$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b568cf65-4ae2-3ceb-baf8-1aeb73653d4d.roa File: b568cf65-4ae2-3ceb-baf8-1aeb73653d4d.roa (raw, json) Hash identifier: mKP7Sz9s2+0Vrf1uTuBy8dwy7ZRly644TPg30Jh2db8= Subject key identifier: 43:BF:A3:CE:E6:5B:5F:19:BD:22:8A:5A:1F:75:B0:6B:8B:89:AF:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D59EA6000B747E79DB715D348 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b568cf65-4ae2-3ceb-baf8-1aeb73653d4d.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22773 IP address blocks: 2600:8800:bd00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:60:00:b7:47:e7:9d:b7:15:d3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=36874d33-e399-4240-b462-ea4d0b78df46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:6e:55:5c:27:94:0e:92:dd:80:81:e6:87: ab:bd:4a:d2:05:30:ad:7c:a7:9e:41:28:43:31:58: ba:2c:a7:1f:ca:ef:b4:bf:e1:0c:ad:fd:c1:23:ef: fa:4e:31:1f:01:23:bc:02:ec:55:2c:5c:3c:67:97: 99:d5:2c:88:72:83:50:7c:9b:b3:96:a4:6c:6c:3b: bc:c7:ef:87:ef:b0:03:38:23:b0:63:a2:3d:1e:57: 16:98:97:25:75:e4:60:c0:a3:74:42:83:b4:c9:47: e2:ff:ea:c9:21:67:ae:ac:7e:56:0b:c4:44:b5:2c: 48:20:ea:cc:f2:f3:33:5d:60:97:e8:cd:8a:bb:2f: c3:b3:e5:f3:38:0d:b2:8b:dd:4f:de:a1:66:8c:06: 45:30:fe:71:06:19:5b:26:27:ec:24:81:48:b4:17: f1:ec:16:30:ff:36:e0:79:78:cf:70:26:b3:5a:1a: ee:5d:bb:e3:74:10:f0:1e:f3:05:7a:1a:10:c7:0b: ef:3d:36:c0:b5:e3:2c:5c:00:9e:93:72:1e:ff:1b: 5a:50:99:5b:0f:ca:21:0f:44:36:7a:ec:4a:e2:a5: 8c:99:91:5b:b0:ee:09:b4:ea:9e:ea:93:04:3e:9e: 24:aa:9d:61:c4:3d:26:4b:f8:81:74:78:05:cb:8c: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:A3:CE:E6:5B:5F:19:BD:22:8A:5A:1F:75:B0:6B:8B:89:AF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b568cf65-4ae2-3ceb-baf8-1aeb73653d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:bd00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:41:c9:cd:e6:06:8c:32:5d:59:d8:15:48:e4:9c:39:53:c9: e2:f4:40:b1:ed:77:b5:85:76:23:64:55:3e:ba:67:11:38:a4: 61:f1:1c:89:40:a2:7f:d8:90:6e:77:20:a5:51:6b:40:f6:b6: 96:5a:69:95:70:d0:28:98:f7:80:df:54:08:6a:fd:ae:25:3d: 21:fc:93:fe:6d:90:8d:04:ef:a6:56:fc:84:68:dc:bf:5a:95: b8:b7:00:bd:6e:68:f7:7c:26:cc:37:94:a4:e2:e6:1b:2e:e9: 00:44:c6:63:30:8f:64:c9:ee:97:7d:43:96:51:98:f5:90:de: 51:18:c8:b6:72:7e:88:d4:75:dc:a6:46:21:53:f6:7f:91:ef: 7b:17:8f:99:56:96:5c:d4:f7:d7:f3:7c:c4:02:85:c9:28:28: 5f:c8:3d:77:fb:45:fd:0f:1f:94:3d:a1:71:35:c1:e1:e6:72: f0:46:91:32:c1:2c:78:b2:97:37:9a:d8:27:73:f8:fa:52:58: bd:94:81:c3:fe:4a:56:ae:3c:ef:48:f8:cf:4e:b9:14:82:a6: b0:13:67:ea:58:b7:74:30:6d:9c:2f:24:21:11:f0:11:02:f5: 5f:84:d4:8f:11:e3:4e:e4:ab:73:b4:ad:fd:67:3a:71:33:6f: 01:34:a0:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6mAAt0fnnbcV00gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzY4NzRkMzMtZTM5OS00MjQwLWI0NjItZWE0ZDBiNzhkZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibpuVVwnlA6S3YCB5oervUrSBTCtfKeeQShD MVi6LKcfyu+0v+EMrf3BI+/6TjEfASO8AuxVLFw8Z5eZ1SyIcoNQfJuzlqRsbDu8 x++H77ADOCOwY6I9HlcWmJcldeRgwKN0QoO0yUfi/+rJIWeurH5WC8REtSxIIOrM 8vMzXWCX6M2Kuy/Ds+XzOA2yi91P3qFmjAZFMP5xBhlbJifsJIFItBfx7BYw/zbg eXjPcCazWhruXbvjdBDwHvMFehoQxwvvPTbAteMsXACek3Ie/xtaUJlbD8ohD0Q2 euxK4qWMmZFbsO4JtOqe6pMEPp4kqp1hxD0mS/iBdHgFy4znxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEO/o87mW18ZvSKKWh91sGuLia/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU2OGNmNjUtNGFlMi0z Y2ViLWJhZjgtMWFlYjczNjUzZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAL0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZByc3mBowyXVnYFUjknDlTyeL0QLHtd7WFdiNkVT66ZxE4pGHx HIlAon/YkG53IKVRa0D2tpZaaZVw0CiY94DfVAhq/a4lPSH8k/5tkI0E76ZW/IRo 3L9albi3AL1uaPd8Jsw3lKTi5hsu6QBExmMwj2TJ7pd9Q5ZRmPWQ3lEYyLZyfojU ddymRiFT9n+R73sXj5lWllzU99fzfMQChckoKF/IPXf7Rf0PH5Q9oXE1weHmcvBG kTLBLHiylzea2Cdz+PpSWL2UgcP+SlauPO9I+M9OuRSCprATZ+pYt3QwbZwvJCER 8BEC9V+E1I8R407kq3O0rf1nOnEzbwE0oPA= -----END CERTIFICATE-----Generated at Fri Apr 17 09:53:49 2026 by rpki-client