$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa File: 3653b307-8185-36eb-9a52-099880bc71b7.roa (raw, json) Hash identifier: z1CL9A/xA9mHhemCdkkFCTJx+LebVZ/S9SQaiD81kX8= Subject key identifier: BB:2A:2B:59:0A:B0:80:C9:C4:08:90:29:E7:36:DD:ED:34:C6:50:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42780293CD4409851F55DAE4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:8680::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:02:93:cd:44:09:85:1f:55:da:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=af4974c3-d982-47dc-bbf9-4a685e1a3fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:42:a4:c9:29:c0:c3:57:94:70:2f:d4:06: a6:bc:8b:4b:63:83:e9:c4:65:d5:73:46:57:bc:0a: c3:20:1b:27:89:0b:74:7c:7e:2d:3d:12:6c:2c:5d: 3a:0e:ce:c8:a9:09:2e:98:1a:90:c0:83:22:8d:f1: ee:64:29:c0:18:15:88:f9:2b:32:dc:a3:bf:02:3b: 65:5a:ac:ae:9b:bb:4b:8a:93:db:b6:27:bd:9b:08: 47:65:08:60:cc:53:85:45:bb:21:f1:5e:e4:03:5c: 29:d5:b3:39:70:cf:13:17:00:69:83:a9:c9:42:60: 2e:b5:34:2a:ac:e7:e9:3b:15:b1:73:97:fd:a1:96: 6d:8f:af:7e:77:b4:61:8a:7f:71:a8:5d:06:8e:c0: 71:8a:b2:7e:55:51:54:6d:9c:c8:2b:b0:f3:55:e4: 97:4c:62:27:6b:ee:b3:7e:85:08:97:52:f0:1d:7d: 6f:08:3f:44:2d:af:22:f5:0e:66:42:bf:74:9b:7b: f6:2d:7b:54:ba:e4:ac:f5:98:15:22:33:52:a3:80: 51:5e:b7:d9:9f:1e:df:ca:99:1b:0c:c6:22:f3:44: f8:d4:93:56:ad:47:88:f2:b5:67:ba:da:fe:f3:fe: bd:d5:19:49:c7:a9:a4:f6:5f:19:49:41:96:07:17: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2A:2B:59:0A:B0:80:C9:C4:08:90:29:E7:36:DD:ED:34:C6:50:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3653b307-8185-36eb-9a52-099880bc71b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8680::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b8:0e:bb:e9:3d:e8:29:d9:e3:f9:1d:67:27:e9:e1:ac:dc: 73:a6:31:d5:c9:22:0b:82:0a:99:fd:a2:18:62:90:ac:37:de: ea:20:35:aa:86:fb:be:0d:32:a1:e1:9d:27:b9:6c:96:7b:b2: b7:57:01:e6:c1:e6:50:7b:ad:3a:ad:0a:11:00:21:e7:68:89: f0:a1:37:e1:98:be:fe:65:59:6e:ca:28:c5:9b:23:13:fa:89: 99:d8:4d:09:5e:22:58:ab:e6:fd:44:6f:0f:41:c8:94:56:1c: ff:fe:6a:76:a8:79:5c:c8:5f:e0:8b:64:ba:79:76:b7:1c:2a: 9e:66:91:9a:1c:ab:3a:4e:ea:7c:26:8e:10:a5:35:66:87:d7: 57:ad:e0:0b:7a:ce:52:f1:40:36:6e:a3:44:f5:1a:5d:d5:37: 64:65:90:7b:72:11:2c:e1:77:fb:66:07:5f:73:49:40:05:4b: 57:44:c0:aa:cb:57:a7:ae:66:21:53:da:93:72:78:4b:f3:69: eb:55:cd:93:f2:18:6b:df:7f:f6:08:4c:dd:7b:09:4f:8c:3d: 27:fd:e3:23:27:ff:5d:25:f0:53:80:e2:dc:63:40:e3:8c:76: 20:b3:18:c8:6a:85:20:2c:6b:ba:ac:94:94:86:ac:6d:d0:c0: 1b:0a:de:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeAKTzUQJhR9V2uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YWY0OTc0YzMtZDk4Mi00N2RjLWJiZjktNGE2ODVlMWEzZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkypCpMkpwMNXlHAv1AamvItLY4PpxGXVc0ZX vArDIBsniQt0fH4tPRJsLF06Ds7IqQkumBqQwIMijfHuZCnAGBWI+Ssy3KO/Ajtl Wqyum7tLipPbtie9mwhHZQhgzFOFRbsh8V7kA1wp1bM5cM8TFwBpg6nJQmAutTQq rOfpOxWxc5f9oZZtj69+d7Rhin9xqF0GjsBxirJ+VVFUbZzIK7DzVeSXTGIna+6z foUIl1LwHX1vCD9ELa8i9Q5mQr90m3v2LXtUuuSs9ZgVIjNSo4BRXrfZnx7fypkb DMYi80T41JNWrUeI8rVnutr+8/691RlJx6mk9l8ZSUGWBxfk8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsqK1kKsIDJxAiQKec23e00xlDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY1M2IzMDctODE4NS0z NmViLTlhNTItMDk5ODgwYmM3MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJi4DrvpPegp2eP5HWcn6eGs3HOmMdXJIguCCpn9ohhikKw33uog NaqG+74NMqHhnSe5bJZ7srdXAebB5lB7rTqtChEAIedoifChN+GYvv5lWW7KKMWb IxP6iZnYTQleIlir5v1Ebw9ByJRWHP/+anaoeVzIX+CLZLp5drccKp5mkZocqzpO 6nwmjhClNWaH11et4At6zlLxQDZuo0T1Gl3VN2RlkHtyESzhd/tmB19zSUAFS1dE wKrLV6euZiFT2pNyeEvzaetVzZPyGGvff/YITN17CU+MPSf94yMn/10l8FOA4txj QOOMdiCzGMhqhSAsa7qslJSGrG3QwBsK3vM= -----END CERTIFICATE-----Generated at Wed Sep 23 11:00:22 2026 by rpki-client