$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa File: 9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa (raw, json) Hash identifier: ePLlPANOaeEoYdtWgdWRnb9Y5F1coSft4Vr+EGV+kyA= Subject key identifier: 26:72:61:CA:CB:7B:5E:7F:67:D0:A0:C7:54:6B:E3:F6:CD:68:B6:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD6282E3091445783478CD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 15218 IP address blocks: 2001:578:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:82:e3:09:14:45:78:34:78:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=90bc1b62-bafe-4bd1-94c7-7095e8f3eed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:f2:0a:7a:f4:6e:d3:dc:da:0d:1a:89:78: ce:03:f5:f1:c4:e5:45:6f:64:02:42:92:e0:37:d1: 2f:1d:f8:6d:d9:fc:c9:05:75:e6:86:e1:e6:5d:38: 42:3a:be:58:66:0c:73:29:5c:4b:f2:4c:56:8e:85: ed:ea:23:70:78:db:6c:89:c8:7c:02:f3:fe:5e:2c: 9c:0a:11:6a:19:db:2e:49:0e:6c:ed:f1:be:54:98: 67:8b:19:05:5e:3a:00:dc:e2:51:26:c7:ab:72:01: 5a:e8:bd:30:4d:fa:b0:dd:f2:a7:a2:28:7c:dc:fd: 60:8b:61:64:84:0f:91:5a:71:54:63:5b:f4:b4:c2: 84:bc:26:c4:bc:97:7b:20:62:b5:c9:0a:ff:80:c9: ca:ee:69:5b:00:cc:22:e3:0c:f9:bc:92:fc:96:ff: ba:5f:08:be:8d:57:8c:13:7f:2a:0b:89:c7:4e:8f: 78:1f:5b:b2:13:50:6e:0e:c0:e7:4a:44:14:18:9c: a5:78:40:62:c0:c5:89:44:fb:d5:ca:73:c6:fb:bb: 72:82:15:e7:21:b6:b6:68:36:50:5f:07:c0:d2:6f: c6:45:ca:45:7e:95:f5:b2:bb:ea:44:aa:d8:ba:9d: 44:70:41:c8:be:85:79:51:30:00:2d:d9:ce:3b:30: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:72:61:CA:CB:7B:5E:7F:67:D0:A0:C7:54:6B:E3:F6:CD:68:B6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:53:a4:64:64:40:d2:37:a7:3c:1e:31:a0:7d:48:24:b7:09: 85:30:d7:01:a9:84:97:8e:44:15:31:75:b2:38:af:d6:00:a1: d0:37:6e:97:88:94:56:90:08:96:62:22:e8:19:67:b9:1d:03: 64:34:ad:11:02:65:9f:fa:1e:d2:f0:28:e5:a4:14:4e:ad:ae: db:c6:d4:d6:e3:be:bc:5e:5d:c2:9e:d3:91:37:89:db:51:94: 09:63:34:c8:2d:82:de:2b:7b:38:aa:06:3d:95:71:d5:f2:8c: b7:e9:50:d7:d0:87:01:6a:30:71:9a:21:1f:66:f2:7b:45:92: 5a:7f:f9:e7:3b:4f:8e:1c:5e:1b:3a:9c:6d:dc:b4:03:56:5f: 96:95:0a:98:77:fc:c2:df:14:7f:50:ae:42:71:8f:6f:df:ba: 9d:41:72:7e:13:08:90:06:e3:06:20:a6:e1:95:3d:21:c9:e7: c7:1e:09:1a:f9:5e:15:d7:1f:fb:ef:f0:02:7d:59:66:48:a4: db:fe:3f:b2:a4:37:37:3f:7f:54:36:93:76:76:1d:44:57:bb: b1:2f:0f:63:fb:65:e6:5b:f0:32:92:9a:96:64:13:3a:2b:73: 13:37:18:42:fe:08:e1:c7:6c:7d:ca:26:3b:ce:8e:6f:dd:67: 3c:ab:3f:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEutYoLjCRRFeDR4zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTBiYzFiNjItYmFmZS00YmQxLTk0YzctNzA5NWU4ZjNlZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3yCnr0btPc2g0aiXjOA/XxxOVFb2QCQpLg N9EvHfht2fzJBXXmhuHmXThCOr5YZgxzKVxL8kxWjoXt6iNweNtsich8AvP+Xiyc ChFqGdsuSQ5s7fG+VJhnixkFXjoA3OJRJsercgFa6L0wTfqw3fKnoih83P1gi2Fk hA+RWnFUY1v0tMKEvCbEvJd7IGK1yQr/gMnK7mlbAMwi4wz5vJL8lv+6Xwi+jVeM E38qC4nHTo94H1uyE1BuDsDnSkQUGJyleEBiwMWJRPvVynPG+7tyghXnIba2aDZQ XwfA0m/GRcpFfpX1srvqRKrYup1EcEHIvoV5UTAALdnOOzAJOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCZyYcrLe15/Z9Cgx1Rr4/bNaLaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWIwMDQxMmYtOGMwZS0z YmMzLWFlZWYtZmQzMzQ3ZTBiOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ1OkZGRA0jenPB4xoH1IJLcJhTDXAamEl45EFTF1sjiv1gCh0Ddu l4iUVpAIlmIi6BlnuR0DZDStEQJln/oe0vAo5aQUTq2u28bU1uO+vF5dwp7TkTeJ 21GUCWM0yC2C3it7OKoGPZVx1fKMt+lQ19CHAWowcZohH2bye0WSWn/55ztPjhxe Gzqcbdy0A1ZflpUKmHf8wt8Uf1CuQnGPb9+6nUFyfhMIkAbjBiCm4ZU9Icnnxx4J GvleFdcf++/wAn1ZZkik2/4/sqQ3Nz9/VDaTdnYdRFe7sS8PY/tl5lvwMpKalmQT OitzEzcYQv4I4cdsfcomO86Ob91nPKs/eg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:14 2025 by rpki-client