$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa File: 3dec1b41-12c6-363d-88d2-852080a81974.roa (raw, json) Hash identifier: 1o8+w8elTxlVKGMfXchakT499U9t/mo7TlsOjevZs4w= Subject key identifier: 33:9F:C7:B6:A9:12:2A:68:CF:88:3A:8E:79:08:12:8C:D1:44:C6:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD6286044794FABD7340D180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 2001:579:d1f0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:86:04:47:94:fa:bd:73:40:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=91b7bbdf-c51d-477d-823a-a3cfc3b84429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:32:84:13:cb:35:8c:8a:d8:a8:b0:a0:2b: 29:12:ab:9c:61:46:d8:62:f3:a0:c5:c1:ad:68:84: f5:a7:69:f6:61:37:00:42:c6:06:ce:9a:d3:69:a4: cc:17:80:db:22:11:f6:da:a3:5d:33:e8:e9:d4:23: a2:ab:0e:99:f0:96:d7:74:80:d3:18:6c:db:e1:e3: b7:b3:ff:9e:50:c9:ef:ba:7f:03:f7:a7:f6:ea:bf: e6:a1:b4:64:ee:91:4c:13:8f:95:db:c8:4b:e1:61: 56:9b:f8:63:b1:74:7b:83:18:3b:e8:f1:15:3a:2a: eb:c9:42:1f:ba:47:89:09:02:d8:54:7a:35:4e:98: e1:1f:b1:28:4e:fc:d0:d3:98:7e:24:81:be:84:db: 90:da:7d:40:62:e7:ee:92:5e:f3:91:5c:0f:6b:68: a6:4f:fb:07:05:34:e8:40:2f:69:28:ba:af:b2:7f: 75:17:de:c8:f8:eb:f7:11:1f:0c:90:fd:c0:60:35: f7:a1:59:10:24:13:25:e6:cb:24:61:5c:f9:ba:aa: 86:05:17:10:26:6b:fb:15:53:80:72:af:56:f5:d1: 4e:73:3a:a0:6f:2d:78:cb:eb:92:06:e8:07:08:35: 50:39:80:d6:02:98:17:a0:f8:23:4a:82:e8:7a:5e: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:C7:B6:A9:12:2A:68:CF:88:3A:8E:79:08:12:8C:D1:44:C6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:d1f0::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:21:01:fc:6f:93:75:8f:07:76:52:21:ea:a4:2d:da:e9:41: d1:5a:4e:cf:0f:34:06:cd:70:24:9a:cf:46:0f:90:b2:ad:27: 40:5a:19:ac:a0:b0:02:6b:f4:bb:61:d8:49:bd:c6:12:61:50: 56:81:21:09:11:a7:f5:29:63:20:c8:9d:72:53:3b:0f:3e:ac: 6d:4e:1f:8d:00:7a:a6:05:ea:91:1f:5b:e2:67:83:04:d5:a8: ae:93:49:6c:82:8e:e7:28:60:b7:ef:8f:8f:33:03:27:a2:61: 97:1e:e4:46:d5:5a:c5:7b:16:a5:b7:0f:69:ec:1a:2a:85:02: cb:03:97:b9:4b:8b:6c:0b:a8:7d:c2:ec:50:8f:46:0b:f4:32: 80:b3:6a:00:ed:13:5e:db:93:48:1c:d0:f2:db:ea:63:0d:2c: a9:c4:47:a3:94:26:97:55:82:07:59:a2:98:8d:a1:42:a6:ab: 90:4a:7e:a8:16:93:8b:fa:2c:d4:a7:60:c6:dc:c9:c6:b6:89: 38:50:52:81:b5:df:ee:6a:03:99:66:a4:4e:91:32:27:b9:aa: 20:f3:7d:f1:4e:d3:d3:28:4b:66:b9:1d:49:7b:77:ba:88:ba: 6d:f5:0c:49:02:ae:ff:2a:45:05:9a:fa:ff:e7:4c:b3:b4:1d: 22:75:34:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYoYER5T6vXNA0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTFiN2JiZGYtYzUxZC00NzdkLTgyM2EtYTNjZmMzYjg0NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7syhBPLNYyK2KiwoCspEqucYUbYYvOgxcGt aIT1p2n2YTcAQsYGzprTaaTMF4DbIhH22qNdM+jp1COiqw6Z8JbXdIDTGGzb4eO3 s/+eUMnvun8D96f26r/mobRk7pFME4+V28hL4WFWm/hjsXR7gxg76PEVOirryUIf ukeJCQLYVHo1TpjhH7EoTvzQ05h+JIG+hNuQ2n1AYufukl7zkVwPa2imT/sHBTTo QC9pKLqvsn91F97I+Ov3ER8MkP3AYDX3oVkQJBMl5sskYVz5uqqGBRcQJmv7FVOA cq9W9dFOczqgby14y+uSBugHCDVQOYDWApgXoPgjSoLoel56FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOfx7apEipoz4g6jnkIEozRRMZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RlYzFiNDEtMTJjNi0z NjNkLTg4ZDItODUyMDgwYTgxOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFedHw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMhAfxvk3WPB3ZSIeqkLdrpQdFaTs8PNAbNcCSaz0YPkLKtJ0Ba GaygsAJr9Lth2Em9xhJhUFaBIQkRp/UpYyDInXJTOw8+rG1OH40AeqYF6pEfW+Jn gwTVqK6TSWyCjucoYLfvj48zAyeiYZce5EbVWsV7FqW3D2nsGiqFAssDl7lLi2wL qH3C7FCPRgv0MoCzagDtE17bk0gc0PLb6mMNLKnER6OUJpdVggdZopiNoUKmq5BK fqgWk4v6LNSnYMbcyca2iThQUoG13+5qA5lmpE6RMie5qiDzffFO09MoS2a5HUl7 d7qIum31DEkCrv8qRQWa+v/nTLO0HSJ1NAc= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:07 2025 by rpki-client