$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa File: aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa (raw, json) Hash identifier: m36TcKDJgUrN5MudbnB2z0kr5BS+zGlrpgPXIALizO4= Subject key identifier: 6F:63:0B:BD:AC:10:CB:A7:2D:36:D6:16:2B:86:E1:2E:9C:C2:1A:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD6284484984939D6C076740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 2001:579:709c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:84:48:49:84:93:9d:6c:07:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=771e0ee2-1ea8-45fd-afd3-f49f97d2f05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:24:c3:3d:cf:37:fc:aa:54:f2:00:78:bb: 57:f1:b8:c1:22:d2:1a:38:f2:d3:4c:ca:04:98:07: 55:71:8b:3b:94:98:eb:f9:14:7b:58:10:94:d5:b1: a9:3f:7b:6c:03:e1:c9:1e:30:c5:78:81:4f:da:b1: 76:8c:63:f9:de:e7:5f:95:95:1f:2d:fb:9b:3e:2b: 2a:66:db:5a:e6:d8:29:3a:81:ab:ab:26:28:9c:3d: 9d:42:80:2f:07:ec:3a:2b:63:b5:9d:ac:87:ab:34: 6d:92:0d:26:be:5b:51:9d:1c:7c:a6:aa:bc:c5:79: 85:b3:12:71:85:69:ce:9b:27:50:45:96:a2:8c:13: ca:8e:c8:e4:23:c7:9b:b3:c5:55:d0:1e:d6:7c:39: 1b:f1:23:2e:7e:24:47:b8:6c:8d:53:ad:99:45:cf: e1:52:96:37:61:2d:4f:bb:7b:e2:d3:e7:5e:91:bc: d9:8e:50:38:2b:4d:0e:c5:a1:50:ba:05:38:96:3f: 16:e2:fa:91:90:9f:c3:5c:f4:65:04:26:98:d7:5b: 91:bb:37:76:85:55:80:22:79:7c:8e:e5:96:4f:b8: a9:74:69:61:fd:95:e2:98:9a:dc:41:5c:bf:4e:5e: 32:a9:d3:eb:d3:31:56:c3:51:43:b2:63:d0:74:cd: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:63:0B:BD:AC:10:CB:A7:2D:36:D6:16:2B:86:E1:2E:9C:C2:1A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:709c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6b:d3:93:42:5b:b6:62:f0:b3:44:e7:20:d4:b1:be:24:f5: 8d:96:05:c2:aa:7f:13:4c:52:d7:a7:d3:27:f5:c9:d3:b0:a0: f2:74:18:0a:e8:58:ef:df:b9:4e:c9:3d:2e:35:b0:c7:71:34: a3:98:fa:82:28:20:33:b7:c2:df:26:8f:14:aa:6c:95:60:ef: eb:13:32:23:87:23:96:0c:22:3c:b3:ca:ac:ce:ba:99:01:db: 70:22:a3:84:3f:fa:15:cd:3d:4d:cd:bb:6a:91:cc:a9:da:27: 72:7e:7a:25:e7:e7:f7:0e:da:81:64:9e:ea:82:c1:98:c4:6d: 75:57:9c:f0:49:eb:82:17:ca:fa:53:6d:4b:94:cc:18:a7:d5: e3:e4:9b:80:ce:7d:93:a2:c1:d2:53:79:57:5e:7e:92:65:10: 70:07:7f:d8:c9:95:e9:2b:ae:e8:88:05:4b:ee:84:7e:bd:be: ed:82:bc:fe:9f:a2:bb:bb:27:0f:f1:f6:fb:86:d3:db:e4:18: 07:25:c5:bc:fd:c3:db:49:d4:aa:b4:df:4a:18:2e:b4:5c:1c: a5:d7:3c:f9:5d:39:79:80:5b:18:29:de:93:a0:0c:70:6a:43: 3e:fc:12:a1:59:26:fc:8a:74:1b:ab:90:ef:fb:9f:1a:e4:df: 72:e6:cb:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYoRISYSTnWwHZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NzcxZTBlZTItMWVhOC00NWZkLWFmZDMtZjQ5Zjk3ZDJmMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ4kwz3PN/yqVPIAeLtX8bjBItIaOPLTTMoE mAdVcYs7lJjr+RR7WBCU1bGpP3tsA+HJHjDFeIFP2rF2jGP53udflZUfLfubPisq Ztta5tgpOoGrqyYonD2dQoAvB+w6K2O1nayHqzRtkg0mvltRnRx8pqq8xXmFsxJx hWnOmydQRZaijBPKjsjkI8ebs8VV0B7WfDkb8SMufiRHuGyNU62ZRc/hUpY3YS1P u3vi0+dekbzZjlA4K00OxaFQugU4lj8W4vqRkJ/DXPRlBCaY11uRuzd2hVWAInl8 juWWT7ipdGlh/ZXimJrcQVy/Tl4yqdPr0zFWw1FDsmPQdM3bzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9jC72sEMunLTbWFiuG4S6cwhpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWEzYTgwMmYtODNlNS0z YzBlLWIyYWItMDNkNjRmY2I3MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeXCc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINr05NCW7Zi8LNE5yDUsb4k9Y2WBcKqfxNMUten0yf1ydOwoPJ0 GAroWO/fuU7JPS41sMdxNKOY+oIoIDO3wt8mjxSqbJVg7+sTMiOHI5YMIjyzyqzO upkB23Aio4Q/+hXNPU3Nu2qRzKnaJ3J+eiXn5/cO2oFknuqCwZjEbXVXnPBJ64IX yvpTbUuUzBin1ePkm4DOfZOiwdJTeVdefpJlEHAHf9jJlekrruiIBUvuhH69vu2C vP6foru7Jw/x9vuG09vkGAclxbz9w9tJ1Kq030oYLrRcHKXXPPldOXmAWxgp3pOg DHBqQz78EqFZJvyKdBurkO/7nxrk33LmyzE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:53 2025 by rpki-client