$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38820619-2eff-39ad-a014-ecc90b2fd978.roa File: 38820619-2eff-39ad-a014-ecc90b2fd978.roa (raw, json) Hash identifier: YfuZAWSxNM4G541eRndxzO2U2Od6XCijWgZPaZpg06A= Subject key identifier: 11:48:13:10:15:A6:11:09:7E:80:A4:70:7D:F6:94:E2:E0:57:90:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AE668DA8AC6D56051911E0100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38820619-2eff-39ad-a014-ecc90b2fd978.roa Signing time: Mon 18 Aug 2025 18:27:57 +0000 ROA not before: Mon 18 Aug 2025 18:27:57 +0000 ROA not after: Sun 16 Nov 2025 19:27:57 +0000 asID: 22773 IP address blocks: 2001:57a:404e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:68:da:8a:c6:d5:60:51:91:1e:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 18 18:27:57 2025 GMT Not After : Nov 16 19:27:57 2025 GMT Subject: CN=759e04b1-9264-4850-b98c-d76dab60d35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:f2:65:0f:4e:59:40:46:88:ca:b6:4f:04: 79:74:5b:e6:bf:c8:26:53:d9:29:a9:cf:38:b0:80: 33:89:d0:c5:7b:ec:d1:7d:0a:38:97:35:79:f2:9f: 74:25:23:80:fd:fa:d3:95:7c:67:77:a4:d7:b8:c3: fa:a9:eb:8a:cf:63:74:27:4a:ae:f8:4a:0e:cc:69: 00:54:fd:6d:88:ba:d2:5a:54:d4:a9:e6:ac:ec:f0: 3e:cb:c8:1c:64:03:59:1f:f7:18:59:50:9f:a5:98: 86:de:c6:be:0c:d0:d5:3e:99:c1:8a:12:04:f0:ec: a1:48:43:6f:1c:0d:12:01:e8:63:6e:72:ce:0b:c0: 12:52:03:f3:a8:bd:74:94:7f:22:2a:eb:7b:ed:54: 2e:17:2b:6b:ab:9e:09:83:3d:17:8b:67:75:3c:07: 8e:bd:31:30:fc:9c:56:6c:b6:49:b1:eb:54:9a:86: 91:cc:58:1a:dc:0b:bd:d2:ab:d1:43:c9:2d:ce:76: a0:66:91:e1:11:c3:81:f0:e8:e3:6f:53:37:83:51: d5:96:1f:be:4e:a0:fe:a1:78:a5:4a:8f:36:99:15: 20:94:4c:b9:5d:39:14:eb:1c:7e:26:e8:81:ae:1f: 60:1c:0d:5a:4a:88:7e:7d:9c:7a:93:d5:56:8a:31: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:13:10:15:A6:11:09:7E:80:A4:70:7D:F6:94:E2:E0:57:90:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38820619-2eff-39ad-a014-ecc90b2fd978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:404e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e4:23:ca:62:e4:df:20:1f:d4:63:06:6a:5d:56:5f:de:2b: d3:f7:1a:d9:79:6d:08:a0:f0:95:58:4b:cd:ef:4d:5b:ca:e4: 3c:6f:9f:4f:7c:42:fe:a4:68:59:ee:9f:55:c7:80:0a:f3:85: ce:4e:39:dd:11:5f:41:8a:b1:92:56:dd:8c:33:0d:c0:bf:6c: 52:14:04:d1:d9:1f:87:a5:79:37:0c:19:47:04:35:d1:f8:5f: 75:65:de:cb:97:e5:08:fe:dd:72:0e:d8:52:b6:de:35:55:7a: c8:1b:31:47:99:fa:0b:df:23:be:51:aa:7f:7d:30:5b:96:3a: 08:a5:13:2a:c1:3b:b4:df:38:30:58:59:21:9a:68:fe:b4:5f: fe:76:ff:56:a7:3c:6b:94:8d:97:fa:12:78:b1:23:3f:54:0a: a0:2c:d0:6b:b5:71:ad:bc:b6:d1:f1:7b:f7:7e:81:0e:ef:f8: bb:3f:6f:9b:bc:84:4d:10:b0:2f:3f:3f:a7:d6:d9:ea:a8:8c: d8:04:b9:19:95:f2:60:4e:06:90:17:e7:d3:d2:81:e9:d2:24: 19:61:fd:1f:a0:35:ca:08:f0:c4:14:f7:2b:62:79:9f:2a:69: f8:1d:d5:35:8c:1f:e5:0c:d5:a7:16:f4:bc:b9:d3:fe:c7:fe: 04:57:d0:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErmaNqKxtVgUZEeAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxODE4Mjc1N1oXDTI1MTExNjE5Mjc1N1owLzEtMCsGA1UEAxMk NzU5ZTA0YjEtOTI2NC00ODUwLWI5OGMtZDc2ZGFiNjBkMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vyZQ9OWUBGiMq2TwR5dFvmv8gmU9kpqc84 sIAzidDFe+zRfQo4lzV58p90JSOA/frTlXxnd6TXuMP6qeuKz2N0J0qu+EoOzGkA VP1tiLrSWlTUqeas7PA+y8gcZANZH/cYWVCfpZiG3sa+DNDVPpnBihIE8OyhSENv HA0SAehjbnLOC8ASUgPzqL10lH8iKut77VQuFytrq54Jgz0Xi2d1PAeOvTEw/JxW bLZJsetUmoaRzFga3Au90qvRQ8ktznagZpHhEcOB8Ojjb1M3g1HVlh++TqD+oXil So82mRUglEy5XTkU6xx+JuiBrh9gHA1aSoh+fZx6k9VWijFWcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFIExAVphEJfoCkcH32lOLgV5A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg4MjA2MTktMmVmZi0z OWFkLWEwMTQtZWNjOTBiMmZkOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFekBO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbkI8pi5N8gH9RjBmpdVl/eK9P3Gtl5bQig8JVYS83vTVvK5Dxv n098Qv6kaFnun1XHgArzhc5OOd0RX0GKsZJW3YwzDcC/bFIUBNHZH4eleTcMGUcE NdH4X3Vl3suX5Qj+3XIO2FK23jVVesgbMUeZ+gvfI75Rqn99MFuWOgilEyrBO7Tf ODBYWSGaaP60X/52/1anPGuUjZf6EnixIz9UCqAs0Gu1ca28ttHxe/d+gQ7v+Ls/ b5u8hE0QsC8/P6fW2eqojNgEuRmV8mBOBpAX59PSgenSJBlh/R+gNcoI8MQU9yti eZ8qafgd1TWMH+UM1acW9Ly50/7H/gRX0Ms= -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:49 2025 by rpki-client