$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a5cf9f1-d536-33fc-b604-2f5cfea3e191.roa File: 5a5cf9f1-d536-33fc-b604-2f5cfea3e191.roa (raw, json) Hash identifier: V1CHwZHxYPBQIoBxtMDT7BkqQFT6t8SLEoZZdhwyfxI= Subject key identifier: 21:41:D5:CE:17:39:DE:32:38:4D:FF:E7:AC:EB:D7:B4:B9:76:DD:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427854716F14CA8E228A8DE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a5cf9f1-d536-33fc-b604-2f5cfea3e191.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 2600:8800:8110::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:54:71:6f:14:ca:8e:22:8a:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=fe103e60-a048-4483-9983-69e97c5b9120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:6e:28:66:9f:8a:90:ce:d1:97:83:39:49: 98:b1:50:20:c9:ed:ef:c7:03:ac:d3:15:7a:2a:34: 76:d4:3a:fb:e3:76:f8:70:5e:3d:fe:42:f4:3a:21: ca:52:db:0f:47:04:6b:fc:9e:54:ef:9a:b1:68:29: 72:54:f0:92:9f:26:3a:63:a9:c8:a8:58:77:50:2a: 68:d7:07:83:d4:9a:a3:d1:67:61:94:38:a2:b6:b9: 03:93:8c:c0:8d:3b:cd:f2:14:42:7c:39:34:f5:c0: 27:0e:03:7e:7e:a1:cf:b5:09:b7:d8:54:d2:b9:b8: 0a:05:5a:db:8a:cb:88:15:77:52:03:c9:24:d8:35: 87:4a:3d:05:90:f3:4f:7f:1e:ad:a4:2a:cc:e7:50: a9:bb:fe:ee:a6:fe:66:14:d9:a4:6f:4e:cb:ce:b9: 8c:ce:7f:58:80:6c:4e:e5:b4:04:c6:b0:3c:14:05: 2c:fe:1d:9c:87:8c:f4:3c:00:00:fe:69:02:bb:b9: b5:d4:30:29:2d:e5:d7:6a:0c:ce:82:de:95:3f:fd: 77:4d:ad:5b:90:3a:de:d8:43:53:8d:e7:44:1f:a2: 48:62:57:0c:59:d2:64:43:6a:1f:48:83:59:18:d2: 6a:e1:6b:b9:a8:5d:de:a2:ee:26:03:15:e4:90:f2: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:D5:CE:17:39:DE:32:38:4D:FF:E7:AC:EB:D7:B4:B9:76:DD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a5cf9f1-d536-33fc-b604-2f5cfea3e191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8110::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e0:61:81:3e:0d:0e:7c:31:df:4a:43:b0:4d:b2:23:bc:17: 85:71:a6:33:fa:12:57:97:b7:d4:81:e8:5a:71:ea:4d:48:15: 3b:37:63:4c:28:9a:4b:9d:1e:dd:28:35:0b:95:f8:ba:30:2a: c9:81:fa:a6:64:23:b0:59:67:0f:50:ea:2c:2b:40:e7:cd:f1: db:40:e4:53:0f:47:be:51:27:3c:78:6a:52:a5:45:3e:e7:00: ad:7d:3e:9d:15:3d:60:8e:fd:ca:fb:c1:c7:ed:52:7a:78:68: f0:63:22:09:95:67:3d:93:d3:a1:1b:be:4d:6b:98:31:fc:8a: 0c:b1:6b:27:c9:8c:3b:e8:e4:0b:dd:c2:12:5d:8e:e6:77:58: ba:5d:b9:77:f3:54:c1:be:f1:ea:b0:be:2c:36:5d:ef:38:fe: fd:83:5c:fc:3f:c3:b6:49:c1:9c:da:22:d7:25:7b:73:ca:dc: e8:52:c2:f2:c3:ee:7a:5c:ea:b2:7a:e0:cd:12:ff:93:b3:49: 4c:25:cc:a6:c6:aa:af:8c:a5:b3:62:c3:61:aa:b6:b0:03:5c: ff:64:40:81:ac:e5:7d:ed:0b:ae:c3:80:cf:08:a4:bf:56:a8: 93:c2:90:4e:a8:88:e5:a6:37:9a:01:91:82:78:a2:f5:97:87: 21:2b:ca:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CeFRxbxTKjiKKjeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZmUxMDNlNjAtYTA0OC00NDgzLTk5ODMtNjllOTdjNWI5MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31uKGafipDO0ZeDOUmYsVAgye3vxwOs0xV6 KjR21Dr743b4cF49/kL0OiHKUtsPRwRr/J5U75qxaClyVPCSnyY6Y6nIqFh3UCpo 1weD1Jqj0WdhlDiitrkDk4zAjTvN8hRCfDk09cAnDgN+fqHPtQm32FTSubgKBVrb isuIFXdSA8kk2DWHSj0FkPNPfx6tpCrM51Cpu/7upv5mFNmkb07LzrmMzn9YgGxO 5bQExrA8FAUs/h2ch4z0PAAA/mkCu7m11DApLeXXagzOgt6VP/13Ta1bkDre2ENT jedEH6JIYlcMWdJkQ2ofSINZGNJq4Wu5qF3eou4mAxXkkPKKcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFB1c4XOd4yOE3/56zr17S5dt1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWE1Y2Y5ZjEtZDUzNi0z M2ZjLWI2MDQtMmY1Y2ZlYTNlMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJTgYYE+DQ58Md9KQ7BNsiO8F4VxpjP6EleXt9SB6Fpx6k1IFTs3 Y0womkudHt0oNQuV+LowKsmB+qZkI7BZZw9Q6iwrQOfN8dtA5FMPR75RJzx4alKl RT7nAK19Pp0VPWCO/cr7wcftUnp4aPBjIgmVZz2T06Ebvk1rmDH8igyxayfJjDvo 5AvdwhJdjuZ3WLpduXfzVMG+8eqwviw2Xe84/v2DXPw/w7ZJwZzaItcle3PK3OhS wvLD7npc6rJ64M0S/5OzSUwlzKbGqq+MpbNiw2GqtrADXP9kQIGs5X3tC67DgM8I pL9WqJPCkE6oiOWmN5oBkYJ4ovWXhyErytA= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:36 2026 by rpki-client