$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20011e42-7a34-3b61-9c73-b317340d9f6d.roa File: 20011e42-7a34-3b61-9c73-b317340d9f6d.roa (raw, json) Hash identifier: jL1hhpUwceLfn2hkEUsgi0mZVH47XzLk21JvuAy5FGU= Subject key identifier: F5:AF:D6:02:4D:A8:6E:BD:98:BD:71:C1:68:8C:05:12:D0:FD:2B:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278516CF1D79151E457D800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20011e42-7a34-3b61-9c73-b317340d9f6d.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:7408::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:51:6c:f1:d7:91:51:e4:57:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=4c580016-59c4-487b-b2c3-d945fa2052e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:97:c9:b1:6c:ce:ae:6c:57:83:b7:b5:c4: 6e:e3:0f:64:13:65:ec:32:c0:8c:8d:cd:07:f2:a7: f8:1a:a6:45:ea:5c:91:1a:3c:07:58:75:04:c5:ec: d1:74:c1:f4:3d:e9:09:9e:a5:55:91:84:00:1f:bf: c6:95:29:f4:17:88:84:4b:01:34:99:73:3d:fc:6f: 59:47:8a:4d:2f:56:df:53:28:eb:e7:7c:63:d4:16: 1e:cb:82:c5:5c:96:8e:b9:30:f7:bb:c4:06:7d:9b: eb:ea:56:3e:d6:d8:ba:1a:e2:c9:85:35:8f:60:fa: 51:df:d2:d9:1d:63:9e:7f:dd:22:9b:f9:a4:7f:66: 31:26:01:e9:96:4c:6e:02:cd:f9:53:d5:d8:3d:0b: 9a:ef:1a:32:a5:73:91:65:36:77:5a:50:85:eb:bd: 8c:12:ae:cc:f0:e8:fe:2d:a2:1d:9c:ec:3b:e2:72: 88:2f:ff:6c:fc:02:25:00:9a:29:97:dd:11:cb:25: 92:27:6f:63:2e:d3:49:7c:ee:86:d7:38:77:32:96: cc:0f:a2:f8:49:b8:16:bf:df:d5:b5:cf:4b:52:95: 7c:b4:ca:72:2c:eb:78:7c:7f:c2:b4:7e:61:53:71: 81:4d:86:d6:ab:ab:76:f3:7f:62:10:2f:dc:99:0a: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AF:D6:02:4D:A8:6E:BD:98:BD:71:C1:68:8C:05:12:D0:FD:2B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20011e42-7a34-3b61-9c73-b317340d9f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7408::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:33:7d:5a:f9:bb:31:86:24:b3:19:ce:03:1b:6a:c0:b0:da: b9:94:90:d5:7e:ee:66:f2:42:03:8e:db:f4:68:3c:f1:fd:21: f8:81:c4:99:ff:3b:82:69:79:97:f5:97:4c:bb:82:3c:26:14: bc:80:84:ae:0b:c6:72:be:e1:27:ca:d5:97:e1:ef:1c:bc:8b: 32:1b:56:0f:a4:71:33:c4:35:09:0b:96:0c:26:de:d0:28:12: 77:4e:ae:ef:55:7e:76:87:2c:75:69:49:aa:29:fe:0d:83:2e: 08:ca:e8:48:0f:63:e9:23:6b:b5:c8:7c:ff:aa:01:5f:85:fc: db:86:2f:3a:d5:d0:4e:9a:b8:94:fd:e9:16:4d:2d:bf:51:7b: d0:8a:7b:93:ff:ea:42:46:1c:fa:b2:ec:4c:08:07:82:c9:82: 67:92:ac:10:eb:ec:d0:1c:7c:6e:48:62:95:e8:13:5c:95:fd: ad:15:f7:a0:39:e7:ba:ab:6f:ed:21:fb:89:1d:3a:cf:2c:57: 94:c3:c1:3f:c1:36:40:7b:b2:64:92:58:11:94:d2:82:9f:ca: 62:25:b8:ee:0e:f1:bb:da:5c:0b:42:d0:6d:b7:b9:98:e7:31: 1a:ff:93:78:20:78:da:15:3a:44:3b:0c:60:21:16:60:de:9e: b9:d9:41:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeFFs8deRUeRX2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGM1ODAwMTYtNTljNC00ODdiLWIyYzMtZDk0NWZhMjA1MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhWXybFszq5sV4O3tcRu4w9kE2XsMsCMjc0H 8qf4GqZF6lyRGjwHWHUExezRdMH0PekJnqVVkYQAH7/GlSn0F4iESwE0mXM9/G9Z R4pNL1bfUyjr53xj1BYey4LFXJaOuTD3u8QGfZvr6lY+1ti6GuLJhTWPYPpR39LZ HWOef90im/mkf2YxJgHplkxuAs35U9XYPQua7xoypXORZTZ3WlCF672MEq7M8Oj+ LaIdnOw74nKIL/9s/AIlAJopl90RyyWSJ29jLtNJfO6G1zh3MpbMD6L4SbgWv9/V tc9LUpV8tMpyLOt4fH/CtH5hU3GBTYbWq6t2839iEC/cmQoFFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWv1gJNqG69mL1xwWiMBRLQ/SvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjAwMTFlNDItN2EzNC0z YjYxLTljNzMtYjMxNzM0MGQ5ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAHQI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQzfVr5uzGGJLMZzgMbasCw2rmUkNV+7mbyQgOO2/RoPPH9IfiB xJn/O4JpeZf1l0y7gjwmFLyAhK4LxnK+4SfK1Zfh7xy8izIbVg+kcTPENQkLlgwm 3tAoEndOru9VfnaHLHVpSaop/g2DLgjK6EgPY+kja7XIfP+qAV+F/NuGLzrV0E6a uJT96RZNLb9Re9CKe5P/6kJGHPqy7EwIB4LJgmeSrBDr7NAcfG5IYpXoE1yV/a0V 96A557qrb+0h+4kdOs8sV5TDwT/BNkB7smSSWBGU0oKfymIluO4O8bvaXAtC0G23 uZjnMRr/k3ggeNoVOkQ7DGAhFmDenrnZQR8= -----END CERTIFICATE-----Generated at Tue Sep 22 19:19:50 2026 by rpki-client