$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d8db640-3b60-30fd-be1d-b9e17092b89e.roa File: 2d8db640-3b60-30fd-be1d-b9e17092b89e.roa (raw, json) Hash identifier: CAz9ouG8yRpGZkgc6933ULdJdLet3IHcktYY3sGvWAs= Subject key identifier: 86:D0:22:B9:9C:EF:93:54:3F:AA:24:2D:78:56:79:FF:1F:61:0A:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A9BC84858DCCBEA44BC600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d8db640-3b60-30fd-be1d-b9e17092b89e.roa Signing time: Mon 28 Sep 2026 16:49:32 +0000 ROA not before: Mon 28 Sep 2026 16:49:32 +0000 ROA not after: Sun 27 Dec 2026 17:49:32 +0000 asID: 22773 IP address blocks: 2001:579:7098::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a9:bc:84:85:8d:cc:be:a4:4b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:49:32 2026 GMT Not After : Dec 27 17:49:32 2026 GMT Subject: CN=007bd9cd-e447-4fd8-8e28-e700cf5db378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:24:2e:67:60:81:f9:ad:56:59:d6:72:c1: e0:8b:41:a9:08:43:a3:8e:43:87:59:89:40:46:b6: e9:1a:e2:96:91:6f:11:9c:68:c0:20:e4:48:54:8d: 36:9c:03:63:2a:e7:11:12:44:bc:5d:dd:ab:ae:fb: 83:44:18:fe:3f:86:cf:76:90:52:4a:04:0a:37:c7: 02:2a:b1:cc:60:6a:b6:7d:ad:37:cb:68:1f:46:68: 43:eb:a4:59:a9:f0:9f:38:07:a9:6a:33:7a:f9:90: 92:34:4e:bd:fc:35:e8:8d:60:46:f3:7a:39:61:e4: e7:e1:e9:5f:05:bc:7e:57:90:82:f9:04:70:0b:fa: b0:de:2b:35:4d:53:82:a7:8f:af:09:89:02:99:26: 9f:6f:af:31:82:01:60:b5:a3:a0:7b:df:22:65:0c: fa:85:27:7d:37:8f:68:09:fc:22:d0:10:c2:bd:54: 40:7e:45:01:dd:36:9d:58:29:7a:e7:78:b5:44:80: c0:64:c2:0b:f5:20:ac:2e:4e:b6:aa:25:91:d7:95: 6c:ff:c9:8a:ec:65:36:78:90:43:7b:50:b1:f7:f7: 02:6c:bb:67:f6:b3:7d:63:0b:75:9b:a6:00:c2:3c: 21:53:17:7d:bd:6c:fe:93:bb:cf:b9:d3:cd:0b:69: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D0:22:B9:9C:EF:93:54:3F:AA:24:2D:78:56:79:FF:1F:61:0A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d8db640-3b60-30fd-be1d-b9e17092b89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:7098::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9a:37:f9:d2:9d:8b:d2:4b:d5:af:f9:74:41:38:05:e6:61: bc:85:d8:89:22:e7:f0:39:98:e7:be:51:52:b7:fb:cf:6f:06: 0a:e4:e3:59:3d:70:0a:27:e5:e8:60:ae:08:bd:0a:9d:8e:49: 42:9c:a8:29:fb:93:ea:db:0b:ae:cf:7c:88:53:1e:3f:f1:bf: ea:f9:09:8c:06:b3:3a:cb:7b:d1:69:38:bb:24:35:f0:fa:3d: c7:eb:e9:8a:ec:8a:43:e4:97:c3:4f:06:b8:03:18:c5:07:41: ae:be:42:32:c3:04:d9:09:74:ed:a0:67:dc:49:b3:56:e5:f2: 9a:84:ef:fd:34:82:5a:be:3c:e8:9b:98:88:7d:30:24:c9:39: 36:c4:71:44:37:d6:83:fc:cc:66:ad:b4:54:19:fe:c1:80:40: 2e:bd:56:8f:44:05:29:e1:a7:b7:83:f3:53:ea:00:66:e9:0a: 01:9f:cb:89:52:6b:5e:96:de:28:ca:c5:96:67:6d:b6:e4:fa: db:53:9a:94:d7:e4:3f:c8:14:ef:3f:95:00:63:04:6b:b7:9f: 7e:13:c8:2a:cc:8e:cf:9c:29:7f:51:a9:7a:e0:cd:84:23:9d: 15:8c:40:2c:a7:e8:b8:db:54:0d:25:3e:0a:d9:4b:02:bf:f1: 55:6e:f7:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TqbyEhY3MvqRLxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDkzMloXDTI2MTIyNzE3NDkzMlowLzEtMCsGA1UEAxMk MDA3YmQ5Y2QtZTQ0Ny00ZmQ4LThlMjgtZTcwMGNmNWRiMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+AkLmdggfmtVlnWcsHgi0GpCEOjjkOHWYlA RrbpGuKWkW8RnGjAIORIVI02nANjKucREkS8Xd2rrvuDRBj+P4bPdpBSSgQKN8cC KrHMYGq2fa03y2gfRmhD66RZqfCfOAepajN6+ZCSNE69/DXojWBG83o5YeTn4elf Bbx+V5CC+QRwC/qw3is1TVOCp4+vCYkCmSafb68xggFgtaOge98iZQz6hSd9N49o Cfwi0BDCvVRAfkUB3TadWCl653i1RIDAZMIL9SCsLk62qiWR15Vs/8mK7GU2eJBD e1Cx9/cCbLtn9rN9Ywt1m6YAwjwhUxd9vWz+k7vPudPNC2khdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbQIrmc75NUP6okLXhWef8fYQphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ4ZGI2NDAtM2I2MC0z MGZkLWJlMWQtYjllMTcwOTJiODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeXCY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABKaN/nSnYvSS9Wv+XRBOAXmYbyF2Iki5/A5mOe+UVK3+89vBgrk 41k9cAon5ehgrgi9Cp2OSUKcqCn7k+rbC67PfIhTHj/xv+r5CYwGszrLe9FpOLsk NfD6Pcfr6YrsikPkl8NPBrgDGMUHQa6+QjLDBNkJdO2gZ9xJs1bl8pqE7/00glq+ POibmIh9MCTJOTbEcUQ31oP8zGattFQZ/sGAQC69Vo9EBSnhp7eD81PqAGbpCgGf y4lSa16W3ijKxZZnbbbk+ttTmpTX5D/IFO8/lQBjBGu3n34TyCrMjs+cKX9RqXrg zYQjnRWMQCyn6LjbVA0lPgrZSwK/8VVu9wM= -----END CERTIFICATE-----Generated at Wed Sep 30 19:50:33 2026 by rpki-client