$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dddb47e-427f-3cda-9ca6-1b16372eee39.roa File: 2dddb47e-427f-3cda-9ca6-1b16372eee39.roa (raw, json) Hash identifier: eA4H4W5KKrXqxC0O58sfR4u31tmj1OfwEYFxciT8UkE= Subject key identifier: C9:F5:B2:59:39:64:02:29:2A:46:62:5F:58:F6:4D:D5:61:DB:63:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278468A924DFF5A979D7500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dddb47e-427f-3cda-9ca6-1b16372eee39.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2001:578:8ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:46:8a:92:4d:ff:5a:97:9d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=0bfc928d-ab50-4a37-82fd-d3652d5a48e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:d0:d6:34:5f:86:62:e4:37:eb:f9:9d:c6: dc:03:be:0e:27:62:84:26:b9:67:c5:6a:77:11:61: 04:3e:6a:64:94:ec:15:0c:f3:c4:a1:c0:db:5a:3d: b8:c8:b7:fa:32:e6:7d:ed:6b:0f:7f:8d:5f:d4:47: 11:a0:62:80:73:f1:90:f8:c0:37:ac:b1:dc:21:09: c6:98:16:28:6e:53:58:1b:6b:37:5c:4d:75:da:db: 8a:e8:13:01:30:62:72:97:55:e4:56:e9:68:36:78: 62:f2:fa:bb:00:c3:fc:fa:ef:6d:54:58:0d:28:8e: 89:76:60:eb:98:01:6f:db:d4:7c:4a:ef:ca:79:2b: bb:54:9b:b3:e4:00:40:6a:02:2f:a8:a4:eb:c5:0f: 31:e4:45:e9:7f:ea:44:86:b1:8e:dd:56:4a:7c:30: ef:eb:71:59:50:77:5e:03:fb:a8:13:f2:54:a7:05: 37:3a:c7:2c:22:9a:99:ee:27:00:26:09:93:85:3b: a6:bb:fa:4c:5c:ff:17:a0:4f:b2:d1:47:c7:c2:57: 9b:ba:df:23:61:26:07:d6:09:e6:c5:dc:6b:6f:cd: 17:40:ce:53:30:08:da:bd:00:3b:20:bf:bb:75:b6: 68:c4:9d:c4:fd:cf:cb:a2:98:99:c4:c2:ba:b4:8b: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:B2:59:39:64:02:29:2A:46:62:5F:58:F6:4D:D5:61:DB:63:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dddb47e-427f-3cda-9ca6-1b16372eee39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:91:85:37:79:fc:f1:23:98:62:89:4a:b8:6b:37:21:e4:0a: 0f:bc:b6:d5:9b:9d:0e:87:1d:f5:14:38:7b:4f:11:b8:43:89: 04:f7:2f:e5:1c:3c:21:19:70:15:ff:d8:bf:0f:44:d9:32:7f: 89:a7:0a:bd:fa:5f:3d:5a:8c:c7:df:9a:59:89:17:75:51:8a: df:02:a4:a1:05:5f:bb:21:51:56:c3:8c:85:a3:05:37:fc:a2: 28:11:ab:21:93:b4:6a:01:d6:0d:8b:1e:64:85:e9:5b:94:f8: 2e:4d:2d:4c:77:4d:05:9c:64:c1:89:90:9f:c7:06:4d:38:b0: 30:ee:3f:54:51:0b:3f:32:d9:b8:c5:98:1c:e0:5b:c6:b1:11: 54:94:cb:98:65:76:b8:49:c5:18:83:df:02:26:ce:fc:b4:31: 06:c2:39:6f:5c:d7:da:d1:95:eb:20:6e:3b:57:e0:db:ae:7c: a1:a8:eb:42:55:6e:fe:3d:84:21:8f:06:dc:4f:64:03:eb:ca: 3d:4a:c1:60:6a:58:cb:55:d4:25:95:1e:13:03:3b:64:1f:a1: 2c:72:5d:35:25:6f:cd:fa:87:a6:45:65:de:bc:22:f4:77:cb: 88:ff:74:e7:69:6a:2e:22:a1:64:6d:74:8e:e4:be:e1:28:f6: 2d:ae:7c:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeEaKkk3/WpeddQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MGJmYzkyOGQtYWI1MC00YTM3LTgyZmQtZDM2NTJkNWE0OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQHQ1jRfhmLkN+v5ncbcA74OJ2KEJrlnxWp3 EWEEPmpklOwVDPPEocDbWj24yLf6MuZ97WsPf41f1EcRoGKAc/GQ+MA3rLHcIQnG mBYoblNYG2s3XE112tuK6BMBMGJyl1XkVuloNnhi8vq7AMP8+u9tVFgNKI6JdmDr mAFv29R8Su/KeSu7VJuz5ABAagIvqKTrxQ8x5EXpf+pEhrGO3VZKfDDv63FZUHde A/uoE/JUpwU3OscsIpqZ7icAJgmThTumu/pMXP8XoE+y0UfHwlebut8jYSYH1gnm xdxrb80XQM5TMAjavQA7IL+7dbZoxJ3E/c/LopiZxMK6tIuhuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMn1slk5ZAIpKkZiX1j2TdVh22OYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRkZGI0N2UtNDI3Zi0z Y2RhLTljYTYtMWIxNjM3MmVlZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAis MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2RhTd5/PEjmGKJSrhrNyHkCg+8ttWbnQ6HHfUUOHtPEbhDiQT3 L+UcPCEZcBX/2L8PRNkyf4mnCr36Xz1ajMffmlmJF3VRit8CpKEFX7shUVbDjIWj BTf8oigRqyGTtGoB1g2LHmSF6VuU+C5NLUx3TQWcZMGJkJ/HBk04sDDuP1RRCz8y 2bjFmBzgW8axEVSUy5hldrhJxRiD3wImzvy0MQbCOW9c19rRlesgbjtX4NuufKGo 60JVbv49hCGPBtxPZAPryj1KwWBqWMtV1CWVHhMDO2QfoSxyXTUlb836h6ZFZd68 IvR3y4j/dOdpai4ioWRtdI7kvuEo9i2ufNQ= -----END CERTIFICATE-----Generated at Wed Sep 23 05:57:03 2026 by rpki-client