$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1cb9c55-cb90-3ea3-a378-2f962e500d85.roa File: a1cb9c55-cb90-3ea3-a378-2f962e500d85.roa (raw, json) Hash identifier: gdaIhmCsBXlgvPImulnuZNS7+F9+DVox9uvxgTITl1c= Subject key identifier: C2:68:F6:61:A0:27:CE:A8:39:6E:2A:A0:AB:CD:B8:F9:88:A2:F5:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D57F73B91A92695D4E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1cb9c55-cb90-3ea3-a378-2f962e500d85.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:3854::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d5:7f:73:b9:1a:92:69:5d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f4db700d-a4d6-40ae-a7f6-da7c932d2504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:7f:23:4a:59:e0:5a:37:b0:a7:0e:a7:bc: 2f:7e:e7:3a:47:0d:13:83:a0:61:c9:f7:79:73:27: d4:a3:64:79:c3:a9:2e:df:c8:99:65:47:ae:9f:69: 69:5f:62:8e:62:0b:2b:2b:dd:e4:9f:03:be:2b:4d: 73:31:02:35:10:a7:df:d2:35:fc:43:a4:5a:c0:66: 27:c9:bc:5e:ff:ef:da:e1:f9:bb:bd:72:f3:1c:0a: e6:77:7a:cc:a4:06:e0:17:49:a4:85:3e:b3:e8:7b: 4e:2a:4f:4f:24:90:de:66:1b:f9:bd:75:8c:28:a9: fa:d5:4d:98:71:07:be:b8:cd:5b:ad:b3:2c:a1:49: 72:82:6e:e4:2b:79:1a:ef:df:8d:dc:85:02:cf:2a: 07:b1:84:46:68:e5:1b:e3:a6:43:e2:af:b5:af:c7: 71:b8:dd:7d:64:df:6c:1f:92:3a:36:87:d9:81:dd: 9c:aa:63:79:ff:86:63:27:80:c5:41:34:c1:c6:77: 72:a7:00:93:8f:02:a5:60:50:ac:9f:18:aa:a0:7f: c9:e5:e9:2b:fd:d1:46:f0:a9:cc:22:e6:4e:4d:1b: 01:f1:75:6e:ca:d3:e7:60:3a:11:dc:fb:1a:d0:50: 62:12:ec:22:2f:48:b8:45:71:a9:32:c3:0b:d7:25: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:68:F6:61:A0:27:CE:A8:39:6E:2A:A0:AB:CD:B8:F9:88:A2:F5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1cb9c55-cb90-3ea3-a378-2f962e500d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:3854::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:03:f9:8a:ff:31:0a:c5:a7:74:9a:ea:85:39:bc:7f:6a:58: bc:03:ec:8d:86:8a:a1:ef:06:ff:0b:0d:7a:88:6d:76:f5:b9: 5a:cc:7f:e6:1a:ac:8f:96:d2:96:8d:1c:b2:5d:8e:f5:ca:fd: a2:ae:75:0c:6e:6a:97:fb:9f:c7:9e:32:44:4b:a2:b0:58:88: 6a:42:b7:23:d2:d6:fe:b7:67:24:8f:2a:58:0a:dc:53:ca:89: 49:bf:45:cc:70:a7:c9:50:b1:14:2a:70:29:14:53:7c:71:28: 2e:5f:4a:02:87:96:50:d4:95:64:44:45:7e:b0:da:f3:67:4a: 20:8d:ca:e4:12:7a:40:90:2d:d7:37:cc:f8:94:06:58:f9:3c: de:c9:c2:4c:3e:06:38:11:2c:86:aa:63:77:2f:9b:dd:57:83: 2f:50:3b:5e:ae:60:bd:c2:0e:01:b9:51:8d:bf:80:87:c2:58: 7e:69:59:b0:f4:f9:d8:85:ec:60:58:43:50:44:7b:b9:75:29: 36:71:be:f1:b8:ed:a4:97:f5:a3:45:e1:42:32:09:7d:e6:e9: dc:a3:ba:df:5e:62:fd:85:dc:34:9e:de:65:d8:c9:c7:38:8d: ad:0a:d1:e8:62:53:bf:95:8c:6c:e0:a5:f6:5b:ee:a8:58:f2: 55:20:aa:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAdV/c7kakmldTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjRkYjcwMGQtYTRkNi00MGFlLWE3ZjYtZGE3YzkzMmQyNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgp/I0pZ4Fo3sKcOp7wvfuc6Rw0Tg6Bhyfd5 cyfUo2R5w6ku38iZZUeun2lpX2KOYgsrK93knwO+K01zMQI1EKff0jX8Q6RawGYn ybxe/+/a4fm7vXLzHArmd3rMpAbgF0mkhT6z6HtOKk9PJJDeZhv5vXWMKKn61U2Y cQe+uM1brbMsoUlygm7kK3ka79+N3IUCzyoHsYRGaOUb46ZD4q+1r8dxuN19ZN9s H5I6NofZgd2cqmN5/4ZjJ4DFQTTBxndypwCTjwKlYFCsnxiqoH/J5ekr/dFG8KnM IuZOTRsB8XVuytPnYDoR3Psa0FBiEuwiL0i4RXGpMsML1yUEFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJo9mGgJ86oOW4qoKvNuPmIovWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFjYjljNTUtY2I5MC0z ZWEzLWEzNzgtMmY5NjJlNTAwZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeThU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJcD+Yr/MQrFp3Sa6oU5vH9qWLwD7I2GiqHvBv8LDXqIbXb1uVrM f+YarI+W0paNHLJdjvXK/aKudQxuapf7n8eeMkRLorBYiGpCtyPS1v63ZySPKlgK 3FPKiUm/Rcxwp8lQsRQqcCkUU3xxKC5fSgKHllDUlWRERX6w2vNnSiCNyuQSekCQ Ldc3zPiUBlj5PN7Jwkw+BjgRLIaqY3cvm91Xgy9QO16uYL3CDgG5UY2/gIfCWH5p WbD0+diF7GBYQ1BEe7l1KTZxvvG47aSX9aNF4UIyCX3m6dyjut9eYv2F3DSe3mXY ycc4ja0K0ehiU7+VjGzgpfZb7qhY8lUgqg4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:53 2025 by rpki-client