$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aac8df7-781b-3942-a8f6-41e68ea4399f.roa File: 2aac8df7-781b-3942-a8f6-41e68ea4399f.roa (raw, json) Hash identifier: XGjOAc4NA/dg8d3Yw498xq1fMEmZu7WIS2A/qZWQQcY= Subject key identifier: 0A:C5:C5:2B:A1:EE:3B:B8:6D:76:1D:28:8A:BC:28:7A:49:1A:73:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278172769B9469E266FC980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aac8df7-781b-3942-a8f6-41e68ea4399f.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:4c1e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:17:27:69:b9:46:9e:26:6f:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=326c860b-f8c7-43ae-a5ca-c37242b4f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:ca:6a:3b:5c:79:5d:9e:24:fb:c6:af:57: ea:8b:e8:e9:ab:49:3c:d5:40:fa:b9:7c:0e:fc:3a: 40:dc:dd:a0:0e:18:11:82:13:02:10:21:c2:90:12: e0:45:21:c1:a3:b7:0c:24:23:2f:4c:49:fb:32:ae: ee:7d:01:42:0f:08:da:60:e0:e6:55:9d:a1:fc:45: 41:ed:f2:98:c4:87:ed:56:80:8f:e0:34:9f:2e:8e: df:bc:19:58:6c:02:fe:3c:aa:3c:52:66:b0:99:59: a8:6d:cb:32:31:d5:5e:bd:ce:3b:ac:cf:fb:ee:47: a9:1b:cc:24:d1:db:d2:aa:f7:0b:13:37:a0:32:e1: 3d:b7:82:61:1c:bb:29:38:b9:22:e6:fe:ba:79:c9: f4:36:09:9c:3c:da:ce:f4:40:35:c0:c7:ef:8b:10: 26:75:5d:37:bf:13:d8:32:e1:73:ea:f6:3f:79:15: 4b:5c:ff:d4:be:12:24:90:81:f5:6c:da:63:1d:cf: 7d:5c:3e:05:0d:cf:1a:b7:bd:fd:04:6a:b8:11:cf: 65:36:2a:75:9a:5a:7c:26:a2:de:73:23:e4:ee:2a: 06:bd:e5:db:d5:6f:1a:2b:16:07:52:42:e9:d2:dd: d7:7d:f6:12:c5:80:50:86:fa:a7:5f:d5:11:da:a5: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:C5:2B:A1:EE:3B:B8:6D:76:1D:28:8A:BC:28:7A:49:1A:73:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aac8df7-781b-3942-a8f6-41e68ea4399f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4c1e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c8:a9:cd:71:91:69:49:fe:17:33:05:be:a9:95:f0:58:6e: 68:4d:4b:57:48:51:44:9f:27:9a:d0:e2:1c:72:8f:12:67:55: 53:23:98:98:e9:17:07:13:6d:ff:70:f4:c2:83:9d:a8:d6:b0: a7:b5:2c:b8:83:79:f7:38:82:08:83:b9:85:04:b0:9c:10:b6: 5d:ea:aa:07:c5:28:07:d5:d7:21:db:b5:ac:65:8d:59:81:e5: 91:65:ce:31:e0:bc:4c:11:1e:72:bb:7c:a2:02:0f:c5:02:11: de:54:7c:3d:62:d8:a3:0c:59:54:32:53:06:0c:29:44:c4:02: 6f:78:01:b4:12:22:09:53:d4:9e:69:f3:c8:11:c6:93:6a:e2: f1:a4:a2:99:d5:da:a2:af:83:94:08:49:ac:1e:f7:76:77:17: 00:0f:8c:66:6e:8a:26:d4:49:7e:09:f1:c0:78:40:24:b0:76: 10:57:52:8d:7e:c8:e7:b9:9c:c8:b8:e1:f9:cf:ea:4c:d2:99: 2c:0f:2d:b6:e2:d9:3b:ce:ae:b8:61:4e:fc:05:bc:d0:ea:97: ef:ad:ea:19:a0:39:87:0c:04:0a:25:3f:51:52:d4:60:df:4d: 3e:97:a3:cc:83:f8:37:31:a7:67:74:91:99:05:a5:b4:d7:18: c4:09:08:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeBcnablGniZvyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzI2Yzg2MGItZjhjNy00M2FlLWE1Y2EtYzM3MjQyYjRmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl17KajtceV2eJPvGr1fqi+jpq0k81UD6uXwO /DpA3N2gDhgRghMCECHCkBLgRSHBo7cMJCMvTEn7Mq7ufQFCDwjaYODmVZ2h/EVB 7fKYxIftVoCP4DSfLo7fvBlYbAL+PKo8UmawmVmobcsyMdVevc47rM/77kepG8wk 0dvSqvcLEzegMuE9t4JhHLspOLki5v66ecn0NgmcPNrO9EA1wMfvixAmdV03vxPY MuFz6vY/eRVLXP/UvhIkkIH1bNpjHc99XD4FDc8at739BGq4Ec9lNip1mlp8JqLe cyPk7ioGveXb1W8aKxYHUkLp0t3XffYSxYBQhvqnX9UR2qUfZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFArFxSuh7ju4bXYdKIq8KHpJGnNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhYzhkZjctNzgxYi0z OTQyLWE4ZjYtNDFlNjhlYTQzOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAEwe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPIqc1xkWlJ/hczBb6plfBYbmhNS1dIUUSfJ5rQ4hxyjxJnVVMj mJjpFwcTbf9w9MKDnajWsKe1LLiDefc4ggiDuYUEsJwQtl3qqgfFKAfV1yHbtaxl jVmB5ZFlzjHgvEwRHnK7fKICD8UCEd5UfD1i2KMMWVQyUwYMKUTEAm94AbQSIglT 1J5p88gRxpNq4vGkopnV2qKvg5QISawe93Z3FwAPjGZuiibUSX4J8cB4QCSwdhBX Uo1+yOe5nMi44fnP6kzSmSwPLbbi2TvOrrhhTvwFvNDql++t6hmgOYcMBAolP1FS 1GDfTT6Xo8yD+Dcxp2d0kZkFpbTXGMQJCDM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:48:54 2026 by rpki-client