$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa File: 38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa (raw, json) Hash identifier: smXeRDEC0H9HiC2h7BILgFA1MIrZKa5Pz/lA7SsoyL0= Subject key identifier: BC:96:9F:50:88:C7:15:B9:6C:5B:EC:07:E3:66:F8:3A:65:94:AD:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01507DEF258169A7DC3EC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 2001:578:8aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:07:de:f2:58:16:9a:7d:c3:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=f0f94da9-ee50-4cef-a8e3-50bac17b32d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:b5:dd:90:3f:92:43:86:dc:e5:3d:7e:b5: 3d:34:b9:3e:e9:13:e2:75:32:78:58:4a:75:5f:d3: 80:91:d3:0a:b6:23:af:ff:f4:3d:2a:79:38:ce:4c: 0a:23:ca:ec:16:d9:ed:41:f5:e7:d9:f0:19:34:72: 87:15:ad:b6:23:3a:fa:28:64:c5:0a:bd:87:52:61: 80:f2:91:37:07:bb:0d:d9:22:a2:06:14:cb:55:bd: d3:49:40:02:40:07:68:f9:c8:03:89:95:02:79:b4: 9b:5c:af:80:d3:0c:67:4d:fc:83:cc:b9:e3:ac:76: 1b:f3:50:81:95:56:eb:be:b2:cf:28:39:01:7c:ad: e6:45:ab:58:90:38:44:a1:c3:2c:ce:2c:36:e0:82: c4:73:97:cc:f5:3f:93:3a:21:ef:44:f5:28:a0:75: 0f:1f:e7:c9:23:7a:2e:c0:68:79:f7:d7:cd:7e:80: 5a:fb:c8:17:a3:dc:c5:9f:c1:1d:34:8d:d3:e9:bc: 0e:ea:3a:0e:2c:08:25:8a:9e:7a:06:de:bd:48:54: 49:de:f0:c7:15:18:8e:84:78:43:f7:ef:69:18:a5: c3:af:5f:8f:f6:26:d0:61:0d:ab:6a:54:65:9d:e8: ef:cf:5e:e7:ac:3f:7a:a6:dc:a9:cb:98:11:37:34: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:9F:50:88:C7:15:B9:6C:5B:EC:07:E3:66:F8:3A:65:94:AD:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f65964-2096-3d6b-bc4c-a7bc510c8d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:88:1d:e6:f5:78:5b:ff:1e:b5:26:97:f4:04:68:91:61:22: fd:8d:bf:c0:40:de:b1:e2:9a:62:ec:25:0e:0b:f9:73:a2:e9: cd:a6:27:b6:80:4e:12:a3:3b:45:a4:02:47:f5:e4:67:21:35: f2:8e:c1:04:cb:ee:1d:9d:c5:61:02:8f:1a:ea:d3:76:ce:50: f0:b1:da:52:9b:16:25:69:a7:38:38:0d:67:20:95:9a:6e:40: 72:45:ed:e7:c0:6e:16:4d:f5:b5:f2:f7:a9:c2:19:03:64:4a: 24:e4:31:7f:e4:62:f0:47:8f:6d:1a:eb:c2:63:0e:7f:1c:6c: 38:0b:8f:31:3b:04:a7:c7:a9:58:15:a5:95:b3:08:1a:38:6e: 08:6d:a6:68:04:e5:3e:e3:ef:9e:bd:45:5b:e2:26:5e:da:6d: 9b:13:f6:74:81:15:11:33:21:bc:c8:0e:85:0d:63:38:39:44: b8:6a:e6:53:5c:10:2f:27:7c:1d:eb:66:95:1d:57:5a:b9:60: d1:c4:62:af:20:e4:10:9a:b9:ee:d1:25:89:2d:26:7f:ed:dd: 82:ea:f0:d9:d9:23:4a:b1:f5:7e:14:5f:3c:fa:99:c4:29:49: b7:7b:b9:b9:dd:b5:13:5a:23:bc:94:74:c9:3a:33:ab:7b:69: 59:ff:db:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFQfe8lgWmn3D7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZjBmOTRkYTktZWU1MC00Y2VmLWE4ZTMtNTBiYWMxN2IzMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyy13ZA/kkOG3OU9frU9NLk+6RPidTJ4WEp1 X9OAkdMKtiOv//Q9Knk4zkwKI8rsFtntQfXn2fAZNHKHFa22Izr6KGTFCr2HUmGA 8pE3B7sN2SKiBhTLVb3TSUACQAdo+cgDiZUCebSbXK+A0wxnTfyDzLnjrHYb81CB lVbrvrLPKDkBfK3mRatYkDhEocMsziw24ILEc5fM9T+TOiHvRPUooHUPH+fJI3ou wGh599fNfoBa+8gXo9zFn8EdNI3T6bwO6joOLAglip56Bt69SFRJ3vDHFRiOhHhD 9+9pGKXDr1+P9ibQYQ2ralRlnejvz17nrD96ptypy5gRNzSLjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyWn1CIxxW5bFvsB+Nm+DpllK1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhmNjU5NjQtMjA5Ni0z ZDZiLWJjNGMtYTdiYzUxMGM4ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAiq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2IHeb1eFv/HrUml/QEaJFhIv2Nv8BA3rHimmLsJQ4L+XOi6c2m J7aAThKjO0WkAkf15GchNfKOwQTL7h2dxWECjxrq03bOUPCx2lKbFiVppzg4DWcg lZpuQHJF7efAbhZN9bXy96nCGQNkSiTkMX/kYvBHj20a68JjDn8cbDgLjzE7BKfH qVgVpZWzCBo4bghtpmgE5T7j7569RVviJl7abZsT9nSBFREzIbzIDoUNYzg5RLhq 5lNcEC8nfB3rZpUdV1q5YNHEYq8g5BCaue7RJYktJn/t3YLq8NnZI0qx9X4UXzz6 mcQpSbd7ubndtRNaI7yUdMk6M6t7aVn/2ww= -----END CERTIFICATE-----Generated at Tue Jul 28 21:37:18 2026 by rpki-client