$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3841637e-8659-3645-a235-d1d1475f1be2.roa File: 3841637e-8659-3645-a235-d1d1475f1be2.roa (raw, json) Hash identifier: zAPS8cWieMZpMGgBm72x0hUI91aYOkM6MF1qIZaJtHY= Subject key identifier: DE:F4:3F:7D:C9:5D:1A:35:57:29:9F:85:86:FA:8C:CF:E2:AB:5A:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD06AA89101389669C8DC40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3841637e-8659-3645-a235-d1d1475f1be2.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 2600:8800:3ec2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:6a:a8:91:01:38:96:69:c8:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=e5ea6339-ccf6-45b5-9e26-c96fc607b5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:af:97:18:54:68:f2:88:84:bb:07:d8:46: d7:98:1d:44:74:bd:af:2c:d2:69:a5:dd:e9:c1:a9: 26:38:37:ef:36:ea:4a:f3:c2:9c:a5:96:4c:38:2d: 4d:75:aa:08:fd:17:23:73:bb:63:43:2e:f7:df:9c: e2:89:df:d6:98:14:af:0b:2e:de:34:83:6f:d8:42: e2:c1:8e:81:6b:d7:10:1d:fb:e8:fa:bb:de:ab:e4: 26:7b:97:31:45:e1:cc:3e:2b:3d:ab:97:85:9a:81: 34:37:97:df:21:51:e3:29:3f:c1:e3:fb:db:07:f2: 27:0d:86:7e:91:61:11:11:d5:e5:2b:94:e5:75:8f: 45:17:85:28:0a:b7:4c:6d:fb:52:68:35:fc:6c:77: 7a:e8:71:b3:f0:13:26:68:e4:85:ea:4e:93:1e:5e: 42:e5:11:02:8e:cf:19:50:fc:df:d6:24:e2:31:ed: 63:f8:ac:ca:d8:c4:c8:96:a5:72:9d:ad:4c:a4:90: e7:74:57:62:c5:08:26:12:f7:a2:73:d6:f7:3f:3a: 0b:d9:69:3c:67:30:95:2c:54:13:60:50:d1:fd:c1: 87:00:cf:c5:9a:65:cd:37:9e:9a:03:7b:90:6a:48: d8:c9:6b:e8:9b:ba:6d:ec:06:e5:48:67:5f:3d:6d: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F4:3F:7D:C9:5D:1A:35:57:29:9F:85:86:FA:8C:CF:E2:AB:5A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3841637e-8659-3645-a235-d1d1475f1be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3ec2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:65:84:24:f4:73:a6:f3:49:80:00:58:67:65:86:b1:5a:1a: 43:7b:9b:6b:74:88:85:2d:73:a1:a4:3b:9f:86:c1:90:51:85: 6e:4a:11:3a:28:2a:bb:a2:15:fb:1a:dc:a2:08:42:8d:69:15: 7e:46:1c:2f:50:e5:e5:a1:4a:3e:a9:ee:43:65:ad:0b:fc:d9: a4:38:43:38:51:1e:e3:dc:1e:ae:53:4f:b1:8e:32:a7:8c:5f: c1:23:18:ec:23:21:d7:48:9c:c0:ae:c8:91:b5:e1:f8:44:4b: d7:d4:f1:8b:a4:34:5a:6b:6d:9c:4b:64:01:00:6d:95:42:c3: 7c:72:22:ce:c8:a3:00:0e:dd:ed:09:85:2d:d4:08:97:bb:a0: 4e:67:ef:4d:ea:1d:88:3d:8a:d3:4b:dc:ea:a4:bf:a3:12:ea: 8c:16:98:32:2b:2d:fc:a8:f2:25:56:3f:02:6a:5b:aa:29:50: 52:cf:b1:56:8e:99:5d:ed:75:5f:4e:3a:71:a8:d3:e2:98:06: eb:45:b5:29:78:e4:95:9d:e6:66:39:5d:55:48:49:b9:d5:65: f6:a3:c3:42:cd:dc:4d:19:a7:93:ac:4b:82:35:45:56:28:11: ed:4f:39:62:ab:f6:6b:0b:83:ad:12:78:48:98:ed:80:b5:ad: 6a:c1:53:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0GqokQE4lmnI3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZTVlYTYzMzktY2NmNi00NWI1LTllMjYtYzk2ZmM2MDdiNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj+vlxhUaPKIhLsH2EbXmB1EdL2vLNJppd3p wakmODfvNupK88KcpZZMOC1NdaoI/Rcjc7tjQy7335ziid/WmBSvCy7eNINv2ELi wY6Ba9cQHfvo+rveq+Qme5cxReHMPis9q5eFmoE0N5ffIVHjKT/B4/vbB/InDYZ+ kWEREdXlK5TldY9FF4UoCrdMbftSaDX8bHd66HGz8BMmaOSF6k6THl5C5RECjs8Z UPzf1iTiMe1j+KzK2MTIlqVyna1MpJDndFdixQgmEveic9b3PzoL2Wk8ZzCVLFQT YFDR/cGHAM/FmmXNN56aA3uQakjYyWvom7pt7AblSGdfPW1BvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN70P33JXRo1VymfhYb6jM/iq1r6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg0MTYzN2UtODY1OS0z NjQ1LWEyMzUtZDFkMTQ3NWYxYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD7C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJlhCT0c6bzSYAAWGdlhrFaGkN7m2t0iIUtc6GkO5+GwZBRhW5K ETooKruiFfsa3KIIQo1pFX5GHC9Q5eWhSj6p7kNlrQv82aQ4QzhRHuPcHq5TT7GO MqeMX8EjGOwjIddInMCuyJG14fhES9fU8YukNFprbZxLZAEAbZVCw3xyIs7IowAO 3e0JhS3UCJe7oE5n703qHYg9itNL3Oqkv6MS6owWmDIrLfyo8iVWPwJqW6opUFLP sVaOmV3tdV9OOnGo0+KYButFtSl45JWd5mY5XVVISbnVZfajw0LN3E0Zp5OsS4I1 RVYoEe1POWKr9msLg60SeEiY7YC1rWrBU9E= -----END CERTIFICATE-----Generated at Wed May 13 09:52:57 2026 by rpki-client