$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa File: aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa (raw, json) Hash identifier: FLaw6tNHC7bU5Q4m6XMvVLe3Z6HBbDu2T85TDJ+5Aqw= Subject key identifier: 55:F9:57:71:78:5B:04:E3:96:A4:51:6C:0B:8A:0B:11:0E:CC:C4:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D6EDA89565BEEC34A9EB9A0D8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 2001:579:709c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:89:56:5b:ee:c3:4a:9e:b9:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=1de9b6d6-1431-4040-a92e-e29f01a80b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:6e:6e:49:98:cb:fc:fa:6d:29:db:24:cd: 59:ab:81:a6:2f:bb:67:99:00:47:53:13:d1:62:34: 84:e7:72:6f:3c:bd:2d:3e:44:49:c2:cc:84:e0:56: 4f:d2:a8:87:53:ef:bd:8f:78:05:8b:07:d4:8f:7b: 7a:8d:97:f2:6a:8a:6b:da:13:4b:82:aa:54:6f:5d: 3e:48:97:ce:a5:68:bb:99:0f:53:c8:a0:ba:9b:b6: 0e:56:ec:8f:1c:b0:80:6a:aa:f8:09:3a:1c:a1:b1: 28:74:f6:f3:03:da:74:ab:0c:4b:f3:f7:0f:b1:94: c4:11:8d:87:c9:e5:91:a4:14:60:55:7b:a0:ea:e8: c2:7a:a4:1e:b9:26:64:16:34:75:f9:ab:e1:cf:1b: 86:04:30:37:3b:cf:7f:68:d5:75:c5:02:11:e9:9f: 78:8c:ad:18:9c:08:34:b6:2a:66:b3:0e:20:61:d0: b0:ef:85:ea:55:48:74:14:d4:d1:80:b6:1b:78:42: f2:f1:f3:9c:72:61:d4:ef:a0:c9:83:50:62:99:cf: 16:97:5e:5e:0c:a8:41:2e:32:05:51:69:cb:1c:91: 72:a6:4e:2b:2c:05:7a:e7:64:ff:3b:20:8c:03:ae: c5:58:7d:69:2c:fe:ec:4a:92:7c:85:1b:a2:37:12: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:57:71:78:5B:04:E3:96:A4:51:6C:0B:8A:0B:11:0E:CC:C4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa3a802f-83e5-3c0e-b2ab-03d64fcb70cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:709c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:5f:f0:6c:15:4b:ea:f4:10:5d:08:aa:84:be:72:0c:9d: 64:09:a1:ec:04:d8:f1:43:95:64:de:f7:e5:5f:4b:b6:a5:2a: 35:cf:44:12:29:71:e9:0e:ad:e9:46:34:84:08:2e:e0:0d:35: 3e:93:57:59:d0:9b:d7:59:f5:95:f0:09:bc:69:15:84:17:30: f9:cf:c2:03:d7:98:89:0a:de:65:78:bc:59:f1:9f:c5:65:69: c9:28:fb:4a:6a:22:38:55:45:e8:e2:b2:0d:21:ca:6c:09:86: 58:4b:92:00:ad:24:66:c4:aa:e8:47:b4:5b:f2:c7:3a:84:86: 71:11:53:f0:f5:77:b0:bf:73:19:5a:70:a7:d0:a5:30:de:a7: 08:f4:fb:fd:4c:5f:1d:78:80:53:63:f6:fd:62:01:25:e3:c1: b8:28:7c:36:99:c7:ee:72:d1:64:10:24:16:b9:81:f0:c9:0a: db:a9:19:3e:ad:71:78:34:0d:0e:45:71:d6:2f:70:af:fa:1a: 8f:1c:2f:48:56:3b:e9:07:84:81:4a:26:8d:a4:25:28:89:c6: 82:9b:c5:e4:ba:d6:f5:8f:38:f2:df:5b:cf:19:ae:ef:91:2f: 42:69:f4:22:9a:d9:62:f7:0a:78:b3:b8:c8:aa:bd:f9:16:fa: 4f:5f:e1:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1u2olWW+7DSp65oNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MWRlOWI2ZDYtMTQzMS00MDQwLWE5MmUtZTI5ZjAxYTgwYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKdubkmYy/z6bSnbJM1Zq4GmL7tnmQBHUxPR YjSE53JvPL0tPkRJwsyE4FZP0qiHU++9j3gFiwfUj3t6jZfyaopr2hNLgqpUb10+ SJfOpWi7mQ9TyKC6m7YOVuyPHLCAaqr4CTocobEodPbzA9p0qwxL8/cPsZTEEY2H yeWRpBRgVXug6ujCeqQeuSZkFjR1+avhzxuGBDA3O89/aNV1xQIR6Z94jK0YnAg0 tipmsw4gYdCw74XqVUh0FNTRgLYbeELy8fOccmHU76DJg1Bimc8Wl15eDKhBLjIF UWnLHJFypk4rLAV652T/OyCMA67FWH1pLP7sSpJ8hRuiNxIDfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFX5V3F4WwTjlqRRbAuKCxEOzMQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWEzYTgwMmYtODNlNS0z YzBlLWIyYWItMDNkNjRmY2I3MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeXCc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKO0X/BsFUvq9BBdCKqEvnIMnWQJoewE2PFDlWTe9+VfS7alKjXP RBIpcekOrelGNIQILuANNT6TV1nQm9dZ9ZXwCbxpFYQXMPnPwgPXmIkK3mV4vFnx n8Vlacko+0pqIjhVRejisg0hymwJhlhLkgCtJGbEquhHtFvyxzqEhnERU/D1d7C/ cxlacKfQpTDepwj0+/1MXx14gFNj9v1iASXjwbgofDaZx+5y0WQQJBa5gfDJCtup GT6tcXg0DQ5FcdYvcK/6Go8cL0hWO+kHhIFKJo2kJSiJxoKbxeS61vWPOPLfW88Z ru+RL0Jp9CKa2WL3CnizuMiqvfkW+k9f4ZU= -----END CERTIFICATE-----Generated at Fri Apr 17 08:07:57 2026 by rpki-client