$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fa96daf-aef2-38f0-96a3-ce20e855905b.roa File: 1fa96daf-aef2-38f0-96a3-ce20e855905b.roa (raw, json) Hash identifier: 1OQOckmjCBLYdHdXLqTdaO+jKp8WNe+8rlf6khkSdOc= Subject key identifier: E3:D9:D8:AF:72:1C:5D:72:C4:8F:1D:D5:4E:75:BC:C9:67:42:DC:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AB5449B2EACA44BFAE4E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fa96daf-aef2-38f0-96a3-ce20e855905b.roa Signing time: Mon 28 Sep 2026 16:52:45 +0000 ROA not before: Mon 28 Sep 2026 16:52:45 +0000 ROA not after: Sun 27 Dec 2026 17:52:45 +0000 asID: 22773 IP address blocks: 2001:579:e0a0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ab:54:49:b2:ea:ca:44:bf:ae:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:52:45 2026 GMT Not After : Dec 27 17:52:45 2026 GMT Subject: CN=44a327f8-13c1-42f9-afdc-6a1291f2fac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:55:4e:89:cc:04:3a:79:2b:e7:50:3b:16: 28:50:85:52:29:19:ee:58:74:63:3b:40:4b:b9:8a: 93:12:ef:25:09:d6:b3:a0:91:b4:e9:86:c7:4a:87: db:73:c4:5d:80:85:71:1b:80:3d:e3:b6:c7:cc:f0: 54:45:ba:33:96:d4:40:5d:66:64:62:5d:f2:9b:df: 10:fb:b4:1f:08:d4:76:32:10:05:e6:16:37:f1:a1: 8d:73:43:38:eb:2b:7a:f7:a8:2d:a6:d0:1e:8b:dc: 54:c4:a4:c6:bd:dc:54:55:3a:7b:be:03:aa:02:1b: 35:ae:b8:a6:ba:9e:66:fa:b8:d4:04:82:90:4f:5e: 0b:6e:ee:73:4e:ae:a7:1c:d2:f2:62:89:11:29:12: 18:42:64:0c:17:f8:3a:00:a2:33:89:5c:d7:66:af: bd:75:3c:17:3d:17:4e:16:a8:b5:af:9a:1d:a3:d4: a6:b0:f1:07:f4:70:48:19:0e:46:2e:e7:5c:90:14: b9:72:10:15:b7:9a:a3:56:53:4e:00:e1:dc:2d:50: 67:73:1b:b6:6c:77:91:37:2a:c2:3d:7f:cf:63:9a: 76:72:fd:e8:b9:71:9b:43:52:d6:74:53:aa:71:73: 60:5b:8a:f5:69:d0:9d:b5:51:98:78:14:43:53:f4: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:D8:AF:72:1C:5D:72:C4:8F:1D:D5:4E:75:BC:C9:67:42:DC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fa96daf-aef2-38f0-96a3-ce20e855905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:e0a0::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:88:e1:f0:c1:48:48:18:a5:64:c0:8a:d3:9a:ea:f3:df: 56:b0:48:79:7b:16:68:53:ab:6e:a7:2e:13:b9:44:07:67:36: 48:9a:d0:14:17:59:01:90:01:3e:79:98:ce:cf:cf:35:19:b1: 6d:0d:f3:0a:8d:4b:36:38:cd:e8:da:d0:1b:7b:33:8d:f1:c7: 7a:bd:07:2b:85:49:8e:82:ed:1e:19:ea:c5:e3:9f:c2:9b:a5: 04:43:4b:17:8c:49:99:7a:0f:21:53:08:1a:dc:9e:85:ec:c8: 75:65:39:a3:e5:1e:23:71:62:b2:d6:21:ee:29:aa:b7:be:13: 44:b2:d6:4d:4d:2d:7d:f4:da:ca:44:d2:49:81:ef:d2:27:d9: d1:b7:c6:32:68:5a:94:24:aa:ca:bf:6a:17:87:d4:60:8e:34: bf:42:86:88:20:34:89:82:83:fd:63:d3:c1:80:94:89:41:2b: 9f:9e:21:3b:65:45:c4:70:6f:c0:a1:c6:61:25:84:e4:f8:e0: 4d:7f:b9:7c:c9:a1:a0:c6:08:4a:1b:46:44:e7:97:72:2c:e8: c0:23:e0:43:68:1d:7f:1e:6c:16:74:48:6c:54:9a:f8:a5:56: c0:3f:c3:d5:d1:a5:50:69:db:5c:32:24:46:b6:74:0e:92:d1: 8d:11:fa:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Tq1RJsurKRL+uTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTI0NVoXDTI2MTIyNzE3NTI0NVowLzEtMCsGA1UEAxMk NDRhMzI3ZjgtMTNjMS00MmY5LWFmZGMtNmExMjkxZjJmYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKpVTonMBDp5K+dQOxYoUIVSKRnuWHRjO0BL uYqTEu8lCdazoJG06YbHSofbc8RdgIVxG4A947bHzPBURbozltRAXWZkYl3ym98Q +7QfCNR2MhAF5hY38aGNc0M46yt696gtptAei9xUxKTGvdxUVTp7vgOqAhs1rrim up5m+rjUBIKQT14Lbu5zTq6nHNLyYokRKRIYQmQMF/g6AKIziVzXZq+9dTwXPRdO Fqi1r5odo9SmsPEH9HBIGQ5GLudckBS5chAVt5qjVlNOAOHcLVBncxu2bHeRNyrC PX/PY5p2cv3ouXGbQ1LWdFOqcXNgW4r1adCdtVGYeBRDU/QTwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPZ2K9yHF1yxI8d1U51vMlnQtwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWZhOTZkYWYtYWVmMi0z OGYwLTk2YTMtY2UyMGU4NTU5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeeCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3ziOHwwUhIGKVkwIrTmurz31awSHl7FmhTq26nLhO5RAdnNkia 0BQXWQGQAT55mM7PzzUZsW0N8wqNSzY4zeja0Bt7M43xx3q9ByuFSY6C7R4Z6sXj n8KbpQRDSxeMSZl6DyFTCBrcnoXsyHVlOaPlHiNxYrLWIe4pqre+E0Sy1k1NLX30 2spE0kmB79In2dG3xjJoWpQkqsq/aheH1GCONL9ChoggNImCg/1j08GAlIlBK5+e ITtlRcRwb8ChxmElhOT44E1/uXzJoaDGCEobRkTnl3Is6MAj4ENoHX8ebBZ0SGxU mvilVsA/w9XRpVBp21wyJEa2dA6S0Y0R+sg= -----END CERTIFICATE-----Generated at Tue Sep 29 19:46:10 2026 by rpki-client