$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5240b4d9-030f-3027-b2b5-b065cd0e4e14.roa File: 5240b4d9-030f-3027-b2b5-b065cd0e4e14.roa (raw, json) Hash identifier: mRywWJt+yXDMM8EeLHGxmelSsJ6gRu2qiJ8nOo/jBpE= Subject key identifier: 22:69:BA:0C:8C:E1:08:12:CA:C7:6E:FC:82:65:68:99:39:3C:97:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427812CC528FED97E47A2380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5240b4d9-030f-3027-b2b5-b065cd0e4e14.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:540a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:12:cc:52:8f:ed:97:e4:7a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f6e5d92e-4ce4-46d8-bf8d-666f81a8cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:de:18:bd:dc:de:f5:38:1f:3b:8d:f7:c7: 10:a8:ae:d9:25:18:58:6d:b1:fe:c0:ef:04:38:52: 76:86:51:63:2f:09:5c:59:48:cd:5e:a3:7a:82:fb: 23:82:ca:d5:d6:48:e6:cb:ef:e3:1d:80:d6:ce:92: 01:fd:7e:4a:db:68:6d:be:a7:72:5a:10:a7:9e:7b: 99:b0:a5:07:e3:ba:cf:72:58:2a:e3:07:e3:cb:53: 19:ab:7c:56:7d:4a:ed:79:32:66:fe:ed:25:7d:c6: 8b:61:b1:95:50:e1:28:53:12:7a:f1:a0:79:99:84: a9:fa:63:fd:0e:45:cb:24:58:cf:76:b5:11:58:09: 8e:f3:71:7c:90:bd:95:bc:61:86:db:41:66:dc:a0: 0c:f9:22:e7:cb:45:31:0a:76:3e:5a:3d:63:73:95: 17:c6:eb:f8:e4:e5:e3:9d:c1:9e:8c:7d:6b:c5:d8: 48:cc:68:65:e1:0a:56:52:e6:53:c5:bb:cc:ce:8d: 13:d1:04:b9:69:ae:65:8f:f6:90:fa:54:af:d0:76: 09:a9:4e:d7:28:50:38:25:eb:db:ce:14:c1:1a:2c: 3c:3d:88:33:a1:76:34:88:15:19:74:4a:0a:71:29: 71:08:5a:89:db:f3:71:35:8b:71:4c:54:84:e3:36: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:BA:0C:8C:E1:08:12:CA:C7:6E:FC:82:65:68:99:39:3C:97:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5240b4d9-030f-3027-b2b5-b065cd0e4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:540a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:45:86:12:50:85:13:95:a0:a7:5e:5a:6a:73:12:1c:6c:fe: ad:fb:61:4c:81:53:dc:a6:98:99:57:7d:fe:52:50:30:e9:69: fb:c8:e1:a5:44:b3:ab:5f:d7:4e:6f:9c:1f:13:24:ea:ce:25: 86:5f:4a:33:f0:bb:8e:75:7e:f7:72:f6:10:8f:77:3f:b5:19: 64:06:98:55:90:85:17:c1:24:8d:dd:b4:ab:a5:b4:ef:35:3e: e8:5f:91:e6:dd:2c:f8:69:e2:b1:d3:9f:18:7d:c0:f1:45:94: e5:2e:13:9a:90:c2:7e:75:94:39:28:eb:4a:6e:78:71:a2:df: 52:59:6e:19:18:51:6e:e3:33:34:6b:15:a2:7e:34:bb:9f:c9: 31:a8:da:99:b6:db:21:65:76:d2:4c:56:13:dc:01:47:07:98: 84:d7:6e:99:fc:1f:25:05:74:99:2f:a9:35:f6:fb:eb:f0:22: c7:a3:29:4b:bd:88:db:c6:84:c7:2c:32:d5:d6:7b:fa:18:6f: e0:0b:58:68:de:19:35:1c:67:71:a3:ab:69:0c:00:cf:c9:66: c0:a3:2a:f1:62:0a:ff:dc:f8:6f:4a:a3:2b:98:7d:63:8f:f4: 14:ea:9d:bb:26:01:d2:b0:22:35:b3:b7:20:28:f3:b6:62:c2: 29:0c:bd:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeBLMUo/tl+R6I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjZlNWQ5MmUtNGNlNC00NmQ4LWJmOGQtNjY2ZjgxYThjZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+HeGL3c3vU4HzuN98cQqK7ZJRhYbbH+wO8E OFJ2hlFjLwlcWUjNXqN6gvsjgsrV1kjmy+/jHYDWzpIB/X5K22htvqdyWhCnnnuZ sKUH47rPclgq4wfjy1MZq3xWfUrteTJm/u0lfcaLYbGVUOEoUxJ68aB5mYSp+mP9 DkXLJFjPdrURWAmO83F8kL2VvGGG20Fm3KAM+SLny0UxCnY+Wj1jc5UXxuv45OXj ncGejH1rxdhIzGhl4QpWUuZTxbvMzo0T0QS5aa5lj/aQ+lSv0HYJqU7XKFA4Jevb zhTBGiw8PYgzoXY0iBUZdEoKcSlxCFqJ2/NxNYtxTFSE4zZ0+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJpugyM4QgSysdu/IJlaJk5PJfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0MGI0ZDktMDMwZi0z MDI3LWIyYjUtYjA2NWNkMGU0ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFQK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1FhhJQhROVoKdeWmpzEhxs/q37YUyBU9ymmJlXff5SUDDpafvI 4aVEs6tf105vnB8TJOrOJYZfSjPwu451fvdy9hCPdz+1GWQGmFWQhRfBJI3dtKul tO81PuhfkebdLPhp4rHTnxh9wPFFlOUuE5qQwn51lDko60pueHGi31JZbhkYUW7j MzRrFaJ+NLufyTGo2pm22yFldtJMVhPcAUcHmITXbpn8HyUFdJkvqTX2++vwIsej KUu9iNvGhMcsMtXWe/oYb+ALWGjeGTUcZ3Gjq2kMAM/JZsCjKvFiCv/c+G9KoyuY fWOP9BTqnbsmAdKwIjWztyAo87ZiwikMvWc= -----END CERTIFICATE-----Generated at Wed Sep 23 12:47:00 2026 by rpki-client