:5b:ed: ee:46:31:89:36:c1:b3:0a:6a:b5:59:f8:e0:5b:b3: 64:61:7c:ef:53:bd:c9:ab:f0:73:66:f7:ea:ad:f9: 20:c4:a2:b1:0d:25:39:83:99:0a:d6:eb:ad:6d:04: c9:d5:d4:5e:26:b2:4b:46:4f:13:63:76:75:57:e4: 6a:f7:5d:84:25:60:4b:95:e7:ec:6d:cb:cd:aa:f3: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:A4:1D:83:57:1A:6F:D4:02:C8:9D:DA:22:8D:D0:DA:B8:2A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9839da45-e62f-3951-a6e8-bf1834b13106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:85d4::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:67:28:c6:af:51:3b:42:41:84:73:83:9f:35:b2:be:7a:d9: 35:29:0c:53:24:19:99:ab:5b:cd:bb:3f:f2:e1:9e:1f:b8:cc: 1c:a3:b9:42:55:f4:85:9e:05:12:79:df:95:fb:90:42:08:a7: 4f:5c:f4:42:54:3b:52:46:46:69:d2:1f:ce:41:7a:ad:08:37: 73:bf:1a:65:f1:16:5f:95:0f:ef:63:8e:bb:8a:53:3d:82:61: 83:af:40:88:6c:b9:95:da:4b:48:47:e7:a9:cf:d0:3b:6b:dc: c2:83:c6:06:ee:a1:0f:78:74:6b:40:3f:91:ca:9b:e3:49:de: a8:71:e5:09:7d:7d:8b:9d:73:e0:51:ab:1c:d5:cb:14:a2:d1: a1:71:d5:a6:1e:fb:0b:47:95:55:0f:4b:c9:e5:05:4b:40:db: 08:9c:2b:ad:64:d0:01:eb:28:48:34:23:29:44:4a:a0:06:21: e0:27:b6:63:31:13:65:d4:b4:a5:44:0a:2e:16:98:7e:83:05: dd:c0:7a:b5:8f:b2:ea:93:dc:5c:20:5c:60:7c:aa:de:8f:f7: e6:5a:f3:2d:50:d9:96:66:b8:6c:1f:5c:30:38:56:08:3b:9f: 53:8f:e3:3e:75:8c:f0:46:47:6b:eb:4d:54:c2:37:c5:c2:31: 3d:dd:8e:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeDQbmdjK4y/VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTUzYmUzYzEtMTdlMC00NjYwLWI3NWMtOTBiM2U2MzgyYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUZTPGKWbdrKfj5t0YKBRThI7giyF7N4/PJW 0hHzHLR098vVmffsw2hQ3qmKkyINl2sAccM5yFhA0Pfshyqal/12NYVq2IfeUA4D coCTOvUkozny6sF4a2V9c77bMwCCdFAqW9fjnaHm1h8U7A0z1Pa/r4eteabgboVu CYxM9h5i498c6FTc9IvTnJRQ1vO/YaXadoOqUwe7/alYLkrqUaIrytzGuGHpYpwn DWHZy49qW+3uRjGJNsGzCmq1WfjgW7NkYXzvU73Jq/BzZvfqrfkgxKKxDSU5g5kK 1uutbQTJ1dReJrJLRk8TY3Z1V+Rq912EJWBLlefsbcvNqvNslwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+2pB2DVxpv1ALIndoijdDauCqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTgzOWRhNDUtZTYyZi0z OTUxLWE2ZTgtYmYxODM0YjEzMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYXU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJhnKMavUTtCQYRzg581sr562TUpDFMkGZmrW827P/Lhnh+4zByj uUJV9IWeBRJ535X7kEIIp09c9EJUO1JGRmnSH85Beq0IN3O/GmXxFl+VD+9jjruK Uz2CYYOvQIhsuZXaS0hH56nP0Dtr3MKDxgbuoQ94dGtAP5HKm+NJ3qhx5Ql9fYud c+BRqxzVyxSi0aFx1aYe+wtHlVUPS8nlBUtA2wicK61k0AHrKEg0IylESqAGIeAn tmMxE2XUtKVECi4WmH6DBd3AerWPsuqT3FwgXGB8qt6P9+Za8y1Q2ZZmuGwfXDA4 Vgg7n1OP4z51jPBGR2vrTVTCN8XCMT3djqM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:03 2025 by rpki-client