$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa File: 350e89e8-f525-316a-9d14-11c96a99c5a0.roa (raw, json) Hash identifier: s3epyrocSAU1qrodV72DvNQOyYmkpaRnadJL6FiUu1Q= Subject key identifier: 9B:5D:94:AB:EB:B3:E0:66:C1:08:AA:1A:57:CB:DE:8F:D1:60:F1:8E Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584F82ADBD84234AC239CCE5AD00 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 63145 IP address blocks: 2606:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:bd:84:23:4a:c2:39:cc:e5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=cf324ebc-4a3e-4ef5-a697-9c9f3df1a05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:ad:f6:d9:40:0f:df:71:92:8f:4e:c3:6f: 3d:a3:b3:bc:3f:dc:8d:42:5a:3b:09:7e:17:27:0c: b4:0b:97:ff:56:c6:9f:5b:16:9a:64:35:84:e6:0a: 70:fe:0b:84:d7:7b:f7:68:47:0a:62:f5:1f:c0:24: 55:e3:d6:8c:c9:c0:04:c0:76:53:7b:ea:ad:da:9b: a9:3b:d2:e9:53:ea:9c:83:6b:ba:04:6f:1b:20:74: 6a:12:cc:3e:ab:db:1e:a4:80:49:7e:0a:1e:74:23: 59:4a:6a:5b:db:3c:be:9a:23:45:0b:ca:53:77:d5: 27:43:29:69:43:3e:42:eb:24:7b:8e:1e:08:9f:e0: b3:6d:3d:ae:e9:bd:cb:9d:1b:83:c1:36:c5:4e:4d: 68:df:a1:51:af:ad:97:19:f5:94:03:9d:c1:47:43: 3b:aa:a4:10:a3:12:03:e6:81:32:47:ea:34:0f:24: 2b:6b:89:23:68:fb:c0:0b:b5:07:2c:27:4c:a7:99: 96:2d:d7:da:62:a5:d5:39:a6:32:78:09:1c:7d:4a: ca:0e:9a:c0:76:78:c1:80:02:5c:7b:df:8a:0c:a5: 35:91:48:a7:72:80:c6:5a:13:98:9f:cd:46:ce:92: 72:59:82:68:30:e7:f4:26:7e:cc:d9:0d:21:1b:ac: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:94:AB:EB:B3:E0:66:C1:08:AA:1A:57:CB:DE:8F:D1:60:F1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv6: 2606:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a1:31:d6:2e:08:19:0d:d5:16:51:31:b5:51:5f:fa:59:05: 82:2b:9b:80:96:71:68:4d:e9:77:f4:fe:39:e4:e9:b7:b9:45: 33:6a:32:70:fb:49:c4:1c:9b:ff:aa:e9:3b:90:c5:cc:5e:b0: 04:9c:52:ac:32:7a:b1:6e:d9:80:15:2e:63:9a:ee:69:4b:be: 1f:4b:13:00:de:a5:b8:bc:54:dd:d7:92:4e:15:ae:e1:94:80: 26:89:56:c2:12:c9:56:7b:00:37:94:f3:1c:fb:63:e2:09:eb: bd:b0:1a:f0:40:f6:e1:14:7d:4c:d7:d5:32:6d:a0:05:64:bc: 15:a4:96:bf:0f:68:b4:14:c5:0d:7d:a7:6d:a3:98:e9:2e:5c: 1a:cd:2e:b1:59:5f:86:48:f1:75:71:d7:b1:df:f8:cc:f1:53: 77:43:b6:ef:87:93:2c:08:fc:33:c4:94:8b:13:b4:61:a0:c7: ab:e3:3e:cb:54:99:44:3b:69:70:06:3e:66:d7:15:c1:94:56: 99:99:5c:bb:c6:6e:f7:03:8e:94:99:af:28:e9:fa:fe:6c:fc: 7f:35:6c:ec:ff:d7:2b:bc:e3:48:51:40:05:e8:c4:26:bd:3d: ab:fc:6c:bc:df:03:9a:f9:6f:44:41:4c:fa:19:59:09:61:8b: 8d:50:43:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+Crb2EI0rCOczlrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk Y2YzMjRlYmMtNGEzZS00ZWY1LWE2OTctOWM5ZjNkZjFhMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsSt9tlAD99xko9Ow289o7O8P9yNQlo7CX4X Jwy0C5f/VsafWxaaZDWE5gpw/guE13v3aEcKYvUfwCRV49aMycAEwHZTe+qt2pup O9LpU+qcg2u6BG8bIHRqEsw+q9sepIBJfgoedCNZSmpb2zy+miNFC8pTd9UnQylp Qz5C6yR7jh4In+CzbT2u6b3LnRuDwTbFTk1o36FRr62XGfWUA53BR0M7qqQQoxID 5oEyR+o0DyQra4kjaPvAC7UHLCdMp5mWLdfaYqXVOaYyeAkcfUrKDprAdnjBgAJc e9+KDKU1kUincoDGWhOYn81GzpJyWYJoMOf0Jn7M2Q0hG6ybWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJtdlKvrs+BmwQiqGlfL3o/RYPGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMzUwZTg5ZTgtZjUyNS0z MTZhLTlkMTQtMTFjOTZhOTljNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgauQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsoTHWLggZDdUWUTG1UV/6WQWCK5uAlnFoTel39P455Om3uUUzajJw +0nEHJv/quk7kMXMXrAEnFKsMnqxbtmAFS5jmu5pS74fSxMA3qW4vFTd15JOFa7h lIAmiVbCEslWewA3lPMc+2PiCeu9sBrwQPbhFH1M19UybaAFZLwVpJa/D2i0FMUN fadto5jpLlwazS6xWV+GSPF1cdex3/jM8VN3Q7bvh5MsCPwzxJSLE7RhoMer4z7L VJlEO2lwBj5m1xXBlFaZmVy7xm73A46Uma8o6fr+bPx/NWzs/9crvONIUUAF6MQm vT2r/Gy83wOa+W9EQUz6GVkJYYuNUEOT -----END CERTIFICATE-----Generated at Sat Oct 31 12:44:42 2026 by rpki-client