$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b690464-e42b-35b7-9fef-f04504565a35.roa File: 2b690464-e42b-35b7-9fef-f04504565a35.roa (raw, json) Hash identifier: iPjeebnAkrkb5rXBpeARurX94GS/jlGISU1tBKNoiZc= Subject key identifier: C1:CB:FB:FC:EF:7F:4A:6F:4E:10:96:63:06:60:8F:05:AB:66:D8:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42781A8927F4FE4842048CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b690464-e42b-35b7-9fef-f04504565a35.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:4c1c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1a:89:27:f4:fe:48:42:04:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=408aee72-8da1-4282-8d27-2be4d46df92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:8b:ac:4b:9e:bc:52:19:8a:65:91:e7:26: 81:a5:04:ef:8d:f5:39:35:24:fb:55:4a:bd:0c:ab: dc:ca:b7:d7:32:4c:be:2b:f3:dd:90:81:83:8c:86: a7:ca:a3:6d:d9:25:f6:b0:3b:e1:52:71:f9:1c:8a: 42:88:45:68:54:86:8a:93:46:1c:d4:3f:a4:ef:44: 94:59:ad:3a:f3:6b:e1:41:e8:9d:88:1c:de:d1:e6: 40:e6:de:a6:99:9b:89:b2:4a:c4:56:f0:67:02:03: 2c:c4:05:03:1c:b8:7a:8a:64:f1:76:82:9b:29:0f: 9e:86:75:df:af:e4:dc:81:3a:ca:5b:78:c7:80:ad: 39:15:1e:7b:d9:e0:1d:d8:dc:9c:42:f7:fd:8a:ae: 38:9f:05:91:99:28:fd:f4:05:03:96:6b:59:54:93: 2b:2e:06:1d:53:15:bc:e4:b1:90:a3:df:cf:0e:dd: a9:6f:6b:17:4b:1e:3f:58:87:9f:82:05:46:0d:a5: b2:d6:8f:42:83:71:ea:45:65:0d:06:7d:ac:64:a9: e4:f7:e2:e2:18:4c:c5:df:31:c4:96:5d:e3:05:dc: aa:59:47:ac:81:d2:b5:01:5d:2f:5c:f5:1a:73:bd: 35:fa:b5:31:5f:6d:c1:13:91:81:a2:b5:6e:9c:16: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CB:FB:FC:EF:7F:4A:6F:4E:10:96:63:06:60:8F:05:AB:66:D8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b690464-e42b-35b7-9fef-f04504565a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:4c1c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b3:8d:b8:82:f9:95:e5:51:48:bd:ce:bf:87:15:5a:93:d0: 9d:b5:61:59:65:49:0b:a9:c3:f6:b9:98:31:41:53:49:d9:8a: 6c:7b:45:05:82:2b:f3:34:ca:d9:f5:1c:28:32:5d:5c:97:c0: 67:aa:8c:6e:82:36:80:55:35:08:af:7c:6d:c2:cb:b1:d1:f9: d7:07:60:cb:fb:ca:a9:e3:cc:d7:79:61:72:32:bd:94:8d:ac: 5f:4b:2e:b4:3e:71:2a:31:81:45:1e:40:c0:09:2b:fa:30:a6: 84:7b:68:2b:b6:84:ca:59:7a:27:a9:c1:66:ab:67:7c:45:bc: 9d:2e:26:e9:92:92:25:04:8d:0f:48:7a:ed:54:f3:77:86:bd: 56:de:1a:4e:6f:af:27:66:c9:7e:0c:b8:58:62:41:68:20:6a: a7:f0:06:5e:49:c5:4f:55:2e:ca:10:15:24:8e:32:17:84:70: e5:00:07:82:57:59:15:33:38:71:7d:c6:66:23:68:fa:79:71: 29:a8:23:22:f4:21:8e:45:14:c1:43:06:4c:e4:fa:28:ec:aa: 24:76:7a:66:51:df:11:45:da:9d:cc:7c:b1:d6:49:d5:97:9f: 5f:de:e8:76:cf:86:fb:61:db:62:d7:8b:11:d6:1c:67:f2:23: 6d:ae:eb:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeBqJJ/T+SEIEjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NDA4YWVlNzItOGRhMS00MjgyLThkMjctMmJlNGQ0NmRmOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaCLrEuevFIZimWR5yaBpQTvjfU5NST7VUq9 DKvcyrfXMky+K/PdkIGDjIanyqNt2SX2sDvhUnH5HIpCiEVoVIaKk0Yc1D+k70SU Wa0682vhQeidiBze0eZA5t6mmZuJskrEVvBnAgMsxAUDHLh6imTxdoKbKQ+ehnXf r+TcgTrKW3jHgK05FR572eAd2NycQvf9iq44nwWRmSj99AUDlmtZVJMrLgYdUxW8 5LGQo9/PDt2pb2sXSx4/WIefggVGDaWy1o9Cg3HqRWUNBn2sZKnk9+LiGEzF3zHE ll3jBdyqWUesgdK1AV0vXPUac701+rUxX23BE5GBorVunBaw7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHL+/zvf0pvThCWYwZgjwWrZtgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI2OTA0NjQtZTQyYi0z NWI3LTlmZWYtZjA0NTA0NTY1YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAEwc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqzjbiC+ZXlUUi9zr+HFVqT0J21YVllSQupw/a5mDFBU0nZimx7 RQWCK/M0ytn1HCgyXVyXwGeqjG6CNoBVNQivfG3Cy7HR+dcHYMv7yqnjzNd5YXIy vZSNrF9LLrQ+cSoxgUUeQMAJK/owpoR7aCu2hMpZeiepwWarZ3xFvJ0uJumSkiUE jQ9Ieu1U83eGvVbeGk5vrydmyX4MuFhiQWggaqfwBl5JxU9VLsoQFSSOMheEcOUA B4JXWRUzOHF9xmYjaPp5cSmoIyL0IY5FFMFDBkzk+ijsqiR2emZR3xFF2p3MfLHW SdWXn1/e6HbPhvth22LXixHWHGfyI22u67g= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:35 2026 by rpki-client