$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38cfe4f5-8152-3610-add2-e705dd32e9c6.roa File: 38cfe4f5-8152-3610-add2-e705dd32e9c6.roa (raw, json) Hash identifier: ElcmnIKuzx7IvAxw0TpJuQsPG1ao9Q1aDfZAmX5gs2w= Subject key identifier: 95:05:D1:52:87:D4:4D:F0:AB:E9:8A:2B:57:64:3A:13:B5:4D:54:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42780FB9BD0D540355C54280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38cfe4f5-8152-3610-add2-e705dd32e9c6.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:86a0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:0f:b9:bd:0d:54:03:55:c5:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=139ed355-71d1-4142-8cfc-9b334ac106a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:a5:74:bb:29:94:aa:d9:1f:2a:97:45:08: 8c:60:21:14:3a:09:d0:c1:36:4c:53:4e:76:0d:ca: 40:76:51:e6:37:a0:56:ce:73:e3:b8:92:56:8e:94: df:c9:64:99:f8:9b:fd:a8:82:89:5f:f2:55:b9:2d: 02:08:39:8f:11:d2:f0:57:0e:35:db:8c:9a:76:b3: 90:a2:1f:bb:24:10:7b:b2:1f:58:6e:cc:17:e5:af: c2:d7:55:0c:aa:ca:65:98:39:9c:93:72:36:ca:f2: 0c:25:6b:35:1f:45:d7:3c:3e:4d:f7:9e:4e:04:45: b6:23:b8:e3:df:8d:02:53:b5:a7:90:31:7d:b5:7e: c0:61:50:2d:09:fe:77:f8:5d:e4:75:1f:16:6f:45: 3b:b0:d7:9f:97:82:35:06:b7:c2:6a:cd:28:8a:de: ec:d5:46:90:73:57:32:6c:ea:55:10:e6:e8:6d:68: d8:5f:eb:ba:cf:4e:21:59:f4:ef:e1:db:dc:0e:14: 35:65:29:28:21:81:bd:2c:f0:08:a8:cc:17:f9:7f: e8:97:98:20:7b:7b:b0:82:e8:de:fb:bc:11:14:f2: aa:15:bc:4d:fd:94:5c:f3:26:54:5e:69:24:d6:ce: 11:9c:65:86:e2:90:17:d2:45:81:58:87:aa:93:87: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:D1:52:87:D4:4D:F0:AB:E9:8A:2B:57:64:3A:13:B5:4D:54:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38cfe4f5-8152-3610-add2-e705dd32e9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:86a0::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:67:c4:5b:92:f0:6b:73:6d:a0:9c:06:46:6f:fa:5a:ce:42: f6:6d:17:be:51:6c:55:4b:8f:13:14:8c:c9:3b:a9:59:56:64: 0c:18:22:f5:ae:da:ec:a5:f0:02:15:41:d6:4d:89:34:05:31: 03:dc:a8:99:cc:d6:44:5e:6f:de:2c:1b:05:a9:97:e9:b7:c3: a2:54:f1:fd:64:c4:a4:2a:1d:53:45:56:4b:ba:9f:4a:1f:a8: 22:4c:1a:4c:ca:a9:c5:34:c1:bb:68:01:bd:be:c6:16:8d:5d: 8a:bf:07:24:47:19:e0:b3:33:44:b5:b3:67:5f:95:fa:9a:9b: 8f:b2:11:cd:53:2e:7b:68:3a:17:8f:46:38:e7:2e:e3:3b:8b: 9e:34:27:ce:3a:e6:e7:22:05:79:09:2b:db:84:cb:e6:c0:a6: a5:33:97:d6:d7:2a:66:0a:d4:02:44:f2:5c:d2:c4:9a:88:36: 86:ae:ed:2a:7c:c5:f4:00:80:3a:9b:f8:e7:f4:77:4e:f4:a9: 97:8d:82:e6:44:95:96:9b:85:d9:29:ae:78:5a:9a:5a:79:1c: c0:de:a3:19:fa:63:ab:d6:76:10:22:13:bd:8b:77:52:99:dd: b2:8a:ce:6e:a1:71:e0:90:06:61:fb:7a:0e:8d:93:77:db:f9: 13:71:6c:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeA+5vQ1UA1XFQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTM5ZWQzNTUtNzFkMS00MTQyLThjZmMtOWIzMzRhYzEwNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3CldLsplKrZHyqXRQiMYCEUOgnQwTZMU052 DcpAdlHmN6BWznPjuJJWjpTfyWSZ+Jv9qIKJX/JVuS0CCDmPEdLwVw4124yadrOQ oh+7JBB7sh9YbswX5a/C11UMqsplmDmck3I2yvIMJWs1H0XXPD5N955OBEW2I7jj 340CU7WnkDF9tX7AYVAtCf53+F3kdR8Wb0U7sNefl4I1BrfCas0oit7s1UaQc1cy bOpVEObobWjYX+u6z04hWfTv4dvcDhQ1ZSkoIYG9LPAIqMwX+X/ol5gge3uwguje +7wRFPKqFbxN/ZRc8yZUXmkk1s4RnGWG4pAX0kWBWIeqk4eFewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJUF0VKH1E3wq+mKK1dkOhO1TVQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhjZmU0ZjUtODE1Mi0z NjEwLWFkZDItZTcwNWRkMzJlOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIag MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVnxFuS8GtzbaCcBkZv+lrOQvZtF75RbFVLjxMUjMk7qVlWZAwY IvWu2uyl8AIVQdZNiTQFMQPcqJnM1kReb94sGwWpl+m3w6JU8f1kxKQqHVNFVku6 n0ofqCJMGkzKqcU0wbtoAb2+xhaNXYq/ByRHGeCzM0S1s2dflfqam4+yEc1TLnto OhePRjjnLuM7i540J8465uciBXkJK9uEy+bApqUzl9bXKmYK1AJE8lzSxJqINoau 7Sp8xfQAgDqb+Of0d070qZeNguZElZabhdkprnhamlp5HMDeoxn6Y6vWdhAiE72L d1KZ3bKKzm6hceCQBmH7eg6Nk3fb+RNxbDo= -----END CERTIFICATE-----Generated at Wed Sep 23 05:56:34 2026 by rpki-client