$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa File: 2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa (raw, json) Hash identifier: mxjCaUoX+vi0B/gDfFJhGTSrgdTLW77vZLTeOoapN1o= Subject key identifier: E7:0D:4A:59:C7:6A:05:4E:4F:93:0A:F2:1A:78:BD:F3:E0:12:A5:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782E2C0A5C368ACA185880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:5410::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2e:2c:0a:5c:36:8a:ca:18:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=6b2aa331-a8e5-4a38-9276-cb611aa1473c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:60:76:f9:a3:0f:db:29:7b:79:e0:fa:66: 25:94:31:85:bb:93:31:f6:7d:96:11:7d:3e:5c:27: 16:04:c4:e5:f9:a4:1c:3f:d6:d4:45:73:1b:1e:da: 49:66:8b:8e:29:0a:e9:17:bc:ea:54:04:22:70:cd: 73:e6:5b:8e:5d:bf:6e:5d:59:c4:40:64:f6:61:bc: 55:9d:22:ec:3a:e1:63:72:ef:ef:fe:44:43:51:64: 68:18:57:61:c6:24:6d:65:02:7f:21:13:02:06:a4: ea:d1:e1:4f:bc:d9:34:a8:75:be:3b:60:aa:0f:24: 8e:e3:02:8c:0c:33:1e:e2:28:58:d1:e4:29:fe:dc: 11:f9:93:dc:5f:dc:43:64:01:5c:a0:08:60:8e:76: 51:3d:94:bc:54:13:60:d1:01:a1:37:93:96:e8:c2: e8:17:da:4e:c5:e3:74:42:f0:17:98:0e:bc:9e:2c: e8:f1:06:c8:a1:bf:48:a5:fb:81:e4:b9:f9:30:38: 1c:7d:6a:4e:66:49:66:60:1d:d9:d0:2b:e0:03:d6: 90:4c:7e:86:c4:5c:c3:e8:ff:da:7e:92:84:04:ca: cb:ba:1b:fa:12:be:43:f5:a0:f6:de:90:c5:0d:88: aa:12:10:6c:6c:87:31:99:35:2e:85:05:bf:09:40: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0D:4A:59:C7:6A:05:4E:4F:93:0A:F2:1A:78:BD:F3:E0:12:A5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:5410::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a1:b5:25:f5:3e:d9:ab:ba:6f:8f:56:d3:7a:d0:37:13:cf: 42:b7:1e:f1:1e:c5:26:a9:ce:66:ad:77:39:33:7e:18:3b:d9: f3:ea:2d:67:a3:ec:1a:8c:af:20:05:0a:7a:be:c7:03:3f:5a: c2:76:99:cd:de:8d:be:66:77:4d:9d:b6:a5:aa:f5:14:99:5a: 26:dc:9c:a0:b7:20:b1:17:05:bd:e1:ed:0c:6d:74:ff:eb:0a: 44:b8:17:f9:1c:f5:dd:d4:57:f4:16:7a:cf:22:f8:e5:43:13: d3:fd:34:51:64:4c:2c:c5:7b:dd:aa:85:d0:28:90:b7:de:b3: 4c:2b:71:25:c5:26:85:5c:2d:b2:76:2b:07:b6:c4:b2:fc:55: 54:50:70:7a:73:fb:15:df:a0:05:72:e5:aa:7e:4f:4a:6b:e2: 2a:52:b1:ae:d2:9a:02:10:24:6b:0d:70:91:1d:ce:05:12:4e: 4e:b6:3f:ab:7d:53:43:b7:1f:66:00:da:45:1c:42:2a:52:c4: 17:ff:4d:3b:4a:2d:02:58:0e:11:d8:ed:05:b3:6f:14:28:f5: a0:90:a9:f1:eb:f3:c7:7f:80:b2:b3:a5:45:70:0b:54:e1:b7: 2b:ea:1d:24:ee:3e:cd:6b:a0:84:7b:2e:9b:f6:2b:0a:15:91: 85:66:a3:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeC4sClw2isoYWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NmIyYWEzMzEtYThlNS00YTM4LTkyNzYtY2I2MTFhYTE0NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzddgdvmjD9spe3ng+mYllDGFu5Mx9n2WEX0+ XCcWBMTl+aQcP9bURXMbHtpJZouOKQrpF7zqVAQicM1z5luOXb9uXVnEQGT2YbxV nSLsOuFjcu/v/kRDUWRoGFdhxiRtZQJ/IRMCBqTq0eFPvNk0qHW+O2CqDySO4wKM DDMe4ihY0eQp/twR+ZPcX9xDZAFcoAhgjnZRPZS8VBNg0QGhN5OW6MLoF9pOxeN0 QvAXmA68nizo8QbIob9IpfuB5Ln5MDgcfWpOZklmYB3Z0CvgA9aQTH6GxFzD6P/a fpKEBMrLuhv6Er5D9aD23pDFDYiqEhBsbIcxmTUuhQW/CUCY1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOcNSlnHagVOT5MK8hp4vfPgEqXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjY4N2FiN2EtYWIxYi0z MWYyLTllNTMtYjhiN2EyNGEzMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGehtSX1Ptmrum+PVtN60DcTz0K3HvEexSapzmatdzkzfhg72fPq LWej7BqMryAFCnq+xwM/WsJ2mc3ejb5md02dtqWq9RSZWibcnKC3ILEXBb3h7Qxt dP/rCkS4F/kc9d3UV/QWes8i+OVDE9P9NFFkTCzFe92qhdAokLfes0wrcSXFJoVc LbJ2Kwe2xLL8VVRQcHpz+xXfoAVy5ap+T0pr4ipSsa7SmgIQJGsNcJEdzgUSTk62 P6t9U0O3H2YA2kUcQipSxBf/TTtKLQJYDhHY7QWzbxQo9aCQqfHr88d/gLKzpUVw C1ThtyvqHSTuPs1roIR7Lpv2KwoVkYVmo/k= -----END CERTIFICATE-----Generated at Wed Sep 23 21:34:44 2026 by rpki-client