$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa File: 350e89e8-f525-316a-9d14-11c96a99c5a0.roa (raw, json) Hash identifier: E9YnzO+VDpKskCTkvk3yvsI0zkgIGOllXOUCekBceJ4= Subject key identifier: 70:AF:C8:12:63:73:7D:80:15:DB:83:C0:92:16:ED:E2:48:06:65:33 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584E3E5F3F856F4DEE77BB2B06C0 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 63145 IP address blocks: 2606:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:3f:85:6f:4d:ee:77:bb:2b:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=1fe64c23-6bbf-4686-a9d6-efe6bd8b3273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:0a:c8:a4:85:a4:a4:45:17:86:a3:7c:66: 82:42:ff:cc:7e:7b:83:a4:9f:8d:89:b8:7e:e9:bc: a4:67:45:7e:81:12:e1:58:83:9f:fb:67:9e:38:b4: 5b:30:9e:41:5c:28:6c:7c:35:83:31:a2:8a:59:1e: 1f:11:44:e6:8c:87:59:a4:bd:dd:d7:e5:78:42:0b: d6:21:8d:44:6f:8e:f5:3d:fc:07:f9:79:18:71:3f: 41:96:1a:3a:db:a5:01:0e:06:ad:c9:5f:35:99:31: b0:ec:16:16:16:94:18:b6:4f:cc:a9:5f:8e:14:9c: fa:32:5c:fe:65:ba:ec:7e:7a:c7:22:f2:b3:cc:97: bb:e5:9b:07:08:ff:9c:3c:71:26:a3:36:e1:5c:88: e5:6e:a5:ae:8b:b7:25:ae:b8:21:c7:7f:8e:3a:91: 31:e2:21:19:a4:fd:4c:67:4b:72:69:12:cc:85:9a: 45:fb:b4:04:5a:ca:1d:16:50:e3:79:25:bd:d5:84: 41:14:7f:c5:8c:ae:26:37:6f:6f:f3:a7:62:2c:6f: 62:80:14:c5:88:75:7c:61:20:49:5c:36:32:74:fc: 03:e2:74:88:4c:19:3d:ee:f1:81:63:93:fa:96:24: 05:d1:e9:f4:66:c8:f9:5a:90:e7:66:6f:58:82:64: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:C8:12:63:73:7D:80:15:DB:83:C0:92:16:ED:E2:48:06:65:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv6: 2606:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4d:49:ec:e9:45:c8:28:c0:19:a8:63:56:a6:cf:60:e7:c1: 45:68:3b:8e:29:49:a9:9d:26:4c:4a:f3:80:24:36:64:dd:85: 2b:6f:76:d4:38:12:cd:55:03:75:a3:57:af:26:09:9c:57:d9: 07:be:2f:4a:52:0a:57:c7:dc:3c:30:40:33:a6:0e:e0:4a:63: 42:53:ce:a9:44:c6:56:6c:e0:0d:5d:4a:ae:6d:2b:70:c2:2e: 1b:16:da:ee:3f:77:f8:65:8a:cc:79:e1:74:94:60:0d:d2:89: eb:a0:e7:25:0a:7c:a9:ff:25:29:d2:88:f3:c7:66:07:e3:69: 00:c4:a7:6c:9b:34:8f:29:38:a2:e6:57:b8:7a:18:62:73:34: 03:82:1b:6b:3e:a9:e3:bf:c3:a5:85:b3:15:85:78:5f:eb:22: 59:74:a9:53:40:0d:38:75:29:2b:96:62:eb:60:60:69:ca:a7: cc:e6:66:6e:4f:93:af:1a:13:ae:54:ed:8d:08:3b:e1:c9:c7: b1:1e:e6:a4:c9:09:f3:47:4b:06:36:9b:10:e4:85:d2:15:e8: 85:c8:85:ed:98:a6:24:ab:92:ce:5d:b5:84:9b:09:17:e7:ae: 38:a1:01:96:b7:f8:0a:09:04:d1:de:18:f3:eb:4d:c6:5e:eb: 64:e0:71:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4+Xz+Fb03ud7srBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk MWZlNjRjMjMtNmJiZi00Njg2LWE5ZDYtZWZlNmJkOGIzMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXoKyKSFpKRFF4ajfGaCQv/MfnuDpJ+Nibh+ 6bykZ0V+gRLhWIOf+2eeOLRbMJ5BXChsfDWDMaKKWR4fEUTmjIdZpL3d1+V4QgvW IY1Eb471PfwH+XkYcT9Blho626UBDgatyV81mTGw7BYWFpQYtk/MqV+OFJz6Mlz+ ZbrsfnrHIvKzzJe75ZsHCP+cPHEmozbhXIjlbqWui7clrrghx3+OOpEx4iEZpP1M Z0tyaRLMhZpF+7QEWsodFlDjeSW91YRBFH/FjK4mN29v86diLG9igBTFiHV8YSBJ XDYydPwD4nSITBk97vGBY5P6liQF0en0Zsj5WpDnZm9YgmSI5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHCvyBJjc32AFduDwJIW7eJIBmUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMzUwZTg5ZTgtZjUyNS0z MTZhLTlkMTQtMTFjOTZhOTljNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgauQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGTUns6UXIKMAZqGNWps9g58FFaDuOKUmpnSZMSvOAJDZk3YUrb3bU OBLNVQN1o1evJgmcV9kHvi9KUgpXx9w8MEAzpg7gSmNCU86pRMZWbOANXUqubStw wi4bFtruP3f4ZYrMeeF0lGAN0onroOclCnyp/yUp0ojzx2YH42kAxKdsmzSPKTii 5le4ehhiczQDghtrPqnjv8OlhbMVhXhf6yJZdKlTQA04dSkrlmLrYGBpyqfM5mZu T5OvGhOuVO2NCDvhycexHuakyQnzR0sGNpsQ5IXSFeiFyIXtmKYkq5LOXbWEmwkX 5644oQGWt/gKCQTR3hjz603GXutk4HFX -----END CERTIFICATE-----Generated at Fri Jul 24 15:59:55 2026 by rpki-client