$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa File: 0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa (raw, json) Hash identifier: KTLYtO5gl8Y3eJKxIEdN7+IBwg16s6n+zdLZOD0f8QE= Subject key identifier: 99:DC:C6:54:D2:D4:83:22:C1:C9:6E:A8:7F:E1:07:1B:21:C0:AE:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68C53ED725D43E02D0218 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:d09c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:8c:53:ed:72:5d:43:e0:2d:02:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=b8273649-3448-4d2d-8240-fab2ff506e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3a:88:43:0a:5b:78:5d:eb:b5:03:21:6e:fc: 4d:1d:fa:8c:5c:ec:7a:e0:60:f9:cd:51:60:60:8d: f4:bc:71:ea:ab:8b:e3:c7:d8:6d:0a:fb:f5:dc:57: a9:1f:6e:fc:f3:f7:b0:9d:25:9e:45:3d:57:3c:93: 5d:77:24:82:a8:54:c0:08:5c:d8:08:29:9b:06:30: 76:b1:70:6a:d6:96:29:21:33:b6:d0:31:61:8b:c0: d5:9c:a5:3f:25:8c:61:8f:06:6d:24:1c:fa:85:08: 3e:f9:df:31:9b:3b:29:d8:4d:63:b7:22:32:c8:7a: c9:8a:c7:aa:79:a3:b5:db:47:6a:9a:11:5c:1e:d4: c2:c8:fa:5f:18:8a:0e:b2:da:ab:74:19:c0:fc:89: 78:f7:ba:14:19:3e:8e:29:ae:0e:4d:52:a4:80:08: cc:95:c7:6a:9b:5c:b9:1b:74:5a:9c:c5:4e:92:87: ac:0f:9a:d3:b6:ce:7b:fa:fd:52:15:af:b7:30:48: 8d:1c:75:91:ba:e6:85:ae:05:13:9b:b0:f5:28:1e: 5c:cf:ed:65:53:0b:b6:d2:25:b4:50:2f:1f:46:10: de:f2:ad:95:c1:a6:00:14:3c:7b:70:2c:52:be:68: 1d:f2:9c:b8:63:c2:29:c8:16:e0:16:d6:2f:fa:1e: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DC:C6:54:D2:D4:83:22:C1:C9:6E:A8:7F:E1:07:1B:21:C0:AE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:d09c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f2:5a:98:9f:ec:08:41:05:ed:86:06:05:67:c4:94:04:a7: c0:f7:75:54:a0:3c:16:9d:8f:c7:e1:cc:91:2d:a1:b5:41:22: ea:15:66:e3:94:96:5e:c5:d2:fa:7b:5f:d6:ad:00:63:17:a4: c9:8e:92:df:54:47:d2:ab:52:41:42:2e:97:ac:bb:ce:68:79: 76:49:61:51:b9:72:14:19:6f:b6:ea:90:cb:66:74:9a:5e:01: e5:bc:5d:cc:47:ac:31:d3:72:55:5c:09:43:6a:a3:02:c9:ea: 8a:48:eb:8d:00:f4:e9:c4:9b:93:6b:ba:01:7a:bd:98:fd:08: 3b:2c:0f:5d:30:8e:be:87:a5:40:1b:9e:d9:0b:e6:9d:8a:44: db:c7:86:c6:38:d9:ea:8d:53:98:3b:21:c3:40:6b:24:55:6f: d4:a8:58:2d:91:a4:1a:5f:b5:59:d8:46:b8:f8:3e:2f:7c:d7: 38:d0:a2:bc:e2:42:57:75:6b:1c:1c:72:27:9e:49:1d:57:85: 36:8c:d4:27:de:23:b5:dc:8d:24:58:b3:6d:ff:07:19:3c:97: e7:1b:8e:a1:2a:ad:80:b1:06:1c:1d:b8:90:2d:b8:90:19:af: 50:40:dd:c3:19:de:d2:36:49:f0:6a:63:9b:6e:3b:39:7c:e7: f4:98:f1:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoxT7XJdQ+AtAhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjgyNzM2NDktMzQ0OC00ZDJkLTgyNDAtZmFiMmZmNTA2ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTqIQwpbeF3rtQMhbvxNHfqMXOx64GD5zVFg YI30vHHqq4vjx9htCvv13FepH2788/ewnSWeRT1XPJNddySCqFTACFzYCCmbBjB2 sXBq1pYpITO20DFhi8DVnKU/JYxhjwZtJBz6hQg++d8xmzsp2E1jtyIyyHrJiseq eaO120dqmhFcHtTCyPpfGIoOstqrdBnA/Il497oUGT6OKa4OTVKkgAjMlcdqm1y5 G3RanMVOkoesD5rTts57+v1SFa+3MEiNHHWRuuaFrgUTm7D1KB5cz+1lUwu20iW0 UC8fRhDe8q2VwaYAFDx7cCxSvmgd8py4Y8IpyBbgFtYv+h6tvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJncxlTS1IMiwcluqH/hBxshwK4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQ3MDdhYmEtNDVmYy0z YzdiLWFhMTAtY2IxYzc5MWE3ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFedCc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfyWpif7AhBBe2GBgVnxJQEp8D3dVSgPBadj8fhzJEtobVBIuoV ZuOUll7F0vp7X9atAGMXpMmOkt9UR9KrUkFCLpesu85oeXZJYVG5chQZb7bqkMtm dJpeAeW8XcxHrDHTclVcCUNqowLJ6opI640A9OnEm5NrugF6vZj9CDssD10wjr6H pUAbntkL5p2KRNvHhsY42eqNU5g7IcNAayRVb9SoWC2RpBpftVnYRrj4Pi981zjQ orziQld1axwccieeSR1XhTaM1CfeI7XcjSRYs23/Bxk8l+cbjqEqrYCxBhwduJAt uJAZr1BA3cMZ3tI2SfBqY5tuOzl85/SY8eY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:21 2025 by rpki-client