$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d2be950-fee6-31a6-86e5-d7b0b18d78f2.roa File: 0d2be950-fee6-31a6-86e5-d7b0b18d78f2.roa (raw, json) Hash identifier: aQu0EXzYiCfiH7bkRPBQGseY8wrWr4NJCB1nyPOQNA4= Subject key identifier: D0:04:5E:5C:3C:C7:D9:F8:EA:AE:4F:F3:18:D0:DD:C6:F7:9B:62:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F093D00B4C6DC37664109E740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d2be950-fee6-31a6-86e5-d7b0b18d78f2.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 2001:578:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:00:b4:c6:dc:37:66:41:09:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=979653b2-5d11-4f0b-a34a-1ab938881c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:df:78:44:3f:d0:3d:3a:d5:96:05:3c:19: 6a:88:05:09:8a:c9:05:5c:97:30:4f:6b:94:50:fb: 2f:7b:f9:df:32:9e:7c:5a:09:38:cc:c0:78:b1:7e: 7f:0e:f3:29:c5:d1:4a:5d:65:f3:b4:c0:2f:c1:e8: 36:47:46:0f:90:2e:fa:eb:78:1c:07:ef:75:93:c9: 30:c3:41:aa:ca:5e:5f:d1:32:a4:53:94:85:c8:89: e1:14:4e:7a:6b:8b:26:ae:07:de:ff:7f:e4:0a:6c: 50:a3:42:49:a9:bb:3d:74:59:02:8b:e1:a6:36:60: 35:95:32:19:9c:e2:d5:3a:2c:84:00:c0:01:fe:98: fa:f9:4e:41:1d:8e:d9:b9:45:1a:fe:a5:d3:f9:a1: b6:1d:dc:bb:c3:6b:ea:f7:d4:cb:00:b2:48:13:cb: 69:05:16:ec:38:58:4a:92:fb:6f:2a:ee:67:0a:04: c9:f9:4e:51:63:de:25:bd:d8:d2:06:07:ee:3d:c3: 16:ee:3a:99:a1:73:3d:69:e9:e5:1d:06:b7:65:e7: d1:fa:a8:c8:c3:67:3a:9a:98:f6:d9:82:1b:d5:d6: ad:1c:6f:80:50:0c:a8:25:52:3a:49:e4:16:d7:50: 3e:4b:d3:6b:40:65:87:84:12:b0:3b:4a:a7:3b:3c: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:04:5E:5C:3C:C7:D9:F8:EA:AE:4F:F3:18:D0:DD:C6:F7:9B:62:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d2be950-fee6-31a6-86e5-d7b0b18d78f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:f3:43:38:35:25:64:8b:63:b6:dc:18:dc:0f:45:55:34: cf:d8:1e:08:ea:56:35:58:ac:0a:6f:f3:ab:69:61:c7:fb:db: 77:7c:67:e9:9e:4c:85:4f:9e:68:8c:f8:7b:2c:b8:d8:9d:aa: b0:df:75:18:22:bc:7c:d7:a3:28:70:a7:84:e1:47:d2:23:5f: de:61:32:46:23:51:6c:77:c7:39:ff:64:b0:6d:a1:b2:7d:af: 65:b0:54:04:eb:6d:09:aa:6b:f9:76:08:80:b8:35:08:a3:8b: a3:aa:7c:b9:52:8a:4a:4a:6f:5b:a6:95:62:a0:cd:9e:3e:c4: 2c:4c:4a:b6:13:f9:48:86:7b:d0:40:f7:3d:10:07:ca:9f:0b: 78:cc:f6:70:95:9e:1d:e7:7a:d0:23:b6:94:61:9e:f0:69:e5: 48:02:8a:3e:b5:11:d7:21:17:0d:2d:1f:56:c2:91:60:a0:f9: 91:00:40:dc:66:ce:5e:70:2d:bf:d9:02:17:1b:3b:b5:61:46: a0:f4:77:63:c7:10:29:1e:a7:48:4d:b8:25:4e:ce:a7:e8:0a: 21:a2:15:9f:26:54:4e:6c:cb:b8:44:f5:90:ab:a0:45:58:60: dc:94:a4:07:fe:0a:42:d6:c8:35:68:c4:ae:86:9d:ce:fb:4d: fb:4e:4e:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPQC0xtw3ZkEJ50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTc5NjUzYjItNWQxMS00ZjBiLWEzNGEtMWFiOTM4ODgxYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLDfeEQ/0D061ZYFPBlqiAUJiskFXJcwT2uU UPsve/nfMp58Wgk4zMB4sX5/DvMpxdFKXWXztMAvweg2R0YPkC7663gcB+91k8kw w0Gqyl5f0TKkU5SFyInhFE56a4smrgfe/3/kCmxQo0JJqbs9dFkCi+GmNmA1lTIZ nOLVOiyEAMAB/pj6+U5BHY7ZuUUa/qXT+aG2Hdy7w2vq99TLALJIE8tpBRbsOFhK kvtvKu5nCgTJ+U5RY94lvdjSBgfuPcMW7jqZoXM9aenlHQa3ZefR+qjIw2c6mpj2 2YIb1datHG+AUAyoJVI6SeQW11A+S9NrQGWHhBKwO0qnOzz1WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNAEXlw8x9n46q5P8xjQ3cb3m2LmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQyYmU5NTAtZmVlNi0z MWE2LTg2ZTUtZDdiMGIxOGQ3OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDt80M4NSVki2O23BjcD0VVNM/YHgjqVjVYrApv86tpYcf723d8 Z+meTIVPnmiM+HssuNidqrDfdRgivHzXoyhwp4ThR9IjX95hMkYjUWx3xzn/ZLBt obJ9r2WwVATrbQmqa/l2CIC4NQiji6OqfLlSikpKb1umlWKgzZ4+xCxMSrYT+UiG e9BA9z0QB8qfC3jM9nCVnh3netAjtpRhnvBp5UgCij61EdchFw0tH1bCkWCg+ZEA QNxmzl5wLb/ZAhcbO7VhRqD0d2PHECkep0hNuCVOzqfoCiGiFZ8mVE5sy7hE9ZCr oEVYYNyUpAf+CkLWyDVoxK6Gnc77TftOTm8= -----END CERTIFICATE-----Generated at Fri Sep 18 12:48:21 2026 by rpki-client