$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa File: a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa (raw, json) Hash identifier: kMDnPGNS0lJzhWZhOAP5hbf7q8HM/pZtPLaD2P9L3LM= Subject key identifier: CC:19:01:FF:42:44:6A:5F:59:98:57:49:C7:77:3F:38:77:46:E1:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA65E335DE7BAE8A1D05200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:b949::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:5e:33:5d:e7:ba:e8:a1:d0:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=b1b43427-e0b4-4156-8eef-7ba747f3b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:fc:5b:9e:49:e7:88:6d:c2:ea:74:3d:0c: cb:89:e2:4c:a4:6d:f3:d9:93:66:53:42:97:9c:9c: 17:fd:2e:a3:0b:5d:29:71:96:d0:01:16:0b:eb:6c: f1:ff:a7:08:40:3a:b5:c9:51:5b:75:1c:9b:f4:04: e6:d6:96:8f:68:22:da:a7:e9:d5:85:db:5f:02:e7: 12:26:20:c8:17:f5:9d:fe:8b:4e:eb:aa:e0:4c:06: db:0d:68:23:39:dd:6d:2d:f3:4b:97:27:3d:3d:da: f7:7d:72:0e:33:1d:e1:ba:18:e5:6a:a1:60:24:31: ce:85:a6:7f:ef:d6:0f:55:43:2b:0c:b6:d7:b1:7f: 63:3a:7b:e2:1a:e4:b7:af:23:85:80:55:47:9a:a9: 2f:0c:02:08:17:c0:b3:ad:2b:7c:84:7e:ad:ab:9f: 3f:9c:40:2e:ca:f8:12:ed:cb:14:4a:e7:b2:74:4a: 4c:70:a5:fc:c7:f1:41:fe:82:6a:8f:f7:ff:b6:29: 5d:c6:e0:87:8a:8c:17:4b:96:5b:f4:b6:9a:98:b1: 3f:43:3b:c1:fe:3d:bb:bf:a0:18:4f:0a:74:07:24: 64:23:c4:92:b5:33:ad:70:fd:1f:44:66:b3:33:0b: 57:ab:82:3b:ba:93:28:70:13:97:69:e4:7d:7d:d3: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:19:01:FF:42:44:6A:5F:59:98:57:49:C7:77:3F:38:77:46:E1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:b949::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:85:ac:d7:cf:0a:52:8e:08:27:f7:ad:3a:1d:ef:19:41:fa: c2:f3:d3:6f:d6:d7:bc:5e:3f:38:1d:af:99:47:67:45:26:8d: 3f:e5:e3:a8:13:57:39:9b:ba:20:5c:49:8e:8a:b7:1e:63:2f: 7f:ac:b0:ee:43:d9:b4:91:9f:4d:78:66:06:b5:7a:3e:ab:65: 9f:aa:c7:5a:01:25:bd:21:b3:14:6f:e7:79:f9:f3:1a:44:8d: 46:9c:51:54:1a:a4:cc:e5:8d:c2:35:f2:e6:b8:4e:72:98:32: b8:d7:93:30:54:f5:a9:e8:87:fd:b7:b0:99:0f:37:66:eb:dd: 6f:18:a0:71:c2:af:24:50:64:c8:9d:5a:7f:c1:c4:3d:90:40: 36:04:b6:3e:66:22:bb:cc:09:a6:a8:03:80:25:ea:37:bc:da: 3f:ae:c4:1b:58:60:0a:95:e4:a9:22:63:9a:fa:41:5a:45:79: 91:4c:3d:97:f0:23:70:cb:6a:98:9f:0a:55:ef:7e:f5:cb:47: 20:0b:74:93:8e:82:e4:39:de:0d:4a:9c:7a:fa:a1:7c:f9:80: ff:25:25:da:7c:73:21:61:21:00:eb:93:2c:75:23:c6:70:3a: b3:66:8d:af:f8:fd:28:7d:c9:7e:bb:f0:da:6d:4d:96:b0:b0: 5f:5b:85:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpl4zXee66KHQUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjFiNDM0MjctZTBiNC00MTU2LThlZWYtN2JhNzQ3ZjNiM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGv8W55J54htwup0PQzLieJMpG3z2ZNmU0KX nJwX/S6jC10pcZbQARYL62zx/6cIQDq1yVFbdRyb9ATm1paPaCLap+nVhdtfAucS JiDIF/Wd/otO66rgTAbbDWgjOd1tLfNLlyc9Pdr3fXIOMx3huhjlaqFgJDHOhaZ/ 79YPVUMrDLbXsX9jOnviGuS3ryOFgFVHmqkvDAIIF8CzrSt8hH6tq58/nEAuyvgS 7csUSueydEpMcKX8x/FB/oJqj/f/tildxuCHiowXS5Zb9LaamLE/QzvB/j27v6AY Twp0ByRkI8SStTOtcP0fRGazMwtXq4I7upMocBOXaeR9fdOHPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwZAf9CRGpfWZhXScd3Pzh3RuFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNmNGJiZDItMTBjZi0z MzI4LTgxZmUtNjg5ZTg5Y2VhY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeblJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD2FrNfPClKOCCf3rTod7xlB+sLz02/W17xePzgdr5lHZ0UmjT/l 46gTVzmbuiBcSY6Ktx5jL3+ssO5D2bSRn014Zga1ej6rZZ+qx1oBJb0hsxRv53n5 8xpEjUacUVQapMzljcI18ua4TnKYMrjXkzBU9anoh/23sJkPN2br3W8YoHHCryRQ ZMidWn/BxD2QQDYEtj5mIrvMCaaoA4Al6je82j+uxBtYYAqV5KkiY5r6QVpFeZFM PZfwI3DLapifClXvfvXLRyALdJOOguQ53g1KnHr6oXz5gP8lJdp8cyFhIQDrkyx1 I8ZwOrNmja/4/Sh9yX678NptTZawsF9bhRY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:10 2025 by rpki-client