$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0327c678-846a-3504-a016-33ae2611378e.roa File: 0327c678-846a-3504-a016-33ae2611378e.roa (raw, json) Hash identifier: CRKU3p7XgtrRA7nXTIDTGLKVnfAupV3x0PshkFn4rxo= Subject key identifier: 07:C9:2D:C1:1A:58:C8:86:88:43:6E:98:70:52:23:09:6A:6C:F5:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277D560B085E57CF84CDC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0327c678-846a-3504-a016-33ae2611378e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:1108::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d5:60:b0:85:e5:7c:f8:4c:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=67eb8b28-f8bb-44c9-8c6f-d71a7c4adc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:e1:5b:da:3d:25:0e:7b:bb:a4:51:c0:29: c8:7f:db:23:73:c9:63:0c:39:63:d2:3a:15:17:f8: b8:20:35:20:e7:b7:58:94:28:53:20:66:41:7c:04: 0c:db:dc:ca:a3:74:88:8f:18:e8:a1:da:02:bf:ca: 12:59:50:58:3c:ab:54:72:94:5d:06:3b:24:10:9b: 65:7f:f9:cb:7b:44:6c:7b:c4:60:e9:b4:bc:0f:0b: 2c:3a:af:e0:0b:55:50:9f:0d:1e:14:a6:b6:9f:75: 12:56:1e:28:22:83:71:e4:4e:10:f4:41:2f:5e:47: 2f:78:d0:f5:c2:b4:e1:82:04:99:ec:59:de:a0:f4: 70:c6:78:61:8f:d7:c0:d4:92:06:e1:b8:2b:6b:e5: 20:ef:61:a5:00:4a:8f:94:fd:13:53:2e:fa:f8:9c: 29:65:05:8d:b7:02:09:22:4a:61:df:db:f3:26:86: f9:a6:5a:d8:1f:ac:25:b5:2a:6a:de:22:6c:77:69: 67:3f:13:0f:dc:93:e3:6d:c9:3e:ea:d4:25:6b:66: 49:a9:ca:66:8b:a8:fa:9f:05:b6:d2:6f:95:2e:7a: 8f:0e:20:17:1f:a7:8e:f1:eb:f3:af:8f:a3:4e:26: c9:01:66:bc:d6:d2:1d:30:a3:04:c2:db:3b:a0:12: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:2D:C1:1A:58:C8:86:88:43:6E:98:70:52:23:09:6A:6C:F5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0327c678-846a-3504-a016-33ae2611378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1108::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a7:ea:14:d0:38:b8:3c:b7:6a:e3:05:45:91:34:66:35:64: ad:f8:33:6a:38:6c:86:6b:82:f2:fd:a7:bd:84:59:31:f0:f3: e0:67:24:a8:31:bb:08:e0:0e:26:db:17:23:37:49:2d:64:dd: 76:cf:04:49:62:28:f1:2e:f1:75:68:84:72:0b:67:29:ac:8a: e1:ae:5f:4e:e4:cc:56:30:a0:ce:21:e5:20:6c:23:68:d5:41: 4a:42:08:7c:bb:ec:b6:15:b4:ea:db:65:fe:78:93:03:04:78: f9:f7:90:99:f1:63:7a:63:e8:18:8c:bf:44:dc:f1:bb:61:38: 4d:1c:f6:24:6e:23:6d:44:f6:f2:f2:b8:ab:d2:2b:94:4f:f7: 70:43:24:e9:fb:d8:c1:9c:c4:f3:ee:24:18:5f:1e:2f:68:46: 5b:ab:b6:d5:59:e9:1e:c3:7c:78:37:b7:93:10:34:09:3e:10: b8:ad:d1:cd:c6:14:96:89:ef:c9:79:2b:b3:41:73:49:7b:f9: 45:0f:00:57:8b:ee:8d:28:09:61:91:6b:9e:30:ac:ec:22:82: cb:b8:45:96:dc:4b:e0:4d:80:a0:66:1d:2e:c3:82:af:b9:44: ea:09:79:5d:44:91:5c:af:af:4e:28:eb:86:7e:94:90:f9:de: 63:6c:78:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Cd9VgsIXlfPhM3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NjdlYjhiMjgtZjhiYi00NGM5LThjNmYtZDcxYTdjNGFkYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/rhW9o9JQ57u6RRwCnIf9sjc8ljDDlj0joV F/i4IDUg57dYlChTIGZBfAQM29zKo3SIjxjoodoCv8oSWVBYPKtUcpRdBjskEJtl f/nLe0Rse8Rg6bS8DwssOq/gC1VQnw0eFKa2n3USVh4oIoNx5E4Q9EEvXkcveND1 wrThggSZ7FneoPRwxnhhj9fA1JIG4bgra+Ug72GlAEqPlP0TUy76+JwpZQWNtwIJ Ikph39vzJob5plrYH6wltSpq3iJsd2lnPxMP3JPjbck+6tQla2ZJqcpmi6j6nwW2 0m+VLnqPDiAXH6eO8evzr4+jTibJAWa81tIdMKMEwts7oBJcPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfJLcEaWMiGiENumHBSIwlqbPWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMyN2M2NzgtODQ2YS0z NTA0LWEwMTYtMzNhZTI2MTEzNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIABEI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWn6hTQOLg8t2rjBUWRNGY1ZK34M2o4bIZrgvL9p72EWTHw8+Bn JKgxuwjgDibbFyM3SS1k3XbPBEliKPEu8XVohHILZymsiuGuX07kzFYwoM4h5SBs I2jVQUpCCHy77LYVtOrbZf54kwMEePn3kJnxY3pj6BiMv0Tc8bthOE0c9iRuI21E 9vLyuKvSK5RP93BDJOn72MGcxPPuJBhfHi9oRlurttVZ6R7DfHg3t5MQNAk+ELit 0c3GFJaJ78l5K7NBc0l7+UUPAFeL7o0oCWGRa54wrOwigsu4RZbcS+BNgKBmHS7D gq+5ROoJeV1EkVyvr04o64Z+lJD53mNseFw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:51:33 2026 by rpki-client