$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20f18c7d-96b5-3c32-ac19-090447b794fe.roa File: 20f18c7d-96b5-3c32-ac19-090447b794fe.roa (raw, json) Hash identifier: /3a+Zy1TwxA3Ifc2D0b90esPS4nGtTOed9ymQCge4Dc= Subject key identifier: 42:1E:28:47:A8:33:82:C1:AA:DF:E7:1F:E3:08:B5:19:2F:9B:4C:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AC37387F781713BB3C1980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20f18c7d-96b5-3c32-ac19-090447b794fe.roa Signing time: Mon 28 Sep 2026 16:54:32 +0000 ROA not before: Mon 28 Sep 2026 16:54:32 +0000 ROA not after: Sun 27 Dec 2026 17:54:32 +0000 asID: 22773 IP address blocks: 2600:8804:e48::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ac:37:38:7f:78:17:13:bb:3c:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:54:32 2026 GMT Not After : Dec 27 17:54:32 2026 GMT Subject: CN=746e1a1b-17f3-45d4-8f19-c57ee4cda765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f5:89:5d:0f:38:33:86:76:b3:2c:a4:12:22: 23:96:1a:54:75:9f:77:2a:d1:ba:29:6b:23:46:9f: 91:ee:59:db:6f:88:54:29:a9:1a:6b:15:02:94:e7: ea:41:fa:36:7b:ce:56:fb:c1:7f:13:53:d4:7b:22: ff:18:27:f8:65:27:15:6f:9c:e6:05:97:a9:e9:d0: af:76:cc:ee:6a:69:1d:82:df:3c:8c:9b:d7:96:69: 15:58:61:d1:61:08:0a:da:84:d2:09:e1:30:b8:f0: c8:9d:bd:2c:0f:e8:a5:39:2e:5d:85:4f:e3:7a:df: 2e:f2:eb:92:01:af:a3:a1:6c:6e:4d:a6:89:7e:86: be:5c:2a:b0:69:a3:ad:be:52:3e:47:27:32:8a:f0: 6c:88:58:1c:00:24:b2:4c:bc:56:9f:65:47:40:da: 59:6e:e5:97:6e:da:4c:34:68:70:26:ed:0e:04:55: dd:3c:c5:92:2b:fd:02:ab:87:80:e9:c7:47:d2:69: a0:aa:67:73:e4:43:fe:d9:9a:4e:21:2d:ee:9a:ab: 01:30:39:dd:0d:64:2b:d1:1a:98:6e:be:a9:26:fc: 5b:dd:27:cd:2e:f8:24:77:04:6e:e0:62:ff:9c:b6: 01:e7:e7:e6:82:a4:2f:66:9c:28:e7:23:07:83:9a: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:28:47:A8:33:82:C1:AA:DF:E7:1F:E3:08:B5:19:2F:9B:4C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20f18c7d-96b5-3c32-ac19-090447b794fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8804:e48::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3f:a3:7c:b8:db:cc:99:bf:fd:c3:75:cd:6e:d8:31:61:bd: 79:37:ef:87:06:1b:00:66:bc:b1:dd:39:9b:20:2d:e2:85:b6: 51:a1:2e:c4:07:18:3e:db:50:34:12:2b:43:32:a4:61:2d:70: 51:ce:da:2c:36:e5:39:a8:84:1c:56:e2:0d:f3:fa:10:dc:46: bd:ed:32:11:31:df:3b:27:e6:b3:be:21:a2:4e:a8:37:c7:d1: 3b:a5:c8:6a:ba:76:c7:8e:a5:7a:23:ad:cf:77:65:c6:dd:d8: 83:40:cc:74:53:d4:d2:4c:1a:3f:f6:cf:98:8d:47:fa:a9:2c: ff:82:11:9a:3f:1c:12:14:0a:a1:ea:62:fe:48:62:d1:32:01: 31:bd:58:1d:9b:1a:7c:3c:37:73:c6:15:e2:79:23:33:a5:e4: e9:88:ba:a3:3f:d9:de:96:da:b3:74:0c:c1:65:c4:9d:6c:a3: 13:c1:0a:20:70:0c:ca:05:c4:37:ab:6a:08:f7:a1:6d:77:12: 7f:e4:ce:e3:a5:e0:43:8a:30:20:2b:68:18:5d:3e:73:c6:4c: c9:be:9f:2e:35:7d:a7:ab:f3:1a:a6:4e:11:a1:69:b9:f4:b2: fd:f5:b4:a6:a0:18:86:29:aa:8d:27:b0:2c:56:1d:16:2f:a7: 49:49:4b:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TrDc4f3gXE7s8GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTQzMloXDTI2MTIyNzE3NTQzMlowLzEtMCsGA1UEAxMk NzQ2ZTFhMWItMTdmMy00NWQ0LThmMTktYzU3ZWU0Y2RhNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPWJXQ84M4Z2syykEiIjlhpUdZ93KtG6KWsj Rp+R7lnbb4hUKakaaxUClOfqQfo2e85W+8F/E1PUeyL/GCf4ZScVb5zmBZep6dCv dszuamkdgt88jJvXlmkVWGHRYQgK2oTSCeEwuPDInb0sD+ilOS5dhU/jet8u8uuS Aa+joWxuTaaJfoa+XCqwaaOtvlI+RycyivBsiFgcACSyTLxWn2VHQNpZbuWXbtpM NGhwJu0OBFXdPMWSK/0Cq4eA6cdH0mmgqmdz5EP+2ZpOIS3umqsBMDndDWQr0RqY br6pJvxb3SfNLvgkdwRu4GL/nLYB5+fmgqQvZpwo5yMHg5pKHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIeKEeoM4LBqt/nH+MItRkvm0zDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBmMThjN2QtOTZiNS0z YzMyLWFjMTktMDkwNDQ3Yjc5NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIBA5I MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKI/o3y428yZv/3Ddc1u2DFhvXk374cGGwBmvLHdOZsgLeKFtlGh LsQHGD7bUDQSK0MypGEtcFHO2iw25TmohBxW4g3z+hDcRr3tMhEx3zsn5rO+IaJO qDfH0TulyGq6dseOpXojrc93Zcbd2INAzHRT1NJMGj/2z5iNR/qpLP+CEZo/HBIU CqHqYv5IYtEyATG9WB2bGnw8N3PGFeJ5IzOl5OmIuqM/2d6W2rN0DMFlxJ1soxPB CiBwDMoFxDeragj3oW13En/kzuOl4EOKMCAraBhdPnPGTMm+ny41faer8xqmThGh abn0sv31tKagGIYpqo0nsCxWHRYvp0lJSxc= -----END CERTIFICATE-----Generated at Sun Oct 4 02:15:12 2026 by rpki-client