$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2f3bf7d-789a-3225-8653-a590359944b5.roa File: d2f3bf7d-789a-3225-8653-a590359944b5.roa (raw, json) Hash identifier: Wrr0w2VvKYOv2Vs8Pcf1uSeNhhk9GMzwli2530bERvA= Subject key identifier: DC:D2:E1:58:94:FC:91:BA:82:5D:D1:C1:6A:6A:E0:ED:20:5E:A4:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20040641EB865EBDF1500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2f3bf7d-789a-3225-8653-a590359944b5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 2001:578:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:00:40:64:1e:b8:65:eb:df:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=44a37a82-9470-4b77-89c4-923e8a1bd955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:cb:fb:e8:8f:83:34:22:6f:87:f0:cd:fb: dd:6b:c6:9a:70:e5:da:83:f9:df:b0:e5:26:7a:05: a5:40:99:c5:fe:d1:b6:0a:5d:74:1f:59:a8:db:da: 9b:66:ab:59:08:10:c5:ee:46:c9:d7:21:8f:bd:ff: 7d:28:94:d5:00:25:7b:24:3e:d5:d3:53:e1:3d:01: 3d:cf:27:75:4e:0c:ff:46:a4:87:0a:d7:21:38:a4: e9:1d:93:e7:75:3a:69:39:e7:46:d8:c5:e7:81:5d: bb:c7:f7:d2:b7:24:45:1a:d3:93:03:3f:f7:b1:44: 68:ee:12:06:42:35:5e:3b:69:92:ea:28:8b:b1:3d: 29:ac:73:d3:d0:72:56:72:14:69:bb:8d:52:de:aa: 49:8b:ca:c0:d1:8e:0a:85:f8:03:58:0f:86:0f:ed: 6f:f8:75:9a:9c:53:6c:95:75:e2:a5:7d:b7:cc:74: 9b:1c:c6:55:42:4a:5c:61:ec:8b:48:9b:8d:40:5d: b5:ce:4b:9a:9d:46:b4:11:e8:6f:7a:d6:e2:3f:c4: cb:d0:50:f7:da:0c:11:a6:31:83:7d:c9:ba:73:95: 1e:2f:ed:ab:92:21:8e:a6:7e:00:f3:a7:bf:cf:77: 87:0f:98:13:e8:69:4d:a8:e7:20:16:b4:7c:5e:96: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:E1:58:94:FC:91:BA:82:5D:D1:C1:6A:6A:E0:ED:20:5E:A4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2f3bf7d-789a-3225-8653-a590359944b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1d:17:98:7f:34:b0:26:b0:18:6e:3a:85:e1:1f:af:4c:07: 64:d8:69:d1:55:8e:27:c9:10:f9:37:6c:6a:28:30:66:70:9e: 21:bf:ef:ed:cb:c5:fa:6b:08:26:c8:fd:f3:d7:93:ee:f1:7f: 7d:26:de:59:2f:56:5b:d3:46:4e:2b:22:0f:08:4f:1b:d7:b8: 48:68:a4:9d:9c:41:15:12:93:b7:73:79:0a:7a:5f:df:b6:67: 23:d2:c7:4a:bb:be:a6:fd:19:4a:81:00:c7:b4:d2:e5:84:45: db:c6:88:3b:c7:ce:d0:85:08:0d:1f:2b:bd:e4:c4:54:a6:20: d0:e0:0e:b9:4e:0e:0c:41:c9:47:3f:a3:d0:2f:da:ee:b9:c0: ea:96:4a:ff:51:b7:e2:46:64:45:4d:76:fb:52:54:80:17:33: e1:cc:f1:90:1c:ed:01:5a:41:d3:65:54:7d:fc:cb:a0:88:c6: 6d:21:d3:da:e6:a8:b2:76:81:8f:18:37:c1:72:c9:f5:24:f0: ab:cf:a3:c7:6d:33:0a:5f:05:ac:c7:9f:b0:84:14:ba:e6:5b: b2:a5:2a:86:dc:25:08:18:e5:0a:f8:66:2f:1c:49:9e:50:56: ba:45:8c:0a:0d:41:68:d3:01:64:cc:fb:b7:83:e7:c0:52:f4: 2c:e2:27:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt28gBAZB64ZevfFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDRhMzdhODItOTQ3MC00Yjc3LTg5YzQtOTIzZThhMWJkOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0nL++iPgzQib4fwzfvda8aacOXag/nfsOUm egWlQJnF/tG2Cl10H1mo29qbZqtZCBDF7kbJ1yGPvf99KJTVACV7JD7V01PhPQE9 zyd1Tgz/RqSHCtchOKTpHZPndTppOedG2MXngV27x/fStyRFGtOTAz/3sURo7hIG QjVeO2mS6iiLsT0prHPT0HJWchRpu41S3qpJi8rA0Y4KhfgDWA+GD+1v+HWanFNs lXXipX23zHSbHMZVQkpcYeyLSJuNQF21zkuanUa0EehvetbiP8TL0FD32gwRpjGD fcm6c5UeL+2rkiGOpn4A86e/z3eHD5gT6GlNqOcgFrR8XpbO4QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNzS4ViU/JG6gl3RwWpq4O0gXqQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDJmM2JmN2QtNzg5YS0z MjI1LTg2NTMtYTU5MDM1OTk0NGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnx0XmH80sCawGG46heEfr0wHZNhp0VWOJ8kQ+TdsaigwZnCeIb/v 7cvF+msIJsj989eT7vF/fSbeWS9WW9NGTisiDwhPG9e4SGiknZxBFRKTt3N5Cnpf 37ZnI9LHSru+pv0ZSoEAx7TS5YRF28aIO8fO0IUIDR8rveTEVKYg0OAOuU4ODEHJ Rz+j0C/a7rnA6pZK/1G34kZkRU12+1JUgBcz4czxkBztAVpB02VUffzLoIjGbSHT 2uaosnaBjxg3wXLJ9STwq8+jx20zCl8FrMefsIQUuuZbsqUqhtwlCBjlCvhmLxxJ nlBWukWMCg1BaNMBZMz7t4PnwFL0LOIn+A== -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:00 2025 by rpki-client