$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0399a672-9700-33a8-a48a-8e026348e203.roa File: 0399a672-9700-33a8-a48a-8e026348e203.roa (raw, json) Hash identifier: GBYGVbLgwrZXlDK+hjQx5wP6bL2frQIivWGXReMU0wU= Subject key identifier: 74:E3:C0:E3:62:78:89:53:8B:F0:BF:80:2B:E8:78:DD:23:E0:0F:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53ACAE64DA0C7E5006E7C440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0399a672-9700-33a8-a48a-8e026348e203.roa Signing time: Mon 28 Sep 2026 16:55:28 +0000 ROA not before: Mon 28 Sep 2026 16:55:28 +0000 ROA not after: Sun 27 Dec 2026 17:55:28 +0000 asID: 22773 IP address blocks: 2600:8807:43c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ac:ae:64:da:0c:7e:50:06:e7:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:55:28 2026 GMT Not After : Dec 27 17:55:28 2026 GMT Subject: CN=f356e6b8-1b42-449e-9eb4-9d6265973e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:22:74:f1:55:a5:59:b4:c4:b3:c8:5f:ec: 5f:c8:0d:a1:25:13:b1:9c:03:ea:c8:9d:52:b2:3d: 28:09:e2:ab:79:e0:93:0c:ae:c1:38:03:07:71:50: ac:e9:2b:c0:14:7b:1f:32:2b:8f:f3:0b:c1:12:be: 07:9e:34:90:73:9f:d2:f5:6f:60:54:a9:c6:49:d9: 6a:40:f2:f7:d1:e2:9a:ff:be:54:8b:e2:41:bb:c2: c3:e7:1a:32:17:45:ff:65:83:10:d8:ff:84:52:8e: 07:97:d3:a0:f5:13:f4:4b:ed:06:73:8b:db:95:90: 6c:29:c8:73:f5:3a:37:99:0f:ea:7c:94:de:fd:68: 57:a1:67:00:38:44:17:bb:83:f3:1d:06:9d:06:63: 49:4f:5e:9c:a3:3d:c8:d0:f1:91:c9:ed:ff:d1:75: e7:b6:d8:f2:ec:cf:8d:09:fb:38:60:bf:db:35:1e: cf:9c:33:00:a0:19:88:e9:0d:bf:1e:46:bc:30:21: ea:48:e3:d3:8b:e6:cd:76:10:0a:b2:66:04:f3:05: 6c:c1:38:2f:09:8d:dd:e9:d0:a8:99:03:f4:61:68: ae:41:07:fd:17:cf:09:c4:0f:62:2b:c9:af:f1:39: a8:03:15:3c:e0:40:f1:02:41:42:6d:85:84:c4:35: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:C0:E3:62:78:89:53:8B:F0:BF:80:2B:E8:78:DD:23:E0:0F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0399a672-9700-33a8-a48a-8e026348e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8807:43c0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:dc:be:53:10:92:bb:23:31:a9:5c:64:23:d9:10:18:03:54: 02:37:9f:66:72:c5:55:b4:8e:d4:46:8a:5a:c5:6d:bb:0d:c3: 58:84:96:91:2b:58:c9:20:f6:a4:3e:a3:88:44:3c:83:b5:65: c5:c3:a5:f1:81:2c:3a:5c:73:31:a7:85:0c:35:ec:03:ab:74: 26:f6:62:d6:dc:4f:3c:ac:08:40:f3:88:5d:b2:8b:23:66:6d: 02:63:d1:22:4c:b9:f1:39:62:53:87:53:b0:b4:13:86:60:5b: 4a:d5:e5:03:52:df:86:7b:d6:77:8e:f8:9d:39:7e:2d:35:26: 22:5a:a3:18:a5:a7:b2:ed:67:73:ff:62:73:42:20:f4:59:37: ae:7f:7f:18:13:51:43:ec:c9:7a:55:62:82:39:b0:fe:fb:d3: 75:43:6f:b8:ca:4b:ed:c3:dd:56:aa:d6:a4:7d:b5:8f:ff:d4: 4a:d3:0b:c6:f3:eb:21:95:e8:ab:3d:49:b2:5b:6e:27:bd:79: bd:4c:28:49:15:26:bc:14:b9:63:c1:03:ef:e1:64:69:4e:8c: ae:54:38:84:39:a7:46:2f:26:fa:37:c3:7b:39:f6:bc:6b:44: cf:6a:52:85:e4:7e:d6:57:34:26:48:91:2e:d8:d6:ca:1a:e2: 00:ac:b9:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TrK5k2gx+UAbnxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTUyOFoXDTI2MTIyNzE3NTUyOFowLzEtMCsGA1UEAxMk ZjM1NmU2YjgtMWI0Mi00NDllLTllYjQtOWQ2MjY1OTczZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPEidPFVpVm0xLPIX+xfyA2hJROxnAPqyJ1S sj0oCeKreeCTDK7BOAMHcVCs6SvAFHsfMiuP8wvBEr4HnjSQc5/S9W9gVKnGSdlq QPL30eKa/75Ui+JBu8LD5xoyF0X/ZYMQ2P+EUo4Hl9Og9RP0S+0Gc4vblZBsKchz 9To3mQ/qfJTe/WhXoWcAOEQXu4PzHQadBmNJT16coz3I0PGRye3/0XXnttjy7M+N Cfs4YL/bNR7PnDMAoBmI6Q2/Hka8MCHqSOPTi+bNdhAKsmYE8wVswTgvCY3d6dCo mQP0YWiuQQf9F88JxA9iK8mv8TmoAxU84EDxAkFCbYWExDUIJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTjwONieIlTi/C/gCvoeN0j4A8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDM5OWE2NzItOTcwMC0z M2E4LWE0OGEtOGUwMjYzNDhlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIB0PA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABjcvlMQkrsjMalcZCPZEBgDVAI3n2ZyxVW0jtRGilrFbbsNw1iE lpErWMkg9qQ+o4hEPIO1ZcXDpfGBLDpcczGnhQw17AOrdCb2YtbcTzysCEDziF2y iyNmbQJj0SJMufE5YlOHU7C0E4ZgW0rV5QNS34Z71neO+J05fi01JiJaoxilp7Lt Z3P/YnNCIPRZN65/fxgTUUPsyXpVYoI5sP7703VDb7jKS+3D3Vaq1qR9tY//1ErT C8bz6yGV6Ks9SbJbbie9eb1MKEkVJrwUuWPBA+/hZGlOjK5UOIQ5p0YvJvo3w3s5 9rxrRM9qUoXkftZXNCZIkS7Y1soa4gCsuRI= -----END CERTIFICATE-----Generated at Sat Oct 3 14:28:14 2026 by rpki-client