$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa File: 2518ec95-7af4-3365-aeb0-97105e42c5c3.roa (raw, json) Hash identifier: kwQD4vPyQBPw42SDzumO7XzFOjczMmsoYaEiotlhYC0= Subject key identifier: 20:FF:F6:9D:D0:E8:71:95:BB:F8:18:BC:8D:C6:8F:46:0D:D7:71:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD097731B002436CBF04180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 2600:8800:8684::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:97:73:1b:00:24:36:cb:f0:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=e3a97d5f-9e9b-4b1a-9df7-bfb647360d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:94:79:e5:34:66:3c:71:ca:25:52:a2:be: be:59:e3:fc:60:c6:9e:89:64:cc:f4:69:4f:32:82: 6a:80:e6:8d:22:09:1d:a0:e6:38:9a:68:54:5c:c8: 37:a5:99:9a:c5:70:38:e2:5c:72:3a:77:2a:f9:75: d7:53:41:dc:a0:ae:a3:7a:ba:89:2f:7a:d9:0c:c5: 4d:e8:1f:b4:ca:ad:10:46:0c:57:9c:37:ef:23:54: 68:4a:f6:8c:dd:71:81:84:d3:1e:e8:53:1c:58:3a: 7c:ba:50:f6:0c:0e:a9:b8:9f:bd:6e:83:b5:c1:cc: 04:71:be:2c:04:91:64:22:bb:1b:c9:4d:e2:7f:22: a6:24:76:2b:02:bf:77:4c:15:bb:4f:ff:1c:f2:8f: 71:e8:e9:b1:b8:56:27:ff:16:3f:5a:f1:24:ee:ea: db:d8:f2:07:46:03:36:b8:cb:19:50:2e:0f:1f:8b: 68:e7:8d:3a:57:eb:c8:6d:15:af:4f:a8:05:d3:1a: 6c:ed:19:46:7a:47:f1:52:19:86:b1:c8:9f:8b:00: 43:6e:23:8c:61:e3:7e:79:a7:7d:7f:b3:18:bd:b8: 14:ee:33:59:9e:6c:56:e4:54:ec:c7:26:f5:32:21: 36:19:26:06:88:72:73:b9:1d:48:50:d7:c6:15:42: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:F6:9D:D0:E8:71:95:BB:F8:18:BC:8D:C6:8F:46:0D:D7:71:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8684::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a3:58:ca:c2:52:95:e3:50:2b:da:cb:f3:06:3d:99:1f:11: e4:84:5a:84:59:2a:c3:e2:bf:41:87:8b:74:4e:e1:c3:fd:91: 2b:f3:ca:ff:00:c3:b7:4f:6a:59:aa:b9:7a:7e:ed:bf:57:d8: 00:fb:91:70:de:b3:e9:4e:14:62:e4:cc:f0:6a:2a:c8:d2:df: 71:99:17:5f:49:af:32:9d:f1:eb:48:6e:40:ac:c2:99:1f:da: 07:5a:be:c3:2b:cd:dd:12:e6:1e:6d:35:9b:50:fa:54:05:5d: e9:c1:01:e7:52:1d:f4:38:91:58:c8:80:b3:cb:f7:07:df:40: 0f:65:a3:9a:c1:46:1b:b8:8c:8c:a7:8c:e5:41:c8:fe:d8:09: ec:7f:10:07:8c:b8:8d:10:4e:35:98:b8:0e:0f:bb:c2:f9:1d: 30:a1:d1:c1:2e:e6:79:13:f2:f7:21:98:58:a7:6e:d8:de:bf: 19:1c:9e:ba:c0:16:2b:d1:c5:01:2e:0b:a4:92:85:e2:de:8b: 7d:4a:90:ef:d7:f3:a2:bd:7d:54:2c:81:4b:60:a5:3a:a5:4b: da:fa:2b:3f:24:14:b4:5b:a3:a5:17:0f:2d:ac:a5:7a:50:18: d6:8e:27:1f:2b:e2:ba:20:27:3a:08:dd:0d:4a:52:8b:4b:1a: 9e:ca:51:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0JdzGwAkNsvwQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZTNhOTdkNWYtOWU5Yi00YjFhLTlkZjctYmZiNjQ3MzYwZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuziUeeU0ZjxxyiVSor6+WeP8YMaeiWTM9GlP MoJqgOaNIgkdoOY4mmhUXMg3pZmaxXA44lxyOncq+XXXU0HcoK6jerqJL3rZDMVN 6B+0yq0QRgxXnDfvI1RoSvaM3XGBhNMe6FMcWDp8ulD2DA6puJ+9boO1wcwEcb4s BJFkIrsbyU3ifyKmJHYrAr93TBW7T/8c8o9x6OmxuFYn/xY/WvEk7urb2PIHRgM2 uMsZUC4PH4to5406V+vIbRWvT6gF0xps7RlGekfxUhmGscifiwBDbiOMYeN+ead9 f7MYvbgU7jNZnmxW5FTsxyb1MiE2GSYGiHJzuR1IUNfGFUL+UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCD/9p3Q6HGVu/gYvI3Gj0YN13GzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUxOGVjOTUtN2FmNC0z MzY1LWFlYjAtOTcxMDVlNDJjNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJajWMrCUpXjUCvay/MGPZkfEeSEWoRZKsPiv0GHi3RO4cP9kSvz yv8Aw7dPalmquXp+7b9X2AD7kXDes+lOFGLkzPBqKsjS33GZF19JrzKd8etIbkCs wpkf2gdavsMrzd0S5h5tNZtQ+lQFXenBAedSHfQ4kVjIgLPL9wffQA9lo5rBRhu4 jIynjOVByP7YCex/EAeMuI0QTjWYuA4Pu8L5HTCh0cEu5nkT8vchmFinbtjevxkc nrrAFivRxQEuC6SSheLei31KkO/X86K9fVQsgUtgpTqlS9r6Kz8kFLRbo6UXDy2s pXpQGNaOJx8r4rogJzoI3Q1KUotLGp7KUYg= -----END CERTIFICATE-----Generated at Wed May 13 08:11:07 2026 by rpki-client