$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa File: 1187695e-f6c9-3b69-a0de-60371da5a4c3.roa (raw, json) Hash identifier: FhFVvn8nqEvmH9MIKKRq7OBudxwOYZ7ed9XyB9hlOm8= Subject key identifier: E0:5D:7F:66:B7:A3:89:4E:9C:EA:53:81:14:2E:98:39:F0:FF:CD:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A7FE0A99DAD7DA12725EB3C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 2001:579:904b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:a9:9d:ad:7d:a1:27:25:eb:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=0ae25426-6e47-41b6-a999-31035417d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:b8:94:b7:d5:b1:4b:ce:74:d5:c1:36:c5: eb:37:c7:75:92:dd:60:54:54:b6:b7:96:76:fa:41: 85:43:89:d6:29:71:3b:5d:2f:61:c7:a8:36:f6:c9: 5a:b8:b5:28:e4:a6:52:f9:8c:0a:f5:9c:81:e1:91: 49:0c:67:6c:c1:9f:3c:a5:bc:95:7f:54:62:a2:7b: c9:f8:4f:17:9f:9e:ca:a2:ea:48:e4:73:d2:8f:21: a5:c5:b8:36:cd:c5:ab:9e:53:e7:cf:2c:36:e3:f1: e2:9f:6d:e4:57:86:14:83:34:5f:ad:c5:d8:ac:d2: bc:99:ec:0c:e9:b8:1f:50:b3:0a:6d:d5:48:ad:b0: 5b:e3:c6:27:bc:97:e6:8f:07:97:10:91:51:9d:8f: 89:0b:b8:fd:30:17:0d:fe:5e:28:18:6d:7c:57:6f: 8d:6a:75:1a:53:8e:86:72:16:96:97:20:d6:e2:96: b6:79:ca:0a:c1:38:c0:14:86:b4:ab:0c:fd:8c:e1: 48:4e:38:37:b8:0e:ae:96:83:16:b8:49:2f:ce:9f: 4c:cb:7b:f9:c6:41:89:f6:f0:c6:86:b6:f1:a8:cd: 54:bd:dc:f7:35:d7:07:55:26:79:f9:fe:95:41:32: 51:43:54:21:19:0b:70:f5:8a:df:d9:c8:15:0e:57: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:7F:66:B7:A3:89:4E:9C:EA:53:81:14:2E:98:39:F0:FF:CD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:904b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4c:63:2e:82:10:45:4a:a2:f9:9e:53:1f:d5:c6:35:18:3a: d4:e1:99:e8:82:96:54:be:a7:95:bb:46:b2:1d:f8:7f:2c:4e: b0:5f:ab:71:2a:b9:15:0d:ac:30:91:bf:67:b1:8c:2c:50:d3: ef:20:ac:15:0c:5b:9a:64:71:5d:c1:bd:3b:7e:cd:80:36:50: 89:45:65:bc:80:bd:2c:91:46:94:e5:6b:14:39:47:c5:3d:c3: 95:5c:a2:06:0e:4f:f9:2d:cf:46:d6:9b:82:fe:95:dd:08:32: c4:3e:15:0f:d3:12:de:0c:47:a3:70:9e:ab:bf:e7:55:fe:69: 39:55:a6:d5:41:63:9b:fd:19:17:14:20:27:ad:01:6b:99:97: c8:4e:17:5b:14:21:d7:7a:00:17:58:4c:90:4a:5e:c0:b9:18: 0c:58:48:b6:d0:83:d4:cd:dc:a4:29:17:76:7d:fa:3e:f7:94: 9b:9a:9d:fa:63:1d:a7:bc:c7:84:e4:7c:be:eb:77:c6:15:e1: 41:f4:40:b1:69:72:39:7d:ea:88:a5:69:25:7e:80:7f:b9:78: dc:f0:cb:69:63:06:0b:f1:10:09:ff:6c:61:21:3a:8e:fd:a2: 0a:ef:ec:a3:17:ad:43:4a:47:4e:75:19:54:1f:d3:77:c4:79: 9c:d0:96:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp/4KmdrX2hJyXrPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MGFlMjU0MjYtNmU0Ny00MWI2LWE5OTktMzEwMzU0MTdkMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF+4lLfVsUvOdNXBNsXrN8d1kt1gVFS2t5Z2 +kGFQ4nWKXE7XS9hx6g29slauLUo5KZS+YwK9ZyB4ZFJDGdswZ88pbyVf1RionvJ +E8Xn57KoupI5HPSjyGlxbg2zcWrnlPnzyw24/Hin23kV4YUgzRfrcXYrNK8mewM 6bgfULMKbdVIrbBb48YnvJfmjweXEJFRnY+JC7j9MBcN/l4oGG18V2+NanUaU46G chaWlyDW4pa2ecoKwTjAFIa0qwz9jOFITjg3uA6uloMWuEkvzp9My3v5xkGJ9vDG hrbxqM1Uvdz3NdcHVSZ5+f6VQTJRQ1QhGQtw9Yrf2cgVDlegpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOBdf2a3o4lOnOpTgRQumDnw/82hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTE4NzY5NWUtZjZjOS0z YjY5LWEwZGUtNjAzNzFkYTVhNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeZBL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAhMYy6CEEVKovmeUx/VxjUYOtThmeiCllS+p5W7RrId+H8sTrBf q3EquRUNrDCRv2exjCxQ0+8grBUMW5pkcV3BvTt+zYA2UIlFZbyAvSyRRpTlaxQ5 R8U9w5VcogYOT/ktz0bWm4L+ld0IMsQ+FQ/TEt4MR6Nwnqu/51X+aTlVptVBY5v9 GRcUICetAWuZl8hOF1sUIdd6ABdYTJBKXsC5GAxYSLbQg9TN3KQpF3Z9+j73lJua nfpjHae8x4TkfL7rd8YV4UH0QLFpcjl96oilaSV+gH+5eNzwy2ljBgvxEAn/bGEh Oo79ogrv7KMXrUNKR051GVQf03fEeZzQlhk= -----END CERTIFICATE-----Generated at Wed Aug 6 16:15:05 2025 by rpki-client