$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d5acc4-225e-3272-b297-785d07db8798.roa File: 20d5acc4-225e-3272-b297-785d07db8798.roa (raw, json) Hash identifier: I+wnSYfz+SX9hKu5vNoQ3On7Wse8H3QSsP+WN8ejtnw= Subject key identifier: DF:A3:E3:F2:9A:1D:82:E4:90:22:ED:CD:F8:D2:9B:20:75:AE:95:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD06E63C152952D73C8B0C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d5acc4-225e-3272-b297-785d07db8798.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 2001:579:8448::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:6e:63:c1:52:95:2d:73:c8:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=563e23f9-5a20-4e12-bb2e-3daf299d79dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:61:55:f6:59:c2:41:23:b2:e2:38:50:5a: 15:a3:d5:e5:29:48:b5:7c:bd:c5:05:8f:09:21:cc: df:bb:5f:6c:ec:fc:9c:bb:b0:2c:3a:dc:3c:cd:e3: fd:ae:7f:f8:fe:dd:52:58:44:97:ed:c7:e0:ce:5b: 1a:1f:9a:a7:28:f2:16:64:b3:c5:07:e1:64:d2:c0: b3:74:e6:e5:bf:66:7e:8b:9f:62:2e:99:5c:7b:54: bf:ae:8c:83:a0:b1:93:87:83:d5:61:d1:df:13:37: ca:aa:65:f5:ff:94:d9:66:cc:8a:a7:d3:2f:39:7f: bd:02:32:a6:a9:ea:60:69:9f:3d:29:14:ca:8b:ca: 59:6c:d3:b5:ab:d5:9c:d8:bb:0f:be:8d:0d:be:95: d6:15:a1:02:3a:46:61:2a:90:e7:25:a7:0e:78:7c: 74:68:93:90:17:46:8f:2a:c7:81:e4:55:33:12:d0: c2:b0:0c:1d:10:23:e3:63:27:4c:12:0b:14:be:2b: e2:a3:a1:9e:d6:73:84:a7:56:f1:5b:c2:22:af:9c: 46:c7:29:2c:14:90:fd:ce:ea:67:af:97:d1:d0:21: 55:39:4d:60:e7:75:14:bf:01:f0:87:1a:ec:20:86: 40:22:f5:5f:2a:e9:14:a1:f9:0d:ca:be:fa:ed:2d: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:E3:F2:9A:1D:82:E4:90:22:ED:CD:F8:D2:9B:20:75:AE:95:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d5acc4-225e-3272-b297-785d07db8798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:8448::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c1:df:fd:1b:72:4f:19:06:aa:5c:52:3a:9f:33:52:7b:e3: 07:f4:ec:4c:cc:64:ac:30:04:03:a3:8f:27:aa:2b:18:35:4c: 9e:67:f4:4a:c1:76:59:69:5b:67:a1:7c:13:0b:59:c9:fc:d1: d8:04:62:03:c2:ab:a1:33:9f:89:ff:40:7a:9c:1f:0c:a1:eb: 35:95:c0:78:d6:19:36:39:1b:ca:ac:b1:d0:a8:68:a0:6e:ee: 34:c3:21:0b:b6:46:0e:8d:d0:25:34:66:3e:9e:ab:4c:17:44: 21:10:0f:7d:b6:d1:4b:ae:57:c9:44:83:15:fc:5f:86:82:b8: b2:fd:72:b2:e5:cb:79:0a:c5:35:ad:7a:ed:30:30:92:4d:71: 8e:ab:90:c5:b1:67:2e:c9:a5:e3:8f:c8:bc:08:51:8f:9b:34: d7:66:c6:7c:6b:13:e6:23:99:0e:f0:9c:92:dc:db:0a:2c:4f: 14:0e:82:9a:09:7a:6c:43:17:89:a0:3e:9b:4e:3e:1e:12:bc: 1e:c4:f1:1b:75:73:9f:41:76:3f:4e:fc:5e:2d:6e:e8:00:8a: d9:ea:97:0a:3f:8b:ad:eb:48:2e:c9:fc:fa:28:bc:3a:54:c0: ca:58:4b:fa:00:62:9e:a6:00:b2:e4:e5:80:09:dc:32:16:9c: af:a4:52:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0G5jwVKVLXPIsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NTYzZTIzZjktNWEyMC00ZTEyLWJiMmUtM2RhZjI5OWQ3OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng5hVfZZwkEjsuI4UFoVo9XlKUi1fL3FBY8J Iczfu19s7Pycu7AsOtw8zeP9rn/4/t1SWESX7cfgzlsaH5qnKPIWZLPFB+Fk0sCz dOblv2Z+i59iLplce1S/royDoLGTh4PVYdHfEzfKqmX1/5TZZsyKp9MvOX+9AjKm qepgaZ89KRTKi8pZbNO1q9Wc2LsPvo0NvpXWFaECOkZhKpDnJacOeHx0aJOQF0aP KseB5FUzEtDCsAwdECPjYydMEgsUvivio6Ge1nOEp1bxW8Iir5xGxyksFJD9zupn r5fR0CFVOU1g53UUvwHwhxrsIIZAIvVfKukUofkNyr767S1CAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN+j4/KaHYLkkCLtzfjSmyB1rpXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBkNWFjYzQtMjI1ZS0z MjcyLWIyOTctNzg1ZDA3ZGI4Nzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYRI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLB3/0bck8ZBqpcUjqfM1J74wf07EzMZKwwBAOjjyeqKxg1TJ5n 9ErBdllpW2ehfBMLWcn80dgEYgPCq6Ezn4n/QHqcHwyh6zWVwHjWGTY5G8qssdCo aKBu7jTDIQu2Rg6N0CU0Zj6eq0wXRCEQD3220UuuV8lEgxX8X4aCuLL9crLly3kK xTWteu0wMJJNcY6rkMWxZy7JpeOPyLwIUY+bNNdmxnxrE+YjmQ7wnJLc2wosTxQO gpoJemxDF4mgPptOPh4SvB7E8Rt1c59Bdj9O/F4tbugAitnqlwo/i63rSC7J/Poo vDpUwMpYS/oAYp6mALLk5YAJ3DIWnK+kUj0= -----END CERTIFICATE-----Generated at Wed May 13 12:16:32 2026 by rpki-client