$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa File: 1f5ae641-1dd8-343b-8c69-28e1344ab162.roa (raw, json) Hash identifier: oxRQy3WwXPJyHBCyS66JlvjFNA48QJrlEbWxrbSGVJ8= Subject key identifier: 49:ED:8D:F0:C2:BB:2A:67:09:70:90:26:3D:CF:C9:2F:43:B0:15:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427855AFA524EA092342D118 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:b5a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:55:af:a5:24:ea:09:23:42:d1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=4e27d052-7927-41e4-bc38-a3362d79e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:da:90:a6:ba:71:cd:a8:f3:02:c3:f8:11: 22:6a:8b:36:0d:0f:a3:f9:ea:05:ab:fb:66:8d:e2: 1f:88:f8:2d:78:76:90:e0:cb:ae:0d:26:81:33:b8: 97:ee:75:2f:f9:ee:96:5c:45:cd:7e:0e:58:ca:18: 31:54:f1:bf:77:fd:6a:39:c8:29:20:af:a4:0f:c4: 74:1a:01:a5:ae:af:4b:7d:40:09:dd:0a:58:74:db: fc:b6:b4:a6:32:91:64:91:2e:bd:1f:ad:c3:87:87: 10:06:f8:a0:19:bf:25:89:9f:e6:98:8c:6c:d6:61: 94:77:a2:c9:89:7e:90:f2:2a:70:5e:a2:32:f6:d2: fd:5a:f8:92:14:99:bd:c2:92:c3:58:72:a5:70:ac: fc:c4:1b:a6:9a:e3:0b:6f:d3:c1:04:6d:17:f7:f6: f3:68:00:96:3f:52:4f:c6:d5:ab:e7:46:e3:f5:2a: e0:93:9d:cd:dc:23:be:fa:35:9a:86:ed:b6:8b:9f: 4d:fd:1c:e2:0b:33:ef:46:b0:08:b9:50:9a:ff:42: e4:33:d5:be:b3:d9:78:63:b9:df:79:ae:3e:48:d0: e2:40:79:44:66:32:d3:dd:1a:c3:62:54:9d:26:df: 7e:dc:72:18:c5:37:cc:93:fe:73:3e:b0:64:4c:96: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:8D:F0:C2:BB:2A:67:09:70:90:26:3D:CF:C9:2F:43:B0:15:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b5a0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:49:37:ff:78:f5:43:1c:22:cc:34:4d:2b:b2:9a:4e:8c:2e: cc:6a:4b:b9:68:aa:e2:ea:34:ac:59:f3:9b:13:53:b6:e2:b7: 5d:60:b9:0e:4b:65:de:f5:8b:0a:ab:e7:09:be:f8:17:23:2c: 6a:12:bb:4c:39:20:68:16:75:a3:03:32:dc:f9:a4:f5:e2:62: cd:59:6f:22:08:4d:9e:35:5c:d2:6f:3e:11:bc:1f:a0:d6:57: 6e:f2:29:56:77:49:74:21:2e:47:f0:9b:a5:d6:d3:e9:87:bb: 34:bb:ca:bc:ed:27:be:56:27:df:59:09:bd:7f:c1:28:e6:6f: 78:e2:06:3d:0c:21:b2:37:98:93:d8:74:23:44:d9:37:46:50: 9c:9e:20:f8:ab:6f:48:ba:72:d6:6a:6f:8f:a8:fd:5c:c0:57: f7:8c:80:76:53:2d:5c:6e:10:a7:ed:27:ad:18:4e:43:f7:5f: 13:4e:3a:01:f8:a4:68:61:48:13:01:45:a5:6b:67:9a:d6:3d: 50:a6:04:77:03:62:d7:e5:30:b0:3f:18:72:a8:7e:29:0b:7a: e2:ab:14:e7:fd:34:e3:97:71:62:f0:9a:2c:23:f6:07:0e:b6: 71:4c:4e:79:6c:0f:3e:b0:02:ae:dd:4b:e5:3c:f2:ea:12:e3: fd:4d:e6:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeFWvpSTqCSNC0RgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGUyN2QwNTItNzkyNy00MWU0LWJjMzgtYTMzNjJkNzllNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr7akKa6cc2o8wLD+BEiaos2DQ+j+eoFq/tm jeIfiPgteHaQ4MuuDSaBM7iX7nUv+e6WXEXNfg5YyhgxVPG/d/1qOcgpIK+kD8R0 GgGlrq9LfUAJ3QpYdNv8trSmMpFkkS69H63Dh4cQBvigGb8liZ/mmIxs1mGUd6LJ iX6Q8ipwXqIy9tL9WviSFJm9wpLDWHKlcKz8xBummuMLb9PBBG0X9/bzaACWP1JP xtWr50bj9Srgk53N3CO++jWahu22i59N/RziCzPvRrAIuVCa/0LkM9W+s9l4Y7nf ea4+SNDiQHlEZjLT3RrDYlSdJt9+3HIYxTfMk/5zPrBkTJY7uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEntjfDCuypnCXCQJj3PyS9DsBWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY1YWU2NDEtMWRkOC0z NDNiLThjNjktMjhlMTM0NGFiMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIALWg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhJN/949UMcIsw0TSuymk6MLsxqS7loquLqNKxZ85sTU7bit11g uQ5LZd71iwqr5wm++BcjLGoSu0w5IGgWdaMDMtz5pPXiYs1ZbyIITZ41XNJvPhG8 H6DWV27yKVZ3SXQhLkfwm6XW0+mHuzS7yrztJ75WJ99ZCb1/wSjmb3jiBj0MIbI3 mJPYdCNE2TdGUJyeIPirb0i6ctZqb4+o/VzAV/eMgHZTLVxuEKftJ60YTkP3XxNO OgH4pGhhSBMBRaVrZ5rWPVCmBHcDYtflMLA/GHKofikLeuKrFOf9NOOXcWLwmiwj 9gcOtnFMTnlsDz6wAq7dS+U88uoS4/1N5gs= -----END CERTIFICATE-----Generated at Mon Sep 28 16:30:57 2026 by rpki-client