$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa File: a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa (raw, json) Hash identifier: AyJQmLYFms7yBVjtAK0Ptjz7zXewwF5sdVKBTYiBczk= Subject key identifier: 96:55:8E:EF:BB:03:C9:05:4E:33:9D:5B:9A:B0:BD:4D:48:BC:FB:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625857B0F3CD0BBBF38D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 2001:579:b949::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:58:57:b0:f3:cd:0b:bb:f3:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=28a6ffd9-0775-492c-9218-caa99b560832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:26:1f:04:ca:aa:85:4e:29:3b:2a:7e:a6: 85:cd:8e:6a:62:33:ec:72:6f:e8:fb:d0:75:bd:83: 56:f5:cf:17:b1:05:c7:48:f1:ad:29:02:7b:25:01: e0:e1:d5:da:2e:19:55:21:2c:1d:59:ae:4b:f9:9d: 55:5a:86:58:5f:e2:ad:5a:f2:e2:fe:3a:c7:c9:87: eb:01:56:94:ac:e6:85:7d:79:05:e9:d0:75:7e:e5: a3:9a:aa:5d:c8:54:ef:1d:2a:a2:40:27:e0:43:d5: 89:f6:bc:a0:a1:69:85:ec:ee:8e:36:78:71:4d:83: 43:48:2d:a8:d1:3a:47:6c:09:88:b7:60:5f:29:c2: be:a3:28:17:ff:c8:7f:04:fd:c8:ce:2a:7b:cf:ce: 68:7c:6f:b0:38:36:22:bd:4c:ee:36:7f:ef:e6:1c: 2f:7e:90:19:ae:32:d6:61:fd:12:12:65:0e:aa:a8: 04:28:59:e6:1c:03:45:91:be:ff:25:a5:54:6e:da: df:f7:03:05:db:01:d8:38:f1:44:e1:42:71:b5:ca: 1f:5c:a1:e5:72:ff:7b:dd:35:40:86:8b:a4:4a:83: a4:7e:94:bf:94:f4:c1:81:5b:c1:bd:9e:56:9a:79: 95:3d:75:0a:6a:2e:9e:18:3a:e7:f7:3a:c0:f8:ea: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:55:8E:EF:BB:03:C9:05:4E:33:9D:5B:9A:B0:BD:4D:48:BC:FB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f4bbd2-10cf-3328-81fe-689e89ceaca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:b949::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:66:f2:d7:86:04:f8:62:4a:2c:61:70:9e:0e:7e:1b:c6:ee: ca:be:9f:71:09:21:ba:4e:c4:8a:43:7c:f5:b3:be:bd:f7:9a: 6b:f2:25:8f:8a:06:ac:1f:75:9d:c7:86:a7:f0:f6:a6:8e:2a: f5:7f:7a:04:a3:15:df:3d:bf:e1:d7:1c:07:e9:cc:86:cb:ed: 1a:a4:67:fd:0f:79:43:66:fc:46:35:1b:c0:1d:07:be:c7:d3: 8e:9d:ca:82:a9:fc:48:07:1d:96:fe:dd:24:ce:95:2d:1b:76: b5:b1:36:e9:05:ba:70:3c:ea:46:ed:a3:a8:9f:b5:d2:80:cf: 9c:2a:c5:ec:c4:91:0f:77:b1:a7:f9:6a:b8:d1:fb:ec:3c:a5: b5:04:ef:7c:54:8d:23:a3:d1:ea:88:c1:59:30:64:2c:9a:5d: 48:fb:bc:a1:b0:b0:7d:39:10:d7:15:1b:bc:2e:04:3e:d2:81: 4f:c2:3d:5c:d0:ed:60:34:92:70:f4:20:0b:f7:8c:92:f8:71: f4:de:6b:fe:a3:a1:90:0c:5e:bb:61:d3:11:03:cb:97:05:ee: b3:b5:82:73:d8:c5:49:ca:83:cb:35:a9:41:5d:c4:7f:9c:83: 31:0e:b4:d9:8d:08:44:73:82:b0:ce:48:d9:cb:ec:c4:a2:67: ba:94:56:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYlhXsPPNC7vzjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjhhNmZmZDktMDc3NS00OTJjLTkyMTgtY2FhOTliNTYwODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwYmHwTKqoVOKTsqfqaFzY5qYjPscm/o+9B1 vYNW9c8XsQXHSPGtKQJ7JQHg4dXaLhlVISwdWa5L+Z1VWoZYX+KtWvLi/jrHyYfr AVaUrOaFfXkF6dB1fuWjmqpdyFTvHSqiQCfgQ9WJ9rygoWmF7O6ONnhxTYNDSC2o 0TpHbAmIt2BfKcK+oygX/8h/BP3Izip7z85ofG+wODYivUzuNn/v5hwvfpAZrjLW Yf0SEmUOqqgEKFnmHANFkb7/JaVUbtrf9wMF2wHYOPFE4UJxtcofXKHlcv973TVA houkSoOkfpS/lPTBgVvBvZ5WmnmVPXUKai6eGDrn9zrA+OpoDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZVju+7A8kFTjOdW5qwvU1IvPuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNmNGJiZDItMTBjZi0z MzI4LTgxZmUtNjg5ZTg5Y2VhY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeblJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9m8teGBPhiSixhcJ4OfhvG7sq+n3EJIbpOxIpDfPWzvr33mmvy JY+KBqwfdZ3Hhqfw9qaOKvV/egSjFd89v+HXHAfpzIbL7RqkZ/0PeUNm/EY1G8Ad B77H046dyoKp/EgHHZb+3STOlS0bdrWxNukFunA86kbto6iftdKAz5wqxezEkQ93 saf5arjR++w8pbUE73xUjSOj0eqIwVkwZCyaXUj7vKGwsH05ENcVG7wuBD7SgU/C PVzQ7WA0knD0IAv3jJL4cfTea/6joZAMXrth0xEDy5cF7rO1gnPYxUnKg8s1qUFd xH+cgzEOtNmNCERzgrDOSNnL7MSiZ7qUVgM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:47:47 2025 by rpki-client