$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0752a687-3974-3b0f-a6ef-9b3a201468c0.roa File: 0752a687-3974-3b0f-a6ef-9b3a201468c0.roa (raw, json) Hash identifier: k7clGon7vCJWvCNEWpM9fmUu05O+1h/It4W0rblQwzE= Subject key identifier: 84:F6:C8:79:EA:7E:04:47:FE:07:A4:C3:A0:62:E7:37:DC:13:19:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA65DBED674451FC4F65180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0752a687-3974-3b0f-a6ef-9b3a201468c0.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:b004::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:5d:be:d6:74:45:1f:c4:f6:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d0ae075c-fe47-42eb-997e-30de91220cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:e4:fa:16:5c:49:3d:2c:53:3f:4a:c5:1e: 4a:5e:e2:14:c9:ce:f0:ae:da:61:ca:56:a0:80:6d: f1:92:72:e8:a8:b5:66:f4:8f:bb:76:af:d4:06:f4: a0:22:58:c5:69:af:92:3c:41:02:6c:9f:f0:09:80: d6:8c:24:af:cf:1c:9b:d7:b6:5f:be:04:24:5e:2b: 5f:07:32:a6:93:bb:ef:51:15:cb:32:de:8b:45:8d: 21:ea:87:49:27:92:0b:db:71:c0:a9:ca:11:d1:c2: cd:30:dd:bc:c6:4c:16:b5:ee:7b:53:dd:e0:dc:0a: 29:0c:93:ec:8d:b2:92:a4:88:db:72:56:84:fc:60: ed:17:b3:1e:cc:05:a9:01:ff:69:c0:73:f0:e8:58: 99:99:20:66:6d:53:25:78:89:b4:fd:15:14:5e:25: 05:b2:6c:f5:c1:76:00:eb:1e:cb:af:cb:21:cd:51: 88:4b:16:49:44:ff:2b:0b:ab:7f:03:40:9a:7c:67: 6f:86:2e:06:04:06:fe:92:d0:96:ef:30:d4:83:f1: 98:43:aa:d3:80:b7:3e:b6:be:f3:81:56:2b:18:4e: da:40:48:80:73:d4:16:79:aa:1c:14:c9:84:58:8c: 62:11:9c:0c:0a:2c:31:84:db:34:42:bb:a5:77:1c: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F6:C8:79:EA:7E:04:47:FE:07:A4:C3:A0:62:E7:37:DC:13:19:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0752a687-3974-3b0f-a6ef-9b3a201468c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:b004::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3a:a8:d2:b2:fd:68:07:35:f0:17:2a:fa:0b:44:88:ba:8e: a1:b9:24:a0:9d:d8:d9:af:21:e6:ca:64:46:9b:b7:50:c5:99: 72:d2:98:21:2d:16:92:9a:98:f1:cb:24:2d:99:85:15:82:9e: ce:31:c1:50:7a:06:5b:10:17:a3:ad:b5:15:77:15:37:e0:92: 65:04:ba:47:10:1a:ac:e0:1c:e9:1c:cb:83:d3:8f:a6:bc:01: 82:6f:a8:07:01:b1:3e:90:dd:98:61:a5:5a:14:9f:a1:71:af: 14:9e:92:8f:ea:9d:87:ac:6d:5c:cd:15:a6:56:8b:76:ad:45: 6a:7c:7b:db:64:e9:bc:01:bc:4a:cb:75:c2:50:a7:a1:59:72: 3c:88:98:32:5a:43:e3:37:86:22:5d:7a:e1:39:bc:03:4c:a5: 72:11:2e:d2:9c:60:61:62:86:56:77:0a:85:d2:a0:48:c6:d7: 37:a2:f2:ec:09:39:fd:d6:3c:65:05:26:3e:14:4a:9f:25:84: 99:09:f2:93:2f:83:c0:0c:10:1a:75:af:dc:ef:ae:c5:4c:35: 4e:4e:8a:50:36:5a:9a:a8:77:ee:dc:4d:f7:6e:ac:7d:f1:c5: 87:52:1c:22:c7:54:3b:c9:1e:b4:03:93:fd:c6:1e:49:8c:6f: 0c:ab:ff:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpl2+1nRFH8T2UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDBhZTA3NWMtZmU0Ny00MmViLTk5N2UtMzBkZTkxMjIwY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHzk+hZcST0sUz9KxR5KXuIUyc7wrtphylag gG3xknLoqLVm9I+7dq/UBvSgIljFaa+SPEECbJ/wCYDWjCSvzxyb17ZfvgQkXitf BzKmk7vvURXLMt6LRY0h6odJJ5IL23HAqcoR0cLNMN28xkwWte57U93g3AopDJPs jbKSpIjbclaE/GDtF7MezAWpAf9pwHPw6FiZmSBmbVMleIm0/RUUXiUFsmz1wXYA 6x7Lr8shzVGISxZJRP8rC6t/A0CafGdvhi4GBAb+ktCW7zDUg/GYQ6rTgLc+tr7z gVYrGE7aQEiAc9QWeaocFMmEWIxiEZwMCiwxhNs0QruldxzkVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIT2yHnqfgRH/gekw6Bi5zfcExniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDc1MmE2ODctMzk3NC0z YjBmLWE2ZWYtOWIzYTIwMTQ2OGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFebAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABw6qNKy/WgHNfAXKvoLRIi6jqG5JKCd2NmvIebKZEabt1DFmXLS mCEtFpKamPHLJC2ZhRWCns4xwVB6BlsQF6OttRV3FTfgkmUEukcQGqzgHOkcy4PT j6a8AYJvqAcBsT6Q3ZhhpVoUn6FxrxSeko/qnYesbVzNFaZWi3atRWp8e9tk6bwB vErLdcJQp6FZcjyImDJaQ+M3hiJdeuE5vANMpXIRLtKcYGFihlZ3CoXSoEjG1zei 8uwJOf3WPGUFJj4USp8lhJkJ8pMvg8AMEBp1r9zvrsVMNU5OilA2Wpqod+7cTfdu rH3xxYdSHCLHVDvJHrQDk/3GHkmMbwyr/9k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:15 2025 by rpki-client