$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa File: ccec6629-a8c0-3cf5-8289-67a111c531f3.roa (raw, json) Hash identifier: iZPYTQRFmmRQkdXW3LxkUZB6DoA/hLcCEPlThFhNCOk= Subject key identifier: FB:42:C3:2C:EB:21:F0:D1:4B:C8:37:C6:51:B4:D4:C7:06:98:90:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA65B0C278158A37B4D1650 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 2001:579:104::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:5b:0c:27:81:58:a3:7b:4d:16:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d120a7f0-d838-45ff-8029-e7a4df0c1f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:18:48:e5:93:17:ce:5a:7a:8c:a1:9e:32: 7a:c0:68:45:ea:a0:d4:e8:0d:64:df:ef:4c:d1:be: 73:71:30:1e:9f:c6:89:80:39:52:5d:b0:b0:2a:69: a1:2e:54:7f:26:23:02:0a:19:60:cc:4d:d5:86:6d: 8d:5f:3a:b5:25:e5:ee:49:58:3e:48:07:ff:7b:04: 32:ad:01:21:52:c1:ed:44:ed:7d:4b:fb:a4:c1:46: 7d:60:03:d7:85:26:e2:48:30:61:4b:0a:47:94:1a: 1f:44:08:56:fa:c7:01:61:e5:7a:5d:98:6b:12:b4: 92:bc:bd:8a:e9:48:b0:9e:55:c6:f3:cf:9a:a6:f7: 94:73:b9:8c:2d:62:1f:10:5e:e5:72:c5:e2:a6:87: 9e:85:93:00:58:ee:17:15:99:91:c2:10:13:7d:44: cf:f7:6b:cf:d3:a4:62:5b:cb:64:c7:a6:81:8f:f9: e7:19:90:26:8d:75:2f:b9:bb:b8:9b:c9:59:f6:44: 56:d8:08:2d:13:95:cd:9c:e5:b2:7e:6a:88:5a:dd: 21:47:0b:82:95:26:c2:87:0d:d8:e2:b3:65:ad:a4: 69:80:ac:75:ab:2c:a7:90:37:4b:79:37:46:67:c6: ea:aa:4d:84:ef:e5:ee:73:74:77:93:83:27:b6:51: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:C3:2C:EB:21:F0:D1:4B:C8:37:C6:51:B4:D4:C7:06:98:90:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:104::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:13:f3:5a:3a:e8:38:b1:90:7e:2f:51:cb:a0:3f:11:21: 8d:f7:e7:52:97:d5:60:06:6c:71:ce:4f:e9:50:4c:e8:2c:11: 41:7c:99:cd:e7:9f:44:76:3e:0d:79:0c:ca:b6:7f:f8:fb:df: 1c:72:67:c8:98:b7:ec:5c:03:91:f0:2c:e1:01:b0:fa:24:f1: 5a:9b:37:6e:98:3d:f7:bb:8f:b0:e2:63:06:61:7c:1d:af:6b: 2b:77:f2:e7:9c:db:34:26:a8:e3:26:fb:50:87:72:81:45:f5: 90:d0:cb:d2:7d:6e:c6:3e:53:4f:07:1b:38:ec:e0:3f:aa:ea: 2f:9d:0e:4f:f5:ec:9f:4c:5d:2b:1e:5f:1a:66:6a:97:47:aa: 34:c4:cd:ce:f2:f2:f8:27:fa:1a:aa:3c:6a:ec:44:af:05:36: cb:5c:9f:8f:10:a9:45:4d:36:8f:00:56:ca:1b:4a:78:3d:9d: 01:96:3f:dc:79:bb:67:f4:c9:58:37:7e:b5:ba:87:c0:ad:90: 85:e1:e2:3a:67:3a:3b:3c:b7:0f:e5:bb:e8:0f:91:7f:5e:06: 99:ae:43:14:9c:b1:14:04:0a:40:10:b4:a4:76:33:c9:13:43: 89:9f:ba:fa:6a:b9:7a:8c:ed:a4:2b:ab:66:08:0f:a2:7a:b0: f1:38:63:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMplsMJ4FYo3tNFlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDEyMGE3ZjAtZDgzOC00NWZmLTgwMjktZTdhNGRmMGMxZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a8YSOWTF85aeoyhnjJ6wGhF6qDU6A1k3+9M 0b5zcTAen8aJgDlSXbCwKmmhLlR/JiMCChlgzE3Vhm2NXzq1JeXuSVg+SAf/ewQy rQEhUsHtRO19S/ukwUZ9YAPXhSbiSDBhSwpHlBofRAhW+scBYeV6XZhrErSSvL2K 6UiwnlXG88+apveUc7mMLWIfEF7lcsXipoeehZMAWO4XFZmRwhATfUTP92vP06Ri W8tkx6aBj/nnGZAmjXUvubu4m8lZ9kRW2AgtE5XNnOWyfmqIWt0hRwuClSbChw3Y 4rNlraRpgKx1qyynkDdLeTdGZ8bqqk2E7+Xuc3R3k4MntlFVcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPtCwyzrIfDRS8g3xlG01McGmJCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2NlYzY2MjktYThjMC0z Y2Y1LTgyODktNjdhMTExYzUzMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeQEE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpQE/NaOug4sZB+L1HLoD8RIY3351KX1WAGbHHOT+lQTOgsEUF8 mc3nn0R2Pg15DMq2f/j73xxyZ8iYt+xcA5HwLOEBsPok8VqbN26YPfe7j7DiYwZh fB2vayt38uec2zQmqOMm+1CHcoFF9ZDQy9J9bsY+U08HGzjs4D+q6i+dDk/17J9M XSseXxpmapdHqjTEzc7y8vgn+hqqPGrsRK8FNstcn48QqUVNNo8AVsobSng9nQGW P9x5u2f0yVg3frW6h8CtkIXh4jpnOjs8tw/lu+gPkX9eBpmuQxScsRQECkAQtKR2 M8kTQ4mfuvpquXqM7aQrq2YID6J6sPE4Y3U= -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:46 2025 by rpki-client