$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa File: 2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa (raw, json) Hash identifier: cON2Iud0bV7IhCOgYzGdTzKoe97Mti2rhwwenbWd1mY= Subject key identifier: 41:10:4A:10:02:9A:69:02:B6:94:3E:DD:6C:1D:84:B0:BA:CE:83:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42785A37C973C9EB8A418580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:7fa0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:5a:37:c9:73:c9:eb:8a:41:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b2786e27-f3d4-4e63-a7f9-812bafa1c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:27:17:a9:be:e9:85:fe:5a:11:6e:1e:0d: 25:97:fe:ec:74:d5:f4:b2:86:55:26:d8:f1:23:02: d4:df:bc:38:ef:40:82:a7:2d:92:91:7d:f6:3f:c6: d0:c2:47:49:30:8f:ea:ed:a0:26:a4:04:58:98:c0: 11:95:e0:43:2e:24:bc:10:f1:fa:6d:0c:9c:01:82: 2a:06:af:48:f7:ea:1f:69:a0:41:d2:77:f8:f4:c3: 88:da:8f:8b:ea:bf:a8:31:3c:69:9e:39:28:11:1e: a4:33:3f:2d:f0:d8:34:ca:38:3b:75:84:53:6c:28: cb:3c:3b:35:54:84:69:ce:6e:3c:b9:a2:1b:76:97: df:74:d6:c6:c5:b1:66:94:9b:de:d3:95:e8:ca:21: 90:e6:95:e8:58:4d:b2:58:70:97:f3:82:b9:36:5f: 86:52:c5:53:2c:cc:76:0c:6a:c3:86:de:db:8d:e6: 5b:aa:a7:ac:8d:55:f3:51:e5:8e:3d:a8:7c:1f:25: ba:91:83:fd:4f:24:32:1c:59:d3:5b:6c:70:b9:0d: 26:38:81:23:76:10:fd:05:71:45:6d:eb:b7:95:a1: 13:88:d0:5e:b5:0c:94:b7:96:e7:20:84:dd:52:c8: 43:f5:ed:5e:e8:ed:e9:56:f6:a2:ad:68:ae:22:a3: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:4A:10:02:9A:69:02:B6:94:3E:DD:6C:1D:84:B0:BA:CE:83:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d2cec1e-d9ce-3c15-863e-5a7d50307a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7fa0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ac:b7:57:36:6d:d4:10:76:bd:a9:46:91:c5:6d:4d:40:77: b9:67:87:d9:0a:a0:1e:24:4c:be:75:c3:28:5c:ce:90:59:d9: e2:a6:85:a3:01:34:b7:a7:74:0a:33:6a:62:14:00:b0:60:32: 84:4d:9e:b2:c5:93:39:f1:5b:da:9f:19:78:7a:8c:cc:97:be: ba:c2:30:1e:bb:3f:9a:b9:1f:bb:60:4b:8a:60:58:a1:4b:64: 45:88:03:68:8c:68:51:32:59:a3:c9:f9:16:50:33:53:a6:1d: cb:7f:9a:ac:c3:63:1d:25:47:d9:97:f5:74:40:f5:74:18:f4: 7f:3f:3b:37:b4:16:68:54:9a:6c:2c:c8:86:0a:27:b9:62:c6: 2a:dd:df:47:1b:78:68:73:38:00:55:a1:92:bc:1d:3b:85:7b: 84:62:ec:b1:47:1b:13:fd:57:00:15:94:2a:73:1e:c1:ef:32: d3:88:02:c1:3d:67:fa:fc:25:bd:8f:91:7f:f5:a8:dd:b4:e6: 90:a1:ce:86:86:29:87:a6:a6:ba:f7:67:b0:dc:cb:0c:5b:ed: e8:6e:78:6b:6d:20:15:b9:27:21:a2:0f:61:13:56:0d:82:35: 53:dc:21:56:1d:f9:7c:05:d4:35:3a:ee:e0:51:11:9f:e1:1c: 74:69:62:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeFo3yXPJ64pBhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YjI3ODZlMjctZjNkNC00ZTYzLWE3ZjktODEyYmFmYTFjODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWAnF6m+6YX+WhFuHg0ll/7sdNX0soZVJtjx IwLU37w470CCpy2SkX32P8bQwkdJMI/q7aAmpARYmMARleBDLiS8EPH6bQycAYIq Bq9I9+ofaaBB0nf49MOI2o+L6r+oMTxpnjkoER6kMz8t8Ng0yjg7dYRTbCjLPDs1 VIRpzm48uaIbdpffdNbGxbFmlJve05XoyiGQ5pXoWE2yWHCX84K5Nl+GUsVTLMx2 DGrDht7bjeZbqqesjVXzUeWOPah8HyW6kYP9TyQyHFnTW2xwuQ0mOIEjdhD9BXFF beu3laETiNBetQyUt5bnIITdUshD9e1e6O3pVvairWiuIqNMfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEQShACmmkCtpQ+3WwdhLC6zoN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQyY2VjMWUtZDljZS0z YzE1LTg2M2UtNWE3ZDUwMzA3YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAH+g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWst1c2bdQQdr2pRpHFbU1Ad7lnh9kKoB4kTL51wyhczpBZ2eKm haMBNLendAozamIUALBgMoRNnrLFkznxW9qfGXh6jMyXvrrCMB67P5q5H7tgS4pg WKFLZEWIA2iMaFEyWaPJ+RZQM1OmHct/mqzDYx0lR9mX9XRA9XQY9H8/Oze0FmhU mmwsyIYKJ7lixird30cbeGhzOABVoZK8HTuFe4Ri7LFHGxP9VwAVlCpzHsHvMtOI AsE9Z/r8Jb2PkX/1qN205pChzoaGKYemprr3Z7Dcywxb7ehueGttIBW5JyGiD2ET Vg2CNVPcIVYd+XwF1DU67uBREZ/hHHRpYqw= -----END CERTIFICATE-----Generated at Thu Sep 24 18:59:53 2026 by rpki-client