$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa File: ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa (raw, json) Hash identifier: Up5fqtiHJzic2YkBAx8oHusGWurTTqVJgdS1uAEgI9A= Subject key identifier: 93:89:FC:98:33:CC:1D:19:3E:44:79:A2:64:88:4A:7C:37:59:1C:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AE4613E5962CE2E9933BDD340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 394505 IP address blocks: 2001:57a:f241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:3e:59:62:ce:2e:99:33:bd:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=aba8ce29-c5ad-4da8-bebb-3246b5000979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:af:ec:63:10:ff:31:a8:f7:e0:ea:30:cd: dd:14:b5:83:81:8b:4b:29:e7:c9:93:17:e4:3e:c3: fb:5d:b0:e3:d4:3e:6c:02:28:65:f6:d5:df:b4:49: b0:d2:52:4d:bf:97:04:1e:ed:d8:95:45:25:30:de: 70:01:51:81:50:cb:f0:18:1f:7a:79:ce:eb:62:40: c2:e3:1d:f9:f7:88:ce:8f:26:a3:da:92:13:4e:b5: 47:f5:42:92:f4:c2:3b:07:e6:94:95:1a:b8:a6:d1: bd:0c:cb:15:03:5d:ec:a5:62:6e:2f:0f:30:d3:24: fb:1d:7e:fc:65:1c:e1:96:31:dc:d1:49:05:bd:39: 5f:a2:8b:32:ea:7f:b5:cf:4d:29:5a:a9:37:bc:0f: fb:a7:fb:ff:dd:48:9e:ec:d6:08:26:b5:92:b1:ff: 3e:f5:59:b7:a7:2d:f7:69:ce:5f:f7:87:9e:83:e1: a2:30:01:b5:e4:06:75:66:32:4f:07:e3:12:07:92: 8f:2a:f8:63:3e:36:86:68:60:82:b6:ad:d0:6a:42: c1:2a:f4:2c:45:15:81:3e:c5:ee:56:41:35:09:b8: 5c:db:1d:36:ec:6b:f8:fd:55:06:95:6f:51:89:09: a3:dd:63:3e:f5:bf:b8:a1:a1:c3:15:cb:48:77:f6: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:FC:98:33:CC:1D:19:3E:44:79:A2:64:88:4A:7C:37:59:1C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:f241::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ec:f9:18:20:ac:2f:09:0c:dc:18:f0:83:66:a7:9e:08:e9: 57:c4:23:05:1f:37:e9:63:7e:bf:da:f7:80:56:14:94:81:3a: 07:c2:c8:4e:c2:b9:0d:ed:95:0c:52:58:28:e8:a1:b2:55:9c: 90:a2:b6:09:91:1a:ef:35:a5:1b:28:b4:d8:d7:fe:e5:f2:52: f0:f4:38:ad:10:ac:6c:20:fa:e8:2c:93:9e:ba:81:6a:30:fb: 1c:fe:1b:51:65:51:86:09:fd:52:a9:0f:80:e4:dd:a0:96:40: cf:be:a9:a9:8b:07:19:7d:3e:47:99:09:38:fb:2e:55:5e:44: 64:28:d5:19:39:2b:a7:47:90:13:66:02:66:c9:ad:b9:91:72: 2e:36:e3:e9:8e:55:49:c1:77:ba:0f:5e:3b:06:7b:2d:7c:fa: e2:0f:c4:87:d4:ae:09:33:df:69:d7:bd:db:82:e9:63:55:07: ed:75:f5:87:74:d0:15:5b:ce:99:f6:d3:51:1b:11:13:dd:bf: 4a:4a:92:e7:b5:a9:18:ad:73:79:fc:4d:42:19:e3:88:db:c3: a4:bf:bf:26:94:e6:52:86:04:6d:7c:3a:15:f2:9c:a5:34:10: 43:5b:e8:06:9f:2d:72:76:a5:e4:37:95:a2:ea:00:80:80:63: 22:1b:3e:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErkYT5ZYs4umTO900AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWJhOGNlMjktYzVhZC00ZGE4LWJlYmItMzI0NmI1MDAwOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiomv7GMQ/zGo9+DqMM3dFLWDgYtLKefJkxfk PsP7XbDj1D5sAihl9tXftEmw0lJNv5cEHu3YlUUlMN5wAVGBUMvwGB96ec7rYkDC 4x3594jOjyaj2pITTrVH9UKS9MI7B+aUlRq4ptG9DMsVA13spWJuLw8w0yT7HX78 ZRzhljHc0UkFvTlfoosy6n+1z00pWqk3vA/7p/v/3Uie7NYIJrWSsf8+9Vm3py33 ac5f94eeg+GiMAG15AZ1ZjJPB+MSB5KPKvhjPjaGaGCCtq3QakLBKvQsRRWBPsXu VkE1Cbhc2x027Gv4/VUGlW9RiQmj3WM+9b+4oaHDFctId/apnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOJ/JgzzB0ZPkR5omSISnw3WRxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2EwYjg1NjAtMjYyMy0z NTUzLWJmNTQtNWQ4ZDhmM2QyMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFevJB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfs+RggrC8JDNwY8INmp54I6VfEIwUfN+ljfr/a94BWFJSBOgfC yE7CuQ3tlQxSWCjoobJVnJCitgmRGu81pRsotNjX/uXyUvD0OK0QrGwg+ugsk566 gWow+xz+G1FlUYYJ/VKpD4Dk3aCWQM++qamLBxl9PkeZCTj7LlVeRGQo1Rk5K6dH kBNmAmbJrbmRci424+mOVUnBd7oPXjsGey18+uIPxIfUrgkz32nXvduC6WNVB+11 9Yd00BVbzpn201EbERPdv0pKkue1qRitc3n8TUIZ44jbw6S/vyaU5lKGBG18OhXy nKU0EENb6AafLXJ2peQ3laLqAICAYyIbPuE= -----END CERTIFICATE-----Generated at Wed Aug 20 20:16:30 2025 by rpki-client