$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21fd04c4-d662-330e-9ac3-890900b8904f.roa File: 21fd04c4-d662-330e-9ac3-890900b8904f.roa (raw, json) Hash identifier: r1IdP623AlyNWrqkpQmogb0Gbu5yJnSXr3YBZr5r2aY= Subject key identifier: DA:EF:0F:33:47:44:E8:27:65:30:D5:7B:9F:4F:5B:78:52:7F:C4:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA689EB990F2AD31F7D6E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21fd04c4-d662-330e-9ac3-890900b8904f.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:1164::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:89:eb:99:0f:2a:d3:1f:7d:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=f620637d-0190-4d39-8554-6ec5241decf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:28:4f:5a:57:90:41:cf:10:c2:f3:59:f6: fc:f3:c8:18:b2:2b:ce:52:bc:83:23:26:40:40:b6: b8:40:62:84:c9:f1:01:8e:0c:b4:45:61:6e:ef:d7: c2:8e:df:0c:c5:e9:61:a8:19:65:22:4e:af:9f:dc: eb:5c:6e:11:25:81:c2:66:69:48:c2:e7:20:da:a1: ef:98:fc:13:84:c0:1d:e6:88:c5:97:3c:18:af:6b: 5f:15:16:5f:b3:2a:6e:a1:17:24:30:13:86:84:6d: d9:ed:72:5b:9b:5e:f6:38:c3:63:b7:90:99:3b:1d: db:d4:d6:4f:23:83:7c:c4:e3:09:85:4c:72:a5:9f: c0:10:5d:c3:30:a1:0a:8e:e9:4f:6e:8a:6f:30:a4: fc:97:5f:0e:bd:24:29:ec:f3:1d:a6:95:f0:ea:89: 9a:09:9d:57:df:ce:a7:03:38:5a:cb:4c:ee:2d:a3: 2a:c4:79:6a:98:62:99:6c:34:51:8b:c6:4f:3d:6b: fe:5c:d2:c4:72:0c:ab:b3:3c:6b:68:e9:58:76:5d: f2:ad:bd:35:8a:e3:4d:4b:af:f4:b4:a2:7f:9c:a4: d8:1b:5a:80:36:bb:ad:db:95:4f:1b:53:72:76:60: 2e:dc:42:ac:eb:ad:77:9c:f3:27:da:0a:11:a0:80: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:0F:33:47:44:E8:27:65:30:D5:7B:9F:4F:5B:78:52:7F:C4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21fd04c4-d662-330e-9ac3-890900b8904f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:1164::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:51:95:a9:e1:e1:64:98:b0:c4:32:5b:9d:2a:d2:74:8a:4b: 47:e4:2f:6b:3e:97:87:a5:16:4b:c1:b7:8b:d5:4e:9e:f8:09: bc:f5:2c:22:a2:07:5d:41:4b:ab:da:18:2a:9c:eb:45:04:12: 8c:17:17:ce:a7:87:db:be:ac:b8:46:ea:23:bd:e1:c6:71:09: 6e:44:f9:20:12:06:42:55:63:cb:ed:69:c9:09:ae:ec:e3:14: 84:2f:2f:a6:5a:db:cd:da:38:0b:e0:78:77:a7:89:b0:d9:aa: 73:1a:97:9a:a5:3a:76:9f:5b:15:64:76:1f:ae:78:35:d1:7d: f4:04:2f:02:be:e1:f0:a4:cf:e3:8d:b8:6d:1f:50:2e:e6:87: b2:ca:99:f0:21:fe:27:4b:5b:b7:79:f3:8c:91:a9:fe:e1:cf: 18:a8:8c:66:7c:72:cc:a8:7d:ce:a3:ee:89:48:53:fa:32:91: 73:31:ee:a4:e4:42:a3:ef:9b:1f:44:e5:b4:05:7c:2b:53:54: 17:56:89:66:2d:48:de:eb:cf:65:60:57:eb:78:3e:9c:6b:12: 18:d0:4d:bf:28:b2:66:37:1a:4c:c2:d4:70:c3:85:fc:d1:21: 12:d6:8e:b1:16:31:b8:a9:a6:59:eb:59:b0:9f:fe:b8:37:be: 67:a4:03:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMponrmQ8q0x99boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjYyMDYzN2QtMDE5MC00ZDM5LTg1NTQtNmVjNTI0MWRlY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQoT1pXkEHPEMLzWfb888gYsivOUryDIyZA QLa4QGKEyfEBjgy0RWFu79fCjt8MxelhqBllIk6vn9zrXG4RJYHCZmlIwucg2qHv mPwThMAd5ojFlzwYr2tfFRZfsypuoRckMBOGhG3Z7XJbm172OMNjt5CZOx3b1NZP I4N8xOMJhUxypZ/AEF3DMKEKjulPbopvMKT8l18OvSQp7PMdppXw6omaCZ1X386n Azhay0zuLaMqxHlqmGKZbDRRi8ZPPWv+XNLEcgyrszxraOlYdl3yrb01iuNNS6/0 tKJ/nKTYG1qANrut25VPG1NydmAu3EKs6613nPMn2goRoIDFEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrvDzNHROgnZTDVe59PW3hSf8SPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFmZDA0YzQtZDY2Mi0z MzBlLTlhYzMtODkwOTAwYjg5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeRFk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtRlanh4WSYsMQyW50q0nSKS0fkL2s+l4elFkvBt4vVTp74Cbz1 LCKiB11BS6vaGCqc60UEEowXF86nh9u+rLhG6iO94cZxCW5E+SASBkJVY8vtackJ ruzjFIQvL6Za283aOAvgeHenibDZqnMal5qlOnafWxVkdh+ueDXRffQELwK+4fCk z+ONuG0fUC7mh7LKmfAh/idLW7d584yRqf7hzxiojGZ8csyofc6j7olIU/oykXMx 7qTkQqPvmx9E5bQFfCtTVBdWiWYtSN7rz2VgV+t4PpxrEhjQTb8osmY3GkzC1HDD hfzRIRLWjrEWMbipplnrWbCf/rg3vmekA/k= -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:51 2025 by rpki-client