$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b3568e1-3b57-3f7a-b92a-a3e6e0c95d97.roa File: 4b3568e1-3b57-3f7a-b92a-a3e6e0c95d97.roa (raw, json) Hash identifier: tzVjFAsixOKOTGtlZEP2VM6ghU6JmRPAUEGSPmaluO0= Subject key identifier: DE:4F:9C:D0:48:A1:7D:55:1A:E1:92:D7:70:9B:47:AD:B8:02:09:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277DE305AF707BF3D787440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b3568e1-3b57-3f7a-b92a-a3e6e0c95d97.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:880a:824::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:de:30:5a:f7:07:bf:3d:78:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=cafe191f-68f4-413e-9bcc-59ee15c0a24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:02:d8:a0:cd:97:22:3d:17:04:f3:6b:82: 9d:47:26:8d:d6:2b:74:6f:7f:03:00:a0:d5:95:a5: e5:84:e0:a7:fd:6d:64:8f:43:a4:fd:28:a9:c9:10: 94:44:1c:1d:88:e5:44:6a:39:d9:f5:15:c3:85:d6: d3:1d:30:5b:ea:94:d3:bf:ce:87:56:7f:72:6c:09: 9d:cc:63:a7:ba:e7:a5:96:0b:17:b0:f6:57:46:24: 89:f0:d1:2b:f1:e7:a1:2d:ef:85:6d:4c:1a:83:26: ac:6e:0f:95:38:89:61:48:19:83:07:f8:ed:40:71: 54:ef:2c:c3:06:63:1c:60:e7:cc:45:9c:ab:f0:5a: c1:3b:7f:b5:5a:5a:67:d1:d7:99:9a:9b:d2:e3:f4: a7:f3:2a:b1:c8:b1:4a:16:66:ee:09:79:4e:ea:65: 2c:2c:20:94:cf:be:aa:0b:ff:67:e8:23:55:81:79: 29:13:5e:87:4f:88:a7:46:d7:50:cc:cb:4c:be:68: 29:cf:1a:98:da:9e:f4:89:61:19:9b:ef:ad:c9:ec: 68:51:87:90:80:44:ba:51:ae:53:61:9f:73:78:40: ce:5a:1b:4c:c7:36:06:ec:52:12:1e:4f:89:e7:b8: 63:2a:cb:74:8b:a5:d1:07:5f:8b:4a:04:62:12:11: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4F:9C:D0:48:A1:7D:55:1A:E1:92:D7:70:9B:47:AD:B8:02:09:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b3568e1-3b57-3f7a-b92a-a3e6e0c95d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:824::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:54:c5:91:dd:16:f6:81:6d:16:82:af:07:48:83:6e:24:b2: b4:e4:81:89:36:b6:c7:f8:16:e0:30:58:1c:a3:70:42:5d:cd: 70:31:f9:14:c6:99:5a:d9:83:a4:77:5a:27:0f:64:35:1a:89: 59:df:7a:53:36:58:eb:f6:78:0b:39:39:4a:a3:07:01:84:ea: ff:33:c3:77:45:85:20:64:60:0d:bc:a0:69:8d:09:02:30:49: e3:cb:95:a9:65:1d:42:9b:7e:c9:a6:9e:00:bc:89:78:de:75: 9f:2d:9c:d9:23:24:9e:cc:b3:6a:67:05:75:b0:aa:de:a4:bd: 88:15:64:db:b8:a0:3d:fe:41:2e:3f:b0:97:c5:8a:41:f9:ac: 0e:20:58:dc:e3:6c:04:3a:43:43:a7:12:19:4f:65:f9:c7:7c: ff:5a:52:6d:bd:cc:fa:72:95:50:74:dd:5a:a7:bd:55:7c:81: 5b:fa:da:73:d3:81:f7:d0:6b:e5:c5:e5:a6:f7:b9:7e:74:d9: 36:3b:57:bb:5c:96:11:2d:4f:57:a8:fb:16:28:f2:dc:53:90: fa:94:ac:15:64:5d:74:ae:4a:db:22:8d:92:ed:37:91:ca:7b: d9:73:d0:71:0a:ff:14:ae:7b:fb:81:e1:d1:2c:78:38:74:f1: 5b:63:b8:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Cd94wWvcHvz14dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Y2FmZTE5MWYtNjhmNC00MTNlLTliY2MtNTllZTE1YzBhMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKQC2KDNlyI9FwTza4KdRyaN1it0b38DAKDV laXlhOCn/W1kj0Ok/SipyRCURBwdiOVEajnZ9RXDhdbTHTBb6pTTv86HVn9ybAmd zGOnuuellgsXsPZXRiSJ8NEr8eehLe+FbUwagyasbg+VOIlhSBmDB/jtQHFU7yzD BmMcYOfMRZyr8FrBO3+1Wlpn0deZmpvS4/Sn8yqxyLFKFmbuCXlO6mUsLCCUz76q C/9n6CNVgXkpE16HT4inRtdQzMtMvmgpzxqY2p70iWEZm++tyexoUYeQgES6Ua5T YZ9zeEDOWhtMxzYG7FISHk+J57hjKst0i6XRB1+LSgRiEhGDOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN5PnNBIoX1VGuGS13CbR624AglBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGIzNTY4ZTEtM2I1Ny0z ZjdhLWI5MmEtYTNlNmUwYzk1ZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICggk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxUxZHdFvaBbRaCrwdIg24ksrTkgYk2tsf4FuAwWByjcEJdzXAx +RTGmVrZg6R3WicPZDUaiVnfelM2WOv2eAs5OUqjBwGE6v8zw3dFhSBkYA28oGmN CQIwSePLlallHUKbfsmmngC8iXjedZ8tnNkjJJ7Ms2pnBXWwqt6kvYgVZNu4oD3+ QS4/sJfFikH5rA4gWNzjbAQ6Q0OnEhlPZfnHfP9aUm29zPpylVB03VqnvVV8gVv6 2nPTgffQa+XF5ab3uX502TY7V7tclhEtT1eo+xYo8txTkPqUrBVkXXSuStsijZLt N5HKe9lz0HEK/xSue/uB4dEseDh08VtjuNQ= -----END CERTIFICATE-----Generated at Sun Sep 27 16:40:35 2026 by rpki-client