$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cdde205-e460-3ff1-a237-8a73b640ba80.roa File: 3cdde205-e460-3ff1-a237-8a73b640ba80.roa (raw, json) Hash identifier: 8js3OdVRUgLIx5tSV9PqGw76jSIhd+OlaWIaFb9Li2Q= Subject key identifier: 9E:18:07:24:78:34:30:5D:F5:DD:2F:83:A2:43:1A:3F:53:11:BA:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01540A27B085C6688C180C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cdde205-e460-3ff1-a237-8a73b640ba80.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:1a40::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:40:a2:7b:08:5c:66:88:c1:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=29013a87-f28b-48b0-b53a-aec6d0617645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:57:1b:72:76:83:da:c3:04:c0:7b:81:79: 9a:29:c5:fa:b4:71:a8:ae:1a:84:4a:3c:09:ee:a6: ca:32:e2:d4:0e:b8:f9:d9:ea:0f:d2:6e:ea:1d:d9: 2f:f4:21:42:ae:2d:a6:6f:e2:f3:7c:37:03:a9:2a: 69:9e:15:a7:fa:ed:d5:3a:4c:ab:58:58:e8:66:48: a1:64:e0:8d:49:7e:d9:59:53:60:ea:f0:6d:b1:54: 2e:f0:ea:39:37:eb:bf:61:2b:f7:77:b5:9e:2c:0e: 53:a7:0f:7a:3d:f2:76:09:de:a5:10:18:d2:c9:8e: 76:72:85:5d:72:fe:48:a2:a0:23:5a:7c:3e:df:73: 15:2d:90:6b:6a:3e:8a:79:9b:98:01:98:71:31:40: 63:c6:a5:73:58:1e:dd:f0:59:4d:42:6b:51:d1:1f: ba:22:a1:c9:69:c7:ed:37:aa:6d:69:ce:3b:eb:fe: b2:82:14:a4:e6:dd:c8:e9:a6:4b:83:88:14:37:7d: ad:1d:31:03:56:c4:05:1a:fd:75:3e:e9:5a:ac:4a: eb:45:18:c5:01:bb:1e:a2:e3:30:cc:8f:4c:c4:e5: 5d:50:98:1f:aa:fb:85:a3:15:9f:6c:25:da:31:e0: 70:84:bd:55:86:c3:2a:82:84:c6:0f:29:0c:87:85: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:07:24:78:34:30:5D:F5:DD:2F:83:A2:43:1A:3F:53:11:BA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cdde205-e460-3ff1-a237-8a73b640ba80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1a40::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:30:0f:c8:52:bc:e7:31:3f:d4:71:bf:ce:0e:c9:19:f2:58: 7d:e8:83:08:1a:47:bc:73:e8:ac:3a:22:e7:8d:57:27:a9:2b: 46:5a:08:25:f0:ac:c6:ad:1d:f6:6f:6f:db:0b:03:02:fa:ba: 3d:5a:0a:92:ae:ad:50:89:1e:5d:a9:d8:af:ae:49:bc:5f:8a: 47:7e:c1:f9:65:26:41:3f:fa:10:6e:bc:1a:12:42:b7:19:99: 7d:cc:00:ed:9c:6b:c4:68:2d:f6:5e:b9:54:95:68:bb:b0:0a: 16:2a:a9:3e:de:91:65:bb:04:33:6b:b1:7b:e4:29:c0:7a:94: 25:c7:66:06:07:27:98:30:9a:ed:d7:72:80:19:02:99:e2:5e: 64:67:b4:82:c6:9b:a1:70:79:20:95:c3:77:11:df:c7:8f:2d: b0:ff:73:97:f1:72:b0:7e:1f:b7:35:97:67:69:5c:fa:87:4b: c4:40:96:b8:5b:1c:e0:72:cb:46:0d:b1:f3:cf:7b:c9:e6:54: 87:f5:3e:1c:52:d6:35:0e:2b:c1:c8:4b:49:00:9f:25:43:27: ba:69:b1:a6:16:53:53:fe:a4:e8:dd:11:c3:00:40:b6:2b:25: 3d:65:02:3c:4c:04:80:f8:08:b6:29:db:01:67:5f:67:b8:68: 17:d3:cc:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFUCiewhcZojBgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MjkwMTNhODctZjI4Yi00OGIwLWI1M2EtYWVjNmQwNjE3NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwxXG3J2g9rDBMB7gXmaKcX6tHGorhqESjwJ 7qbKMuLUDrj52eoP0m7qHdkv9CFCri2mb+LzfDcDqSppnhWn+u3VOkyrWFjoZkih ZOCNSX7ZWVNg6vBtsVQu8Oo5N+u/YSv3d7WeLA5Tpw96PfJ2Cd6lEBjSyY52coVd cv5IoqAjWnw+33MVLZBraj6KeZuYAZhxMUBjxqVzWB7d8FlNQmtR0R+6IqHJacft N6ptac476/6yghSk5t3I6aZLg4gUN32tHTEDVsQFGv11PularErrRRjFAbseouMw zI9MxOVdUJgfqvuFoxWfbCXaMeBwhL1VhsMqgoTGDykMh4U0LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4YByR4NDBd9d0vg6JDGj9TEbr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NkZGUyMDUtZTQ2MC0z ZmYxLWEyMzctOGE3M2I2NDBiYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIABpA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKUwD8hSvOcxP9Rxv84OyRnyWH3ogwgaR7xz6Kw6IueNVyepK0Za CCXwrMatHfZvb9sLAwL6uj1aCpKurVCJHl2p2K+uSbxfikd+wfllJkE/+hBuvBoS QrcZmX3MAO2ca8RoLfZeuVSVaLuwChYqqT7ekWW7BDNrsXvkKcB6lCXHZgYHJ5gw mu3XcoAZApniXmRntILGm6FweSCVw3cR38ePLbD/c5fxcrB+H7c1l2dpXPqHS8RA lrhbHOByy0YNsfPPe8nmVIf1PhxS1jUOK8HIS0kAnyVDJ7ppsaYWU1P+pOjdEcMA QLYrJT1lAjxMBID4CLYp2wFnX2e4aBfTzAo= -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:35 2026 by rpki-client