$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa File: 3e5e3356-931e-3283-aaa5-37e12684553a.roa (raw, json) Hash identifier: SgkHUnfUu47P9q5U9MVIGJd/dGAvIiCegORe1r8tbVc= Subject key identifier: 85:8D:54:08:A4:1E:3A:4B:37:05:EA:70:EE:5A:AA:55:05:AC:F5:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD0A6912D0A3622549A5380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 2600:8800:7418::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:a6:91:2d:0a:36:22:54:9a:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=6f579ecf-ed8f-42c4-97fb-ce07052f9fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:37:32:74:5b:03:0b:4c:f0:77:b2:94:f9: e4:61:c9:b2:ba:d7:91:14:47:7e:45:2b:2b:0b:31: 1f:ee:27:0c:fa:b0:4e:13:2e:cd:0f:dc:86:a9:68: 63:8d:c2:66:da:bc:48:b5:cc:92:27:67:7d:c1:52: 30:97:e8:53:b3:a8:01:6b:f4:f7:35:84:54:c2:44: a0:b6:2f:6d:c6:05:a7:45:7a:5c:bd:b5:f5:ce:e6: 87:97:89:95:d9:7b:1a:61:e1:6e:6f:f8:f3:b1:3f: b6:30:15:41:3f:43:8a:af:ea:85:29:6a:a7:11:b2: 08:a1:91:5b:22:7b:43:85:59:d0:2e:db:de:fc:d1: 43:55:54:d4:e8:b2:5d:85:0e:b1:62:2d:3d:5f:9f: 7e:6c:a2:d6:6c:06:19:92:4d:c8:de:fa:d3:67:30: d5:ab:d8:d2:66:1c:2e:08:cd:e0:78:18:0f:ae:06: 05:82:97:d0:0f:9f:2c:1b:63:32:81:ca:ff:ff:6a: e6:d2:97:ba:09:43:f5:81:b0:39:dd:bc:8c:bd:c8: 75:d5:1b:a8:29:15:a6:84:2a:a2:c7:63:be:af:1a: 68:25:6e:d2:6a:1c:10:50:51:32:a9:c9:4e:7f:2f: 6a:35:10:7c:de:7c:36:fb:26:b9:47:53:ba:5e:63: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:54:08:A4:1E:3A:4B:37:05:EA:70:EE:5A:AA:55:05:AC:F5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5e3356-931e-3283-aaa5-37e12684553a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:7418::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:85:65:f2:09:b2:f4:56:bb:c0:99:56:2b:c5:d4:59:2d:0b: e2:2e:d8:52:93:86:8a:58:0d:3e:42:45:32:7f:91:15:92:c5: 31:a2:ba:b4:56:74:38:c7:40:6e:e5:7d:59:ee:2e:22:26:1e: 72:d7:d6:6a:9e:d0:b9:fd:b3:92:cb:ef:01:74:f2:5e:bd:cd: 85:cf:9b:4b:63:05:16:9b:02:40:a9:ba:7c:d2:c1:40:e9:9a: ca:bf:9a:56:18:97:5c:27:31:de:ec:91:13:bf:19:b6:69:f9: 4b:e0:f6:00:0f:96:6a:51:3b:3b:eb:c6:ee:72:d3:47:92:79: 6e:b9:cd:9e:1f:15:98:3a:24:46:9a:a8:9f:2d:25:0e:b5:cc: 97:66:77:9f:c4:6b:95:60:9c:b8:7e:91:63:80:92:e7:e9:35: 77:86:d8:5a:8d:93:62:1c:c9:75:66:cb:c8:0d:1e:30:b9:99: 02:6f:fa:62:93:30:6f:db:e5:85:58:e5:45:c0:d0:c2:a2:84: 89:a3:3d:78:9b:d3:22:70:0d:49:fa:bc:0f:13:a4:95:2c:ea: 01:16:9d:d1:90:53:67:bc:c6:f8:83:b5:95:3d:5d:4f:8e:3c: 1a:e3:0d:77:c1:eb:5c:e2:9a:47:6e:bd:95:95:f2:60:2a:e3: 63:49:23:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0KaRLQo2IlSaU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NmY1NzllY2YtZWQ4Zi00MmM0LTk3ZmItY2UwNzA1MmY5ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwM3MnRbAwtM8HeylPnkYcmyuteRFEd+RSsr CzEf7icM+rBOEy7ND9yGqWhjjcJm2rxItcySJ2d9wVIwl+hTs6gBa/T3NYRUwkSg ti9txgWnRXpcvbX1zuaHl4mV2XsaYeFub/jzsT+2MBVBP0OKr+qFKWqnEbIIoZFb IntDhVnQLtve/NFDVVTU6LJdhQ6xYi09X59+bKLWbAYZkk3I3vrTZzDVq9jSZhwu CM3geBgPrgYFgpfQD58sG2Mygcr//2rm0pe6CUP1gbA53byMvch11RuoKRWmhCqi x2O+rxpoJW7SahwQUFEyqclOfy9qNRB83nw2+ya5R1O6XmM5BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIWNVAikHjpLNwXqcO5aqlUFrPWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U1ZTMzNTYtOTMxZS0z MjgzLWFhYTUtMzdlMTI2ODQ1NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAHQY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKFZfIJsvRWu8CZVivF1FktC+Iu2FKThopYDT5CRTJ/kRWSxTGi urRWdDjHQG7lfVnuLiImHnLX1mqe0Ln9s5LL7wF08l69zYXPm0tjBRabAkCpunzS wUDpmsq/mlYYl1wnMd7skRO/GbZp+Uvg9gAPlmpROzvrxu5y00eSeW65zZ4fFZg6 JEaaqJ8tJQ61zJdmd5/Ea5VgnLh+kWOAkufpNXeG2FqNk2IcyXVmy8gNHjC5mQJv +mKTMG/b5YVY5UXA0MKihImjPXib0yJwDUn6vA8TpJUs6gEWndGQU2e8xviDtZU9 XU+OPBrjDXfB61zimkduvZWV8mAq42NJI/Y= -----END CERTIFICATE-----Generated at Wed May 13 06:41:16 2026 by rpki-client