$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa File: d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa (raw, json) Hash identifier: ZH0Ku11msABOVYHFPRhfdyq/1yywP7L9KhKL0KeF2YA= Subject key identifier: 5E:C5:DA:8E:97:4D:C7:18:4B:D0:3B:5E:95:9E:95:8B:75:48:0C:8B Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F4973F9B307D84FE643891500 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2604:a940:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f9:b3:07:d8:4f:e6:43:89:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=098f5edd-9a1e-4399-a6ca-949d3c61d8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:aa:ce:df:99:ab:69:7e:b2:69:07:2d:e1:e9: f5:25:c7:4f:31:15:74:ee:89:65:45:93:a6:18:99: 45:00:db:fb:41:88:00:bb:b1:8f:50:f3:3d:5f:92: c2:fe:ee:fb:b6:db:c9:45:9f:a6:33:6d:96:83:60: ef:08:9c:00:c9:97:37:b2:4e:79:46:1d:63:6f:74: 4c:db:16:a7:a1:c6:21:3e:cd:d4:0d:bf:53:a2:7c: f1:a5:4f:7f:fe:c6:8b:73:f6:ab:74:8b:b5:8b:cc: cb:54:0c:af:70:aa:27:58:f1:9c:df:9b:cd:5c:fc: d7:f1:9b:e8:55:76:b0:d8:af:03:0b:b7:4a:9e:f3: 32:f1:e3:bc:49:1e:3a:19:2d:9c:85:4d:c4:10:e1: 3c:d0:dd:06:be:2d:fc:0c:64:c9:15:f5:fc:f4:a3: bd:15:e9:ea:05:7a:08:f2:71:b8:c5:78:8a:d5:85: 69:dc:80:3a:4e:b0:10:a2:eb:6d:03:48:9d:69:42: 1d:9f:86:d1:8a:0d:77:13:8f:32:36:32:03:d7:50: 6c:24:ac:ce:84:45:43:55:96:43:62:f8:ec:f1:11: 55:a6:e0:0d:5b:40:59:58:b2:b7:03:24:5c:a6:2c: 7c:50:3f:af:19:ce:b2:e4:79:cd:f6:7d:2e:0b:27: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C5:DA:8E:97:4D:C7:18:4B:D0:3B:5E:95:9E:95:8B:75:48:0C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:a940:301::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6f:82:c4:c8:11:2e:ca:d9:cd:dc:47:92:90:b5:d1:70:23: 1a:5a:ed:22:32:58:a3:2c:f6:12:51:70:61:35:29:a5:04:df: 32:58:7f:37:b2:a2:76:de:10:c6:9b:ec:27:3d:8c:77:3b:ba: 47:45:37:d2:32:25:83:3d:0e:84:e8:34:dc:fa:36:01:a5:72: 72:5f:70:b8:7f:dd:d3:cf:1d:30:0e:dd:29:95:02:12:ce:fd: af:e1:6a:9f:a6:ce:6b:c8:4a:8a:04:b6:9b:ae:07:1f:22:28: 92:a2:e9:01:26:dd:a0:d4:ac:bb:00:96:02:14:10:c0:73:d8: 66:9b:89:43:81:50:fe:86:23:b8:0b:ec:bb:85:26:dc:61:15: 3b:13:4a:7d:58:aa:f8:7b:aa:97:7b:85:dd:93:e1:72:62:e5: ed:17:b8:3c:de:90:9b:cf:67:8c:56:36:b5:23:5d:2a:55:68: 5a:44:b3:1c:be:d4:7d:86:1e:9d:8a:72:fb:b9:f5:fa:c0:97: 67:1b:19:84:9e:50:25:c3:d4:f1:66:91:3d:93:9b:72:12:ed: 6f:f9:70:23:8a:cb:35:99:0b:aa:6d:b1:7a:37:66:5a:f6:48: 21:e4:6f:91:14:53:f8:0b:8e:f0:7b:96:cb:94:0b:d4:57:17: e4:45:f5:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/mzB9hP5kOJFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk4ZjVlZGQtOWExZS00Mzk5LWE2Y2EtOTQ5ZDNjNjFkOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6rO35mraX6yaQct4en1JcdPMRV07ollRZOm GJlFANv7QYgAu7GPUPM9X5LC/u77ttvJRZ+mM22Wg2DvCJwAyZc3sk55Rh1jb3RM 2xanocYhPs3UDb9TonzxpU9//saLc/ardIu1i8zLVAyvcKonWPGc35vNXPzX8Zvo VXaw2K8DC7dKnvMy8eO8SR46GS2chU3EEOE80N0Gvi38DGTJFfX89KO9FenqBXoI 8nG4xXiK1YVp3IA6TrAQouttA0idaUIdn4bRig13E48yNjID11BsJKzOhEVDVZZD Yvjs8RFVpuANW0BZWLK3AyRcpix8UD+vGc6y5HnN9n0uCyeaiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7F2o6XTccYS9A7XpWelYt1SAyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZDUzZmNhMGItOGU1Mi0z MzZjLWE4ZWMtYTZjNWYyZTFkOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSpQAMB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtvgsTIES7K2c3cR5KQtdFwIxpa7SIyWKMs9hJRcGE1KaUE3zJY fzeyonbeEMab7Cc9jHc7ukdFN9IyJYM9DoToNNz6NgGlcnJfcLh/3dPPHTAO3SmV AhLO/a/hap+mzmvISooEtpuuBx8iKJKi6QEm3aDUrLsAlgIUEMBz2GabiUOBUP6G I7gL7LuFJtxhFTsTSn1Yqvh7qpd7hd2T4XJi5e0XuDzekJvPZ4xWNrUjXSpVaFpE sxy+1H2GHp2Kcvu59frAl2cbGYSeUCXD1PFmkT2Tm3IS7W/5cCOKyzWZC6ptsXo3 Zlr2SCHkb5EUU/gLjvB7lsuUC9RXF+RF9VQ= -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:47 2026 by rpki-client