$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82b2ed2-84ab-37b7-9722-4cce4321d558.roa File: c82b2ed2-84ab-37b7-9722-4cce4321d558.roa (raw, json) Hash identifier: RXaqKqv7ti1gjueZtAHJi11btrzzXgAAAy87k3lrB6w= Subject key identifier: F1:D9:8C:FD:7C:4A:7C:A4:3E:02:54:18:4A:31:D3:CB:C2:6A:A8:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA6609A189955987A589800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82b2ed2-84ab-37b7-9722-4cce4321d558.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:57a:f217::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:60:9a:18:99:55:98:7a:58:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=91872bc6-2031-4092-8a00-af0bca87e4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:13:6e:6a:6f:91:4c:9e:b7:6f:d8:fe:5b: a7:15:04:cb:0c:5b:7f:d9:a0:21:f2:44:c2:01:3c: d9:f1:71:36:20:c4:d6:7a:ce:46:e1:6f:41:b0:01: 9c:1d:47:05:b8:d5:71:d1:6d:5d:fe:f2:c5:87:ef: fb:2b:04:fd:e5:32:7f:6e:b9:6b:25:55:93:80:7f: 81:55:fc:64:37:ed:87:01:6a:91:c5:88:46:71:16: ed:1d:5b:ec:f7:6c:1f:e4:f5:bf:4b:2e:58:64:62: f7:04:34:9a:f0:10:05:04:6f:ce:4b:bd:a2:66:54: c7:82:1e:52:4d:56:7c:45:02:18:42:56:ed:27:26: 77:6e:b4:44:e9:ac:97:c2:29:6a:de:70:57:38:e0: bd:66:35:b5:af:0e:7e:8d:a9:9f:ad:67:bb:ec:ab: e5:23:6d:7e:fe:17:fe:31:32:3a:ed:9a:ee:49:33: a2:52:4a:78:0c:e6:f9:a9:8b:dc:66:3a:5f:d8:97: 9d:42:ae:a2:43:e9:51:b7:05:c4:a2:ce:cf:fc:d8: 15:12:b7:7a:86:8b:fe:c6:16:bf:2c:87:2d:63:80: 8f:41:a3:70:dc:c5:3c:3e:2c:1a:46:4e:c9:09:08: 68:f8:77:3f:2f:f4:b6:40:7d:f9:0e:c4:47:61:53: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:8C:FD:7C:4A:7C:A4:3E:02:54:18:4A:31:D3:CB:C2:6A:A8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82b2ed2-84ab-37b7-9722-4cce4321d558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:f217::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a0:9c:07:2b:a2:fa:90:10:f4:6f:be:74:f5:f3:a2:50:8f: 39:3e:b4:21:05:74:c1:69:9e:4a:26:d6:53:4d:c4:a5:02:80: 84:1e:72:0a:f1:1e:73:4e:50:83:76:80:8d:5c:90:e1:10:3c: fc:a0:9a:51:6a:a9:ed:fd:41:e5:33:2b:de:4d:bd:05:6b:72: d3:23:15:55:25:10:22:43:18:2f:0f:00:45:46:d3:ed:90:2f: b7:7a:ef:2c:90:88:d9:b8:93:40:b7:ac:78:dc:04:25:17:f4: 40:3a:12:6a:f1:23:01:a4:21:ae:80:45:ea:d2:21:0b:d1:c0: 3a:7f:ef:ba:2b:95:f9:cb:73:1d:cb:2b:38:49:b7:1e:27:59: f5:35:e2:36:da:07:3d:c6:e8:fe:e6:a9:80:9f:6e:c5:b9:1e: 7e:f9:01:f7:01:7c:3c:0e:fa:96:31:91:67:e0:38:19:33:ca: ec:9a:64:61:72:98:12:dd:cd:57:9d:c0:eb:06:bf:90:6f:9c: 58:97:83:98:fa:9b:c0:45:73:52:fa:08:4f:43:7c:16:41:1e: 5e:5d:c1:4e:8b:ce:5c:9f:53:55:4a:18:cd:27:ad:a0:77:4f: 7e:42:25:7b:72:2f:45:68:07:cb:d1:c6:c3:3d:79:80:f4:3b: 78:ff:a3:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpmCaGJlVmHpYmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTE4NzJiYzYtMjAzMS00MDkyLThhMDAtYWYwYmNhODdlNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtMTbmpvkUyet2/Y/lunFQTLDFt/2aAh8kTC ATzZ8XE2IMTWes5G4W9BsAGcHUcFuNVx0W1d/vLFh+/7KwT95TJ/brlrJVWTgH+B VfxkN+2HAWqRxYhGcRbtHVvs92wf5PW/Sy5YZGL3BDSa8BAFBG/OS72iZlTHgh5S TVZ8RQIYQlbtJyZ3brRE6ayXwilq3nBXOOC9ZjW1rw5+jamfrWe77KvlI21+/hf+ MTI67ZruSTOiUkp4DOb5qYvcZjpf2JedQq6iQ+lRtwXEos7P/NgVErd6hov+xha/ LIctY4CPQaNw3MU8PiwaRk7JCQho+Hc/L/S2QH35DsRHYVNVJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPHZjP18SnykPgJUGEox08vCaqhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzgyYjJlZDItODRhYi0z N2I3LTk3MjItNGNjZTQzMjFkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFevIX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADygnAcrovqQEPRvvnT186JQjzk+tCEFdMFpnkom1lNNxKUCgIQe cgrxHnNOUIN2gI1ckOEQPPygmlFqqe39QeUzK95NvQVrctMjFVUlECJDGC8PAEVG 0+2QL7d67yyQiNm4k0C3rHjcBCUX9EA6EmrxIwGkIa6ARerSIQvRwDp/77orlfnL cx3LKzhJtx4nWfU14jbaBz3G6P7mqYCfbsW5Hn75AfcBfDwO+pYxkWfgOBkzyuya ZGFymBLdzVedwOsGv5BvnFiXg5j6m8BFc1L6CE9DfBZBHl5dwU6LzlyfU1VKGM0n raB3T35CJXtyL0VoB8vRxsM9eYD0O3j/o4k= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:18 2025 by rpki-client