$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de6a22b3-5f06-3f02-88f7-e69792db7a8c.roa File: de6a22b3-5f06-3f02-88f7-e69792db7a8c.roa (raw, json) Hash identifier: NFvvjEAMforTR8zFvR1Z+88g2yrKz7VVd5K8TQJkSLg= Subject key identifier: 83:77:53:A6:00:6E:E4:93:6C:CA:23:5B:8C:64:A2:7E:E1:12:14:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D6D12C0DF9A746EB1EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de6a22b3-5f06-3f02-88f7-e69792db7a8c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:806c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d6:d1:2c:0d:f9:a7:46:eb:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3082dbc8-2cb3-4913-b112-7e811c5bb3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:2a:63:6d:cf:73:05:80:db:bb:dc:0e:6a: e8:ce:2c:c7:94:b9:23:9b:89:47:68:66:e0:43:dc: 63:b9:98:1e:bf:ab:8b:70:38:6b:ef:04:5f:07:1a: 4d:f7:23:c7:b0:d0:73:da:14:df:86:18:f2:e5:2d: 4e:f2:92:db:49:60:4a:3d:47:79:aa:6d:3e:8c:5d: 96:43:a1:ff:66:fd:e4:bf:76:02:dc:a5:19:11:50: b1:ea:2e:a9:df:c0:72:e1:13:3b:88:30:74:f1:e1: f1:66:1e:e3:01:39:84:bc:0c:bf:d3:40:08:8b:4d: 3e:e1:6f:80:0c:8a:cc:75:10:11:2b:db:b0:2b:45: 8f:66:ec:81:b2:f8:4d:de:29:37:a2:44:61:02:96: 94:05:a7:ef:bf:a8:21:47:db:6b:a6:a1:f3:4b:7d: a7:d4:1f:1d:7c:38:3d:5a:80:c8:d8:ee:8d:38:23: 20:c4:64:67:d8:ce:65:fa:71:d8:91:ae:c7:a4:5b: 03:06:7a:2f:d0:d7:4e:b9:34:dd:6b:d0:03:54:6e: 9f:47:58:b3:cc:cc:89:9a:d0:94:16:04:7f:26:3a: ba:a4:79:a2:d4:1c:bd:10:93:d1:d6:8d:99:04:ef: 32:f1:03:bb:7b:8e:97:6f:5b:44:06:93:98:49:1f: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:53:A6:00:6E:E4:93:6C:CA:23:5B:8C:64:A2:7E:E1:12:14:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de6a22b3-5f06-3f02-88f7-e69792db7a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:806c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:2f:47:77:d0:04:17:35:5a:e9:d5:dc:ae:8c:30:76:27: 9b:e1:bd:f6:c3:ab:c5:d9:32:d5:19:2e:15:08:7f:64:f3:2c: 7c:8c:71:77:46:64:a6:07:8b:d3:e7:4a:4b:c9:42:96:78:ac: f6:48:c3:7a:53:7a:d1:50:ba:30:6c:e3:1c:fe:db:b7:af:26: 29:40:58:2b:8c:e1:9d:d8:cc:d9:c3:81:46:00:71:bf:db:fd: 97:3b:0a:52:a5:0b:78:5a:5c:7f:29:e8:28:33:a2:bb:71:b0: d8:49:14:59:d4:70:88:8e:84:42:fd:66:dc:53:19:f4:a9:29: 9f:ad:79:ec:7b:83:12:fb:77:1e:51:af:62:21:14:00:e5:19: 29:5b:d5:92:f4:49:68:cf:26:57:58:f6:30:ef:27:85:ca:71: 8a:0c:3d:a7:04:a1:98:72:3e:39:08:65:07:b1:9f:28:44:85: 7a:27:be:8f:6d:b5:a7:7f:d5:c2:4a:2a:7e:52:37:e2:48:2a: f0:88:44:34:a0:de:76:c8:05:0d:e2:ff:de:7f:5b:fe:d6:90: 89:9d:cf:85:4a:f6:25:70:d5:0c:1d:82:ac:2a:9a:64:d1:7b: 36:e7:12:25:cd:b4:38:2d:5d:07:aa:f4:6b:27:f8:d9:c9:88: 00:b7:29:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAdbRLA35p0brHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzA4MmRiYzgtMmNiMy00OTEzLWIxMTItN2U4MTFjNWJiM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE8qY23PcwWA27vcDmrozizHlLkjm4lHaGbg Q9xjuZgev6uLcDhr7wRfBxpN9yPHsNBz2hTfhhjy5S1O8pLbSWBKPUd5qm0+jF2W Q6H/Zv3kv3YC3KUZEVCx6i6p38By4RM7iDB08eHxZh7jATmEvAy/00AIi00+4W+A DIrMdRARK9uwK0WPZuyBsvhN3ik3okRhApaUBafvv6ghR9trpqHzS32n1B8dfDg9 WoDI2O6NOCMgxGRn2M5l+nHYka7HpFsDBnov0NdOuTTda9ADVG6fR1izzMyJmtCU FgR/Jjq6pHmi1By9EJPR1o2ZBO8y8QO7e46Xb1tEBpOYSR/BgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIN3U6YAbuSTbMojW4xkon7hEhSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGU2YTIyYjMtNWYwNi0z ZjAyLTg4ZjctZTY5NzkyZGI3YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYBs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoiL0d30AQXNVrp1dyujDB2J5vhvfbDq8XZMtUZLhUIf2TzLHyM cXdGZKYHi9PnSkvJQpZ4rPZIw3pTetFQujBs4xz+27evJilAWCuM4Z3YzNnDgUYA cb/b/Zc7ClKlC3haXH8p6CgzortxsNhJFFnUcIiOhEL9ZtxTGfSpKZ+teex7gxL7 dx5Rr2IhFADlGSlb1ZL0SWjPJldY9jDvJ4XKcYoMPacEoZhyPjkIZQexnyhEhXon vo9ttad/1cJKKn5SN+JIKvCIRDSg3nbIBQ3i/95/W/7WkImdz4VK9iVw1Qwdgqwq mmTRezbnEiXNtDgtXQeq9Gsn+NnJiAC3Kes= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:15 2025 by rpki-client