$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa File: 23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa (raw, json) Hash identifier: iizVA+09OrXQnSSD4ilRozXP6MqUGnwX4m+XFmmiqSE= Subject key identifier: 3A:13:2D:C2:09:DF:27:11:51:6E:81:C5:48:76:32:8E:E5:E9:02:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42784AD70AEBBEB131591F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:3e90::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:4a:d7:0a:eb:be:b1:31:59:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=ffa24db8-1d5d-44fe-9cbe-abab9fda0e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:d5:8b:a5:e2:60:9d:3d:ef:d2:62:30:89: 1d:59:a2:47:0b:d2:ac:2d:3e:9c:7f:0b:d4:13:19: 3a:48:4c:59:8f:09:b7:aa:21:64:8d:e2:71:ef:b5: 1c:1d:d0:fe:40:bf:d1:a5:38:9f:00:bb:7f:06:66: 83:8b:f2:0d:ae:b9:1c:9b:5e:90:52:d1:bb:0b:30: 27:9f:62:a6:e8:09:41:85:80:c5:73:27:0d:5a:cb: 67:f1:e3:fe:48:e2:ae:16:86:1b:ad:73:55:83:7a: ef:b4:31:cb:02:69:b9:9b:8d:90:7c:b2:ec:a1:ba: 41:45:bd:dc:b3:4a:9b:2e:ee:57:ab:66:56:69:84: a0:0c:d3:2c:4e:7e:02:1e:a6:f8:07:71:dc:6d:f1: 95:b5:de:fe:67:9d:05:35:2f:3c:11:c5:c8:dd:93: 0c:fc:4d:b6:5d:37:bc:19:39:76:71:43:b9:8e:be: 6e:79:48:69:31:d3:51:98:f9:70:3a:72:5e:97:ef: cb:6b:87:cd:be:6f:9a:90:73:49:24:26:4d:73:5b: c7:a1:29:b9:86:57:1f:da:97:85:80:52:f6:d4:f9: 9c:43:ab:27:86:d4:1a:c5:33:b4:6f:66:4c:77:76: fe:a3:d9:8b:b0:9a:2f:f9:2f:64:2b:13:9b:d4:87: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:13:2D:C2:09:DF:27:11:51:6E:81:C5:48:76:32:8E:E5:E9:02:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3e90::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:f7:44:7f:a0:cf:ce:f5:c7:c3:cf:22:29:0f:cd:81:80: 65:7b:56:be:85:90:52:87:79:60:0b:c4:9b:9c:7c:0a:68:a5: c9:94:e4:43:b5:0a:a1:2f:bf:67:c1:c9:ae:29:e6:1b:54:de: dc:90:5e:0f:d1:b0:df:77:ed:c1:b8:2b:20:7f:db:6a:b7:e8: 7e:60:85:a5:8e:ba:8b:e9:2c:c8:55:d2:7f:2f:a5:27:9a:8e: 9a:46:36:b7:80:58:3f:70:45:75:a7:a9:a7:9b:1d:63:a8:b9: 27:51:8c:20:bb:fe:b5:08:72:cb:e3:ee:94:c3:c0:ab:d7:c8: 96:91:9a:04:43:71:d1:73:5d:2c:58:48:ee:5d:78:aa:c5:d2: 85:f5:0b:2d:7b:66:4a:45:a1:d5:60:90:49:b4:8d:01:dc:e0: c5:cc:83:06:13:de:3c:0f:9f:49:15:1b:aa:ce:51:b5:cd:ac: f0:7c:78:7e:dd:4a:af:cf:ee:7e:15:b7:1b:88:e5:69:99:81: e7:e1:45:80:99:3a:97:eb:8a:9f:75:ac:e3:30:00:ad:25:7a: 9f:1b:11:c9:dd:03:07:b4:a6:af:b1:e9:7c:63:07:ff:da:59: a6:e9:9f:21:32:b1:15:7f:53:0b:83:6b:0a:26:9a:fe:e4:e5: 8b:21:fe:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeErXCuu+sTFZHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZmZhMjRkYjgtMWQ1ZC00NGZlLTljYmUtYWJhYjlmZGEwZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv3Vi6XiYJ0979JiMIkdWaJHC9KsLT6cfwvU Exk6SExZjwm3qiFkjeJx77UcHdD+QL/RpTifALt/BmaDi/INrrkcm16QUtG7CzAn n2Km6AlBhYDFcycNWstn8eP+SOKuFoYbrXNVg3rvtDHLAmm5m42QfLLsobpBRb3c s0qbLu5Xq2ZWaYSgDNMsTn4CHqb4B3HcbfGVtd7+Z50FNS88EcXI3ZMM/E22XTe8 GTl2cUO5jr5ueUhpMdNRmPlwOnJel+/La4fNvm+akHNJJCZNc1vHoSm5hlcf2peF gFL21PmcQ6snhtQaxTO0b2ZMd3b+o9mLsJov+S9kKxOb1IdBlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDoTLcIJ3ycRUW6BxUh2Mo7l6QJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNlYjJhYmYtNGZlOC0z ZmIyLWFhY2YtYWFmNmJlYTM5ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD6Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgh90R/oM/O9cfDzyIpD82BgGV7Vr6FkFKHeWALxJucfApopcmU 5EO1CqEvv2fBya4p5htU3tyQXg/RsN937cG4KyB/22q36H5ghaWOuovpLMhV0n8v pSeajppGNreAWD9wRXWnqaebHWOouSdRjCC7/rUIcsvj7pTDwKvXyJaRmgRDcdFz XSxYSO5deKrF0oX1Cy17ZkpFodVgkEm0jQHc4MXMgwYT3jwPn0kVG6rOUbXNrPB8 eH7dSq/P7n4VtxuI5WmZgefhRYCZOpfrip91rOMwAK0lep8bEcndAwe0pq+x6Xxj B//aWabpnyEysRV/UwuDawommv7k5Ysh/rc= -----END CERTIFICATE-----Generated at Tue Sep 22 16:58:11 2026 by rpki-client