$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa File: 90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa (raw, json) Hash identifier: 2D+veTX6zXShS18v2cApDd2FrueCymKdDQjvyzdiNgU= Subject key identifier: 54:BE:7F:BC:3B:B1:86:0A:AF:39:04:7F:4E:44:11:DF:11:21:C8:64 Certificate issuer: /CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Certificate serial: 010D0C9F4328584F63F80E11D7330DA7AD2F9940 Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 33309 IP address blocks: 2620:106:800e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0e:11:d7:33:0d:a7:ad:2f:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=9dbb07bc-ea2b-4a96-a351-12ca120dba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:f6:d1:a1:6f:c3:23:b6:f7:7d:e3:14:87: cd:85:ab:d6:1a:b1:46:6b:5b:26:3b:b0:27:1e:65: fc:85:47:6f:f7:da:21:82:83:79:6f:5c:34:d1:72: f0:f7:15:fd:90:f0:ea:89:bf:8a:4e:80:ea:02:68: ed:8d:d6:6a:fc:30:29:e6:36:a5:07:b4:14:89:c1: 5f:80:45:8a:f0:0f:8a:71:92:9c:44:75:93:2a:d3: 86:3f:f6:92:53:b4:c3:0d:50:78:70:a5:a6:39:53: a2:8e:49:2f:ba:06:b0:78:8e:d6:0e:c8:35:46:fd: 4e:f8:d9:53:b3:5e:4f:65:b2:60:f8:dd:dd:0c:32: 66:34:f3:8f:86:08:a2:11:ae:21:da:df:e4:48:a6: 4a:a9:60:fb:14:61:2f:3d:db:ef:3b:80:b7:7e:e7: 73:34:64:7b:08:42:6a:70:14:50:e5:80:50:ad:6e: 4b:14:3e:01:d0:b5:50:a5:77:cc:5b:ae:c5:00:68: c1:ac:bc:1f:8e:52:d1:3f:e3:14:f2:1b:b3:55:5a: 2e:77:f9:6e:5c:87:d4:df:17:87:8b:69:52:ae:ae: ee:2f:8a:68:8c:a0:8f:ae:97:90:fc:1e:b4:23:ab: 65:b2:ac:6d:c4:de:7e:b7:88:95:07:f5:52:cc:99: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:7F:BC:3B:B1:86:0A:AF:39:04:7F:4E:44:11:DF:11:21:C8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl X509v3 Authority Key Identifier: keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer sbgp-ipAddrBlock: critical IPv6: 2620:106:800e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:c6:0c:7a:c1:9b:01:b5:86:74:82:af:09:a4:bc:9d:81:38: 86:7e:f4:91:5a:4c:91:71:b8:80:48:33:56:25:a3:36:9c:2e: 04:e2:0d:ad:57:db:b4:ae:fa:0a:c8:6e:3a:b6:1a:51:95:e4: b5:ba:b5:3d:2e:58:9a:27:31:d1:a2:cd:97:3c:ef:db:d8:e9: dd:a2:a5:0a:89:34:49:6f:08:b5:7f:da:b1:be:be:c7:ef:e1: 98:e2:6f:be:7c:22:5a:70:ba:8e:17:e9:f7:03:b8:93:76:52: 79:f3:26:90:ab:be:ac:e5:ba:95:d4:b8:dc:be:ec:25:ad:71: e6:e1:4a:72:db:11:15:22:3d:6f:c3:9c:b7:42:51:f4:c4:41: a1:73:e9:a5:f2:2b:ef:13:19:54:72:8c:dd:e9:e1:23:58:dc: 1e:fd:83:9c:ba:d0:a2:77:a6:a3:86:81:19:42:86:fb:ba:ed: 78:c9:6e:69:f1:8f:46:14:20:63:4c:e2:b5:e2:f9:fe:5c:3f: 5f:8a:44:01:ee:2d:9b:ed:d8:a5:10:56:39:08:b5:d9:30:5a: a2:e1:21:79:60:0f:ea:ba:5c:ae:d2:09:35:83:45:b7:d8:ce: c7:5a:39:24:9d:a6:fc:08:69:41:c1:59:8f:0a:9a:8b:48:0e: 87:40:4c:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9j+A4R1zMNp60vmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi ODk5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk OWRiYjA3YmMtZWEyYi00YTk2LWEzNTEtMTJjYTEyMGRiYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1j20aFvwyO2933jFIfNhavWGrFGa1smO7An HmX8hUdv99ohgoN5b1w00XLw9xX9kPDqib+KToDqAmjtjdZq/DAp5jalB7QUicFf gEWK8A+KcZKcRHWTKtOGP/aSU7TDDVB4cKWmOVOijkkvugaweI7WDsg1Rv1O+NlT s15PZbJg+N3dDDJmNPOPhgiiEa4h2t/kSKZKqWD7FGEvPdvvO4C3fudzNGR7CEJq cBRQ5YBQrW5LFD4B0LVQpXfMW67FAGjBrLwfjlLRP+MU8huzVVoud/luXIfU3xeH i2lSrq7uL4pojKCPrpeQ/B60I6tlsqxtxN5+t4iVB/VSzJn3ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFS+f7w7sYYKrzkEf05EEd8RIchkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0 NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOTBkNDlhM2MtNmJkYy0z ODIyLWFlNmYtMGE5ZjhmOTE2YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4 ODNiZmI4OTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABBoAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANzGDHrBmwG1hnSCrwmkvJ2BOIZ+9JFaTJFxuIBIM1YlozacLgTi Da1X27Su+grIbjq2GlGV5LW6tT0uWJonMdGizZc879vY6d2ipQqJNElvCLV/2rG+ vsfv4Zjib758Ilpwuo4X6fcDuJN2UnnzJpCrvqzlupXUuNy+7CWtcebhSnLbERUi PW/DnLdCUfTEQaFz6aXyK+8TGVRyjN3p4SNY3B79g5y60KJ3pqOGgRlChvu67XjJ bmnxj0YUIGNM4rXi+f5cP1+KRAHuLZvt2KUQVjkItdkwWqLhIXlgD+q6XK7SCTWD RbfYzsdaOSSdpvwIaUHBWY8KmotIDodATDc= -----END CERTIFICATE-----Generated at Sun Oct 11 13:46:51 2026 by rpki-client