$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fe8866-dbce-3cfa-8d60-4e3ed8973a50.roa File: 39fe8866-dbce-3cfa-8d60-4e3ed8973a50.roa (raw, json) Hash identifier: D0LkhU1ZFetaVjCHuq9Xubm0iaL39p4egel9P2Awh/U= Subject key identifier: ED:FE:4F:58:6A:67:EC:3E:20:D8:C2:3A:AF:95:E7:14:9E:6D:DC:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782C6F01322D5C84881180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fe8866-dbce-3cfa-8d60-4e3ed8973a50.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2001:579:828c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2c:6f:01:32:2d:5c:84:88:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=87448fbf-4d1e-42ca-bd94-b1c910985ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:63:62:8f:6d:ee:d8:75:da:48:72:28:6f:b0: e8:b7:21:2d:b8:e0:f7:d7:2d:11:a8:0d:4c:7e:4a: 56:c5:dd:58:fe:4c:dd:5f:bd:91:1b:5f:82:2d:ab: 5e:19:aa:ee:89:e8:12:11:d7:68:63:67:aa:da:c6: c2:21:de:b6:01:fd:e4:fb:c9:18:4f:8b:7f:2f:56: e2:1a:ec:02:44:83:e1:d2:dc:24:3d:52:e2:18:cd: 4a:85:b9:8a:af:64:59:c8:15:c3:a8:0e:0b:1f:2a: 40:a9:ac:72:59:72:9b:7c:54:27:3d:d2:7d:cd:09: 01:e3:8a:d2:2f:75:19:71:2f:7a:09:da:ef:f1:2d: af:16:15:90:a8:51:a4:93:d4:af:86:90:a6:dc:11: 86:99:1d:92:3c:4e:00:e2:0d:8d:4a:9f:af:15:23: 9f:63:9f:fd:9f:24:60:20:1e:b5:4a:c5:77:c9:22: 07:c5:12:ca:e8:bd:89:1a:c0:f2:a5:76:f0:bd:9e: 7d:46:7e:0f:56:41:a8:77:ae:cb:12:b5:aa:e9:4f: cc:97:a5:3e:1e:38:c6:03:ed:67:03:be:8c:21:c3: bc:d4:22:c9:ca:b4:3c:eb:e7:1b:16:18:e8:3a:8a: 70:fa:71:0d:dd:ea:ae:08:aa:12:37:c7:79:23:5a: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FE:4F:58:6A:67:EC:3E:20:D8:C2:3A:AF:95:E7:14:9E:6D:DC:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fe8866-dbce-3cfa-8d60-4e3ed8973a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:828c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3a:c2:95:37:44:56:e0:47:83:83:cf:d9:bf:a0:8a:ed:78: 9a:f1:2e:9a:96:95:98:b0:a9:09:99:8a:62:f8:8e:05:9e:3a: 05:6b:d3:72:c0:eb:4e:4a:2c:a9:a5:91:66:db:c7:e6:8d:a3: 82:93:91:dd:9f:4e:9d:98:77:d8:02:fd:d7:cc:b9:c8:46:8f: 99:68:06:0d:90:d7:f9:91:26:ef:07:8a:e0:e6:2a:7d:6a:49: 20:99:9e:9b:eb:37:84:eb:cf:ab:be:2e:d3:21:7a:17:d3:1d: c7:92:29:03:2d:7b:16:a4:0e:fd:60:e7:c3:00:d0:d6:20:35: 0d:26:ed:40:1d:7a:a3:7d:04:27:87:55:ba:7b:4e:ab:e8:b1: fc:f2:5a:18:3a:19:0a:18:b2:ac:98:15:c7:58:bd:12:fb:27: 7c:7d:3b:d2:88:92:14:f1:7a:e8:81:91:dd:df:0d:49:8c:d1: 90:bb:55:4b:45:45:30:92:c7:03:bc:5a:d5:05:71:f8:e3:f5: 27:ad:b9:8c:51:80:d8:f5:ed:4e:d7:46:d0:69:a5:1f:1f:e2: 3d:2a:26:20:96:ce:94:b4:40:c6:3a:32:51:a1:db:43:76:e1: 8f:9a:69:a7:fe:f0:0f:d2:ef:df:e1:71:e9:d5:66:3a:0e:40: 77:0a:d9:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeCxvATItXISIEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ODc0NDhmYmYtNGQxZS00MmNhLWJkOTQtYjFjOTEwOTg1Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimNij23u2HXaSHIob7DotyEtuOD31y0RqA1M fkpWxd1Y/kzdX72RG1+CLateGaruiegSEddoY2eq2sbCId62Af3k+8kYT4t/L1bi GuwCRIPh0twkPVLiGM1KhbmKr2RZyBXDqA4LHypAqaxyWXKbfFQnPdJ9zQkB44rS L3UZcS96Cdrv8S2vFhWQqFGkk9SvhpCm3BGGmR2SPE4A4g2NSp+vFSOfY5/9nyRg IB61SsV3ySIHxRLK6L2JGsDypXbwvZ59Rn4PVkGod67LErWq6U/Ml6U+HjjGA+1n A76MIcO81CLJyrQ86+cbFhjoOopw+nEN3equCKoSN8d5I1prcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO3+T1hqZ+w+INjCOq+V5xSebdxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzlmZTg4NjYtZGJjZS0z Y2ZhLThkNjAtNGUzZWQ4OTczYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYKM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAk6wpU3RFbgR4ODz9m/oIrteJrxLpqWlZiwqQmZimL4jgWeOgVr 03LA605KLKmlkWbbx+aNo4KTkd2fTp2Yd9gC/dfMuchGj5loBg2Q1/mRJu8HiuDm Kn1qSSCZnpvrN4Trz6u+LtMhehfTHceSKQMtexakDv1g58MA0NYgNQ0m7UAdeqN9 BCeHVbp7TqvosfzyWhg6GQoYsqyYFcdYvRL7J3x9O9KIkhTxeuiBkd3fDUmM0ZC7 VUtFRTCSxwO8WtUFcfjj9SetuYxRgNj17U7XRtBppR8f4j0qJiCWzpS0QMY6MlGh 20N24Y+aaaf+8A/S79/hcenVZjoOQHcK2Q0= -----END CERTIFICATE-----Generated at Wed Sep 23 09:23:17 2026 by rpki-client