$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11e3167a-30b6-32d7-94ff-49c382577e2d.roa File: 11e3167a-30b6-32d7-94ff-49c382577e2d.roa (raw, json) Hash identifier: l4FPhtPtul0lZkPWwnRM8odm05K3PVrTJTScyXhdQfI= Subject key identifier: 43:7C:0D:2E:98:FE:7B:32:A0:29:C5:BA:D8:4E:68:2E:EC:47:00:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427856690F6C72C211282300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11e3167a-30b6-32d7-94ff-49c382577e2d.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:7402::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:56:69:0f:6c:72:c2:11:28:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b84a7914-5876-495c-9e5d-44e3be778e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:7d:8a:53:d8:ed:7e:6d:9e:1a:a4:da:9f: a1:98:9c:d9:d4:73:02:13:e2:a0:60:46:ab:08:18: 67:c7:a6:06:02:a5:fb:db:4b:a9:d3:94:9f:85:00: b7:36:d1:61:36:56:f6:36:67:53:16:94:6f:85:7b: 8f:be:45:7e:dd:94:79:bc:50:ac:07:2f:01:29:d0: 99:54:dc:51:95:0d:df:45:54:e2:bf:e9:c6:11:2d: a2:d2:6c:c4:60:51:c4:cf:1f:15:e0:e0:32:83:32: d0:ea:1d:fd:1f:c1:2f:e0:76:a9:ea:6d:81:3d:1f: 66:1c:aa:40:30:08:23:f4:30:af:4b:18:58:be:6d: c1:e1:b5:40:82:16:16:8a:c2:d0:f1:84:7a:56:2e: a4:fe:a4:e5:0f:8d:3a:5b:81:78:4a:cf:38:e8:51: 54:4d:96:fb:59:d1:4c:54:70:ce:04:17:d4:7f:a7: 7a:69:15:69:6f:80:d8:ad:b1:26:b6:09:b5:81:6c: b3:60:fa:ab:81:4c:2a:11:14:f1:cd:c0:8f:d3:de: 8a:07:3d:70:6c:5c:92:15:8f:4e:82:70:b9:50:df: 95:89:7c:2a:f0:cb:44:1c:98:c6:ad:20:42:00:47: d7:2c:bd:d0:59:14:7b:2f:b0:5d:2f:70:59:04:9e: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7C:0D:2E:98:FE:7B:32:A0:29:C5:BA:D8:4E:68:2E:EC:47:00:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11e3167a-30b6-32d7-94ff-49c382577e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7402::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:56:aa:ff:36:c8:ab:10:f1:8b:4b:66:c8:01:33:8c:19:1b: 0f:32:f3:11:36:3a:95:a4:bb:f6:47:5f:fd:2f:d8:b3:74:a1: 1d:50:bc:00:44:b4:ec:1c:71:2b:cb:ee:5c:67:bb:11:c9:07: 5d:c8:5a:88:7e:42:d3:de:41:33:c7:7c:66:f0:93:a4:34:60: 5e:c5:c1:0f:93:95:c6:7d:50:45:16:10:65:a9:5f:49:85:6d: 24:c6:0c:31:07:ef:69:cd:24:f1:ef:75:51:f8:74:17:fc:df: f5:ec:43:d9:cd:3b:dd:ed:2a:fb:29:56:8a:d5:d0:40:86:06: 16:56:f3:21:cd:79:d9:95:31:1c:a3:e2:a0:7c:5f:51:68:95: 56:93:bf:2f:ec:bd:9d:0f:7c:62:b7:a5:82:09:09:ff:80:19: ae:25:90:b6:2f:a0:bd:8c:dd:68:64:c8:cc:24:2e:73:d4:1d: b5:f0:80:2b:b5:26:63:59:cb:a3:d6:55:8a:1c:ae:8b:c5:40: fd:62:39:7a:58:e3:11:4e:2f:a3:99:a9:fb:36:48:cb:59:c6: 3d:83:7e:4e:1a:09:46:f5:2f:ea:eb:bd:72:79:1a:8d:a3:29: aa:d3:6b:34:b1:50:bf:b9:f8:5b:c6:57:7a:ed:b5:3a:bf:cb: d0:73:1b:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeFZpD2xywhEoIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yjg0YTc5MTQtNTg3Ni00OTVjLTllNWQtNDRlM2JlNzc4ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwF9ilPY7X5tnhqk2p+hmJzZ1HMCE+KgYEar CBhnx6YGAqX720up05SfhQC3NtFhNlb2NmdTFpRvhXuPvkV+3ZR5vFCsBy8BKdCZ VNxRlQ3fRVTiv+nGES2i0mzEYFHEzx8V4OAygzLQ6h39H8Ev4Hap6m2BPR9mHKpA MAgj9DCvSxhYvm3B4bVAghYWisLQ8YR6Vi6k/qTlD406W4F4Ss846FFUTZb7WdFM VHDOBBfUf6d6aRVpb4DYrbEmtgm1gWyzYPqrgUwqERTxzcCP096KBz1wbFySFY9O gnC5UN+ViXwq8MtEHJjGrSBCAEfXLL3QWRR7L7BdL3BZBJ6yCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEN8DS6Y/nsyoCnFuthOaC7sRwCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFlMzE2N2EtMzBiNi0z MmQ3LTk0ZmYtNDljMzgyNTc3ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAHQC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZWqv82yKsQ8YtLZsgBM4wZGw8y8xE2OpWku/ZHX/0v2LN0oR1Q vABEtOwccSvL7lxnuxHJB13IWoh+QtPeQTPHfGbwk6Q0YF7FwQ+TlcZ9UEUWEGWp X0mFbSTGDDEH72nNJPHvdVH4dBf83/XsQ9nNO93tKvspVorV0ECGBhZW8yHNedmV MRyj4qB8X1FolVaTvy/svZ0PfGK3pYIJCf+AGa4lkLYvoL2M3WhkyMwkLnPUHbXw gCu1JmNZy6PWVYocrovFQP1iOXpY4xFOL6OZqfs2SMtZxj2Dfk4aCUb1L+rrvXJ5 Go2jKarTazSxUL+5+FvGV3rttTq/y9BzG+0= -----END CERTIFICATE-----Generated at Wed Sep 23 19:58:42 2026 by rpki-client