$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af43bead-936b-38a2-9b97-cb926a8614d4.roa File: af43bead-936b-38a2-9b97-cb926a8614d4.roa (raw, json) Hash identifier: 7hq6uCU6HL6FS3VQ20Q6dLih5oWGSsOagm0j8XtWOdE= Subject key identifier: 0B:A7:A8:1D:E9:66:9F:08:78:59:C3:48:61:13:F8:99:DD:A3:F1:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01DB8BACEA26E56D875980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af43bead-936b-38a2-9b97-cb926a8614d4.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:82a4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:db:8b:ac:ea:26:e5:6d:87:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=cff5c58b-2735-4256-bdc5-957fa1895f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:bd:81:d5:cc:23:73:3a:a6:43:30:5a:1c: 05:08:b9:3f:09:cc:67:0d:ba:ce:ab:44:b6:fe:b6: 3f:3c:1f:b8:d2:df:54:c9:a6:6e:eb:6f:9d:c9:04: b0:4f:49:9a:3a:d5:94:51:f3:ea:ec:ea:fb:11:d6: 47:e9:f7:eb:88:a2:5f:3a:2e:5e:36:05:a6:db:5e: 99:5c:68:d2:2c:fc:22:ab:07:3e:b0:db:b1:a3:94: 81:5f:02:54:43:75:ff:02:8a:18:7f:c6:70:85:80: 23:23:10:ce:d9:2e:48:0f:fb:79:4f:94:14:e7:18: 40:b0:32:e3:14:42:7d:12:16:ef:e9:ee:0e:4f:cd: 3a:c0:f0:f4:c6:75:ee:73:2c:f3:bd:80:bb:4e:5c: 8d:57:e7:65:a1:93:3e:17:2b:5a:5c:7b:ca:c5:ab: 79:b4:59:d9:07:51:d1:80:56:d7:d9:b7:18:db:d7: 22:e1:96:de:9b:c0:4d:40:3a:70:71:99:89:67:49: 4b:30:0d:ca:f4:d7:b1:0f:16:fb:b4:c1:49:9f:04: f6:a5:9d:1c:0d:67:a6:91:3e:f4:76:85:1d:f6:f0: ae:1b:98:e1:e6:e8:17:0f:93:06:f4:33:83:fc:57: ef:e8:f9:98:e9:90:60:cf:d5:83:3b:16:2e:87:c1: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:A8:1D:E9:66:9F:08:78:59:C3:48:61:13:F8:99:DD:A3:F1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af43bead-936b-38a2-9b97-cb926a8614d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:82a4::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f3:c1:f1:53:bc:e3:b2:21:38:4d:c3:1b:4b:37:67:3e:89: 68:c6:ef:b7:43:99:69:10:01:45:10:bc:37:91:b0:7c:21:9a: 94:9b:b1:c3:da:12:bb:6d:7d:aa:b9:4e:60:0c:69:5d:2f:08: d1:03:6d:b1:27:4f:94:6b:64:b9:4b:7e:15:d6:f4:f6:8d:25: d9:1a:3b:85:8d:74:52:29:26:25:a2:27:34:d1:03:a9:17:e5: bd:9e:09:51:8c:7e:a1:d4:99:e2:10:ab:a7:6e:1d:78:44:78: a6:6d:7a:00:7c:56:b3:9a:82:91:91:d1:d4:64:2f:5c:4c:f7: 8b:01:c2:33:f7:d6:84:2a:de:e2:07:51:4f:fa:fb:2a:e2:71: f9:dc:1c:ac:3c:ae:55:b0:25:53:f8:82:c3:54:14:98:4d:5b: be:fc:ee:b0:83:db:00:dd:90:66:1a:7d:81:a3:cf:49:7b:e9: cf:bd:7d:85:1b:60:6e:3d:76:1c:de:ec:e2:0a:f7:ec:ff:f1: fc:ea:71:c4:c7:be:33:9a:5c:09:7f:cc:cb:8b:1d:91:2f:69: d1:42:3e:53:27:85:11:ef:34:dd:25:3d:78:b9:10:8d:5d:64: 97:29:79:7f:a8:a4:c1:5f:29:cc:a5:39:09:a0:3f:af:59:a9: dc:b9:23:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAduLrOom5W2HWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZmNWM1OGItMjczNS00MjU2LWJkYzUtOTU3ZmExODk1ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAK9gdXMI3M6pkMwWhwFCLk/CcxnDbrOq0S2 /rY/PB+40t9UyaZu62+dyQSwT0maOtWUUfPq7Or7EdZH6ffriKJfOi5eNgWm216Z XGjSLPwiqwc+sNuxo5SBXwJUQ3X/AooYf8ZwhYAjIxDO2S5ID/t5T5QU5xhAsDLj FEJ9Ehbv6e4OT806wPD0xnXucyzzvYC7TlyNV+dloZM+FytaXHvKxat5tFnZB1HR gFbX2bcY29ci4Zbem8BNQDpwcZmJZ0lLMA3K9NexDxb7tMFJnwT2pZ0cDWemkT70 doUd9vCuG5jh5ugXD5MG9DOD/Ffv6PmY6ZBgz9WDOxYuh8GwDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAunqB3pZp8IeFnDSGET+Jndo/E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY0M2JlYWQtOTM2Yi0z OGEyLTliOTctY2I5MjZhODYxNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYKk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7zwfFTvOOyIThNwxtLN2c+iWjG77dDmWkQAUUQvDeRsHwhmpSb scPaErttfaq5TmAMaV0vCNEDbbEnT5RrZLlLfhXW9PaNJdkaO4WNdFIpJiWiJzTR A6kX5b2eCVGMfqHUmeIQq6duHXhEeKZtegB8VrOagpGR0dRkL1xM94sBwjP31oQq 3uIHUU/6+yricfncHKw8rlWwJVP4gsNUFJhNW7787rCD2wDdkGYafYGjz0l76c+9 fYUbYG49dhze7OIK9+z/8fzqccTHvjOaXAl/zMuLHZEvadFCPlMnhRHvNN0lPXi5 EI1dZJcpeX+opMFfKcylOQmgP69Zqdy5I/k= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:10 2025 by rpki-client