$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f510df-5a95-39f4-903b-bc21d6534a1b.roa File: 33f510df-5a95-39f4-903b-bc21d6534a1b.roa (raw, json) Hash identifier: NLAk3fkanOWgTqela13n9MsZCqax5wOz99Ms1NDpA1U= Subject key identifier: 5C:FA:B3:2D:90:46:09:53:E8:37:CB:BF:82:23:87:34:5F:FE:8A:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427832317DFEEAA2ABCD3010 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f510df-5a95-39f4-903b-bc21d6534a1b.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:568a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:32:31:7d:fe:ea:a2:ab:cd:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=88dddbfa-f906-4d7f-b732-5fe7d3534ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:1b:24:d0:92:98:fa:fd:f7:aa:1a:cb:d5: d4:f7:b8:44:17:a7:64:fb:9f:68:27:c8:db:f2:96: e3:d1:56:fb:97:59:e6:50:04:a4:45:f3:65:46:3e: 9c:15:ce:2d:44:f1:2e:93:70:d9:0e:01:be:d6:fb: 42:c2:2f:7e:37:3b:3b:32:0c:dc:6b:c0:df:8d:d8: 12:22:07:06:2b:cc:74:34:b2:cd:23:7d:66:8b:21: fb:be:7f:10:95:2e:71:18:5c:33:bf:f3:36:88:38: c4:14:d4:82:d5:ae:fd:03:50:1a:43:55:4b:d5:33: 31:f8:91:72:07:76:35:28:a0:57:57:a2:20:2c:e2: 7a:7a:1e:42:f0:2f:d6:df:24:5f:34:9e:ba:3b:10: 5f:1e:8f:cd:8f:d8:8f:ef:dc:44:d8:92:55:d8:ad: 21:c0:27:aa:ef:1e:b3:23:de:da:be:8f:02:fb:a7: a6:0d:83:8e:3b:34:fc:6d:a5:a9:71:90:52:62:0d: 72:c2:e4:88:11:f4:00:4f:6f:5d:02:bb:51:36:90: 72:44:ce:d0:c7:de:fd:d7:25:87:fb:f6:7d:58:34: 22:58:4d:b8:da:21:b6:48:80:98:f8:df:95:67:c6: f6:da:02:2d:a2:7b:02:0e:33:84:bd:a2:47:ec:9d: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:B3:2D:90:46:09:53:E8:37:CB:BF:82:23:87:34:5F:FE:8A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f510df-5a95-39f4-903b-bc21d6534a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:568a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2b:85:cf:77:8e:b9:a0:84:10:5f:79:f2:33:5d:12:89:b5: e8:7a:a3:7d:6a:b6:ad:78:97:30:41:11:3c:34:95:1a:fc:e9: 1e:b4:11:3d:e8:a4:69:c8:43:6a:e3:f1:7e:d3:f7:4a:8d:e3: 1f:74:f3:c0:9c:33:82:9b:8d:99:64:31:fc:7b:51:f6:4e:88: 29:09:9f:34:35:ad:eb:6d:7d:eb:04:84:1a:63:d5:a3:1d:c6: 41:1a:d5:f5:ea:65:6b:8d:eb:a5:ea:b2:40:fc:a4:15:5e:1e: 06:9c:48:70:f6:a7:9a:4e:fc:4c:41:cd:1e:23:cd:62:81:27: d5:c5:2b:df:b1:42:01:ab:3f:7b:31:9b:3a:14:07:83:6f:ea: 6b:1d:5b:47:5c:56:e9:7d:dd:03:72:df:58:28:09:d5:21:61: 67:88:62:73:3c:78:9a:a1:c1:06:94:47:94:1a:64:7b:46:6e: 77:64:db:66:22:11:70:4b:de:74:1b:b7:dc:8c:ac:5c:c5:48: fa:ed:68:26:f1:b7:e3:b2:34:a5:9e:8d:8a:2b:43:39:9b:77: cd:d2:72:af:df:54:b6:a0:a3:01:22:bf:e9:89:a2:71:4f:9f: a6:15:30:c3:4f:bc:07:02:f2:82:ce:45:03:37:25:d6:8e:d3: 23:27:9f:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeDIxff7qoqvNMBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ODhkZGRiZmEtZjkwNi00ZDdmLWI3MzItNWZlN2QzNTM0YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pQbJNCSmPr996oay9XU97hEF6dk+59oJ8jb 8pbj0Vb7l1nmUASkRfNlRj6cFc4tRPEuk3DZDgG+1vtCwi9+Nzs7Mgzca8DfjdgS IgcGK8x0NLLNI31miyH7vn8QlS5xGFwzv/M2iDjEFNSC1a79A1AaQ1VL1TMx+JFy B3Y1KKBXV6IgLOJ6eh5C8C/W3yRfNJ66OxBfHo/Nj9iP79xE2JJV2K0hwCeq7x6z I97avo8C+6emDYOOOzT8baWpcZBSYg1ywuSIEfQAT29dArtRNpByRM7Qx9791yWH +/Z9WDQiWE242iG2SICY+N+VZ8b22gItonsCDjOEvaJH7J137wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFz6sy2QRglT6DfLv4IjhzRf/opGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNmNTEwZGYtNWE5NS0z OWY0LTkwM2ItYmMyMWQ2NTM0YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFaK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsrhc93jrmghBBfefIzXRKJteh6o31qtq14lzBBETw0lRr86R60 ET3opGnIQ2rj8X7T90qN4x9088CcM4KbjZlkMfx7UfZOiCkJnzQ1rettfesEhBpj 1aMdxkEa1fXqZWuN66XqskD8pBVeHgacSHD2p5pO/ExBzR4jzWKBJ9XFK9+xQgGr P3sxmzoUB4Nv6msdW0dcVul93QNy31goCdUhYWeIYnM8eJqhwQaUR5QaZHtGbndk 22YiEXBL3nQbt9yMrFzFSPrtaCbxt+OyNKWejYorQzmbd83Scq/fVLagowEiv+mJ onFPn6YVMMNPvAcC8oLORQM3JdaO0yMnn1c= -----END CERTIFICATE-----Generated at Tue Sep 22 19:03:19 2026 by rpki-client