$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa File: 2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa (raw, json) Hash identifier: i6YErQZL631VIGIQUY5M4lIP4Tm9ThXq8U+IQL2+JDo= Subject key identifier: 91:86:09:43:45:8E:87:5A:10:70:3A:B9:46:2E:7C:40:B5:EA:FF:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0158C8B30966282C37CD500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:7fa0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:8c:8b:30:96:62:82:c3:7c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=519cf586-3223-4ee2-95fb-aeb6909ef26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:2c:8b:9b:ed:e1:e0:88:de:38:76:40:58: 8e:3f:43:c1:75:82:27:35:dc:91:0c:83:13:9f:06: 2d:5d:79:e8:cd:cf:c4:f4:f2:f6:84:b6:4b:2a:27: b9:eb:08:d1:e7:dc:fb:35:e2:b7:e8:c6:35:d3:ef: bc:ed:a7:f8:ca:8e:2c:c4:ea:40:85:3c:bb:84:ba: 91:13:fc:ca:34:af:46:72:3f:41:aa:a3:a7:c1:1b: 76:be:d2:81:bd:e4:3d:3b:db:3e:6c:86:94:ac:68: aa:5a:53:92:dd:b3:08:3b:e0:f9:7a:ba:53:5f:a5: c9:87:e6:73:82:14:cb:5e:c7:b4:db:52:9c:5a:69: a1:e1:9c:9d:70:04:f4:f8:43:8d:22:1e:9a:09:15: 7c:16:ea:ac:aa:c1:c0:29:ac:4e:c5:87:4e:ec:b4: 92:42:6e:1f:40:f1:95:fe:a1:62:b1:d7:e8:2b:37: 1e:41:fd:ea:cc:b9:fa:f7:02:10:22:1c:9d:bb:b2: 5c:e3:c9:65:a4:c7:03:3c:44:ba:04:11:c2:f6:01: 1b:ab:38:ae:44:a9:62:d9:2c:42:37:59:ed:1f:58: 74:d0:47:fe:38:ad:39:fe:70:8c:76:2b:e6:73:e2: 36:a7:0b:8e:b5:ab:5f:89:1e:ab:bb:b0:58:aa:04: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:09:43:45:8E:87:5A:10:70:3A:B9:46:2E:7C:40:B5:EA:FF:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7fa0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:63:7d:55:6b:d0:af:f5:ef:f9:b7:c0:13:ed:4b:c6:56:42: 86:91:c7:09:33:a2:4c:b0:04:80:9e:1a:20:8b:cf:c9:3a:75: 95:a3:b5:4f:d3:51:1f:b6:04:64:48:30:f0:a2:4b:ed:ac:8f: d5:00:83:6a:2b:d0:ac:fe:f6:f3:ea:f3:6d:01:5a:5a:99:3d: 78:9c:be:ca:e2:16:4f:a7:a3:8f:7d:eb:8b:fb:87:41:4b:41: b0:2d:51:3d:51:6f:3a:2c:d0:7a:da:90:e4:ac:21:d1:67:47: 7a:37:e0:8e:bd:f6:ef:fb:ce:2d:f2:fb:7f:13:85:01:e3:79: c7:4b:d1:b8:4c:29:9a:31:30:9a:73:15:50:d0:a4:c2:a4:f4: 9b:d7:0f:bb:fc:6b:bc:8b:5e:75:ae:df:b5:c9:88:2b:51:61: be:5f:34:13:b7:b0:2f:83:3e:a3:f2:ee:c4:5b:da:e2:b4:88: ab:e9:b0:1a:de:3d:3a:6d:31:25:7e:06:52:ae:e0:a8:f7:99: f0:ec:f0:6b:b1:6e:f9:9a:9e:d1:8a:3a:6c:ca:d6:4c:84:31: 93:c7:33:5e:5c:6c:69:fb:6d:c2:2e:28:4f:cf:98:f9:0c:1f: 5f:b0:8a:bc:03:2b:45:59:0b:d9:21:b2:23:63:ae:3b:35:0f: 9e:ff:39:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFYyLMJZigsN81QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTE5Y2Y1ODYtMzIyMy00ZWUyLTk1ZmItYWViNjkwOWVmMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK0si5vt4eCI3jh2QFiOP0PBdYInNdyRDIMT nwYtXXnozc/E9PL2hLZLKie56wjR59z7NeK36MY10++87af4yo4sxOpAhTy7hLqR E/zKNK9Gcj9BqqOnwRt2vtKBveQ9O9s+bIaUrGiqWlOS3bMIO+D5erpTX6XJh+Zz ghTLXse021KcWmmh4ZydcAT0+EONIh6aCRV8FuqsqsHAKaxOxYdO7LSSQm4fQPGV /qFisdfoKzceQf3qzLn69wIQIhydu7Jc48llpMcDPES6BBHC9gEbqziuRKli2SxC N1ntH1h00Ef+OK05/nCMdivmc+I2pwuOtatfiR6ru7BYqgT8mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJGGCUNFjodaEHA6uUYufEC16v9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQyY2VjMWUtZDljZS0z YzE1LTg2M2UtNWE3ZDUwMzA3YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAH+g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJjfVVr0K/17/m3wBPtS8ZWQoaRxwkzokywBICeGiCLz8k6dZWj tU/TUR+2BGRIMPCiS+2sj9UAg2or0Kz+9vPq820BWlqZPXicvsriFk+no49964v7 h0FLQbAtUT1Rbzos0HrakOSsIdFnR3o34I699u/7zi3y+38ThQHjecdL0bhMKZox MJpzFVDQpMKk9JvXD7v8a7yLXnWu37XJiCtRYb5fNBO3sC+DPqPy7sRb2uK0iKvp sBrePTptMSV+BlKu4Kj3mfDs8GuxbvmantGKOmzK1kyEMZPHM15cbGn7bcIuKE/P mPkMH1+wirwDK0VZC9khsiNjrjs1D57/Obk= -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:51 2026 by rpki-client