$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae21e3d-f50a-3092-a61b-c2a57814bd4c.roa File: 3ae21e3d-f50a-3092-a61b-c2a57814bd4c.roa (raw, json) Hash identifier: S3tJOZ8t0W1qkdTYow9ZdeaG0eE4QP+ZIm9hSJV8Hfc= Subject key identifier: 1C:02:CB:A5:E3:B0:09:12:E0:BD:28:5C:63:92:FB:F3:10:FC:53:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AD0E44FFBEEFB4A9EBE8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae21e3d-f50a-3092-a61b-c2a57814bd4c.roa Signing time: Mon 28 Sep 2026 16:56:14 +0000 ROA not before: Mon 28 Sep 2026 16:56:14 +0000 ROA not after: Sun 27 Dec 2026 17:56:14 +0000 asID: 22773 IP address blocks: 2600:8808:1506::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:0e:44:ff:be:ef:b4:a9:eb:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:56:14 2026 GMT Not After : Dec 27 17:56:14 2026 GMT Subject: CN=6d8b2e64-ec07-49bb-bd52-5fdeeb7be2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:03:7c:ed:d4:12:b7:18:2d:32:c9:8f:28: 07:0e:30:7b:5d:92:e4:37:b1:29:2b:f4:01:98:dc: f8:eb:86:95:81:41:64:7e:af:ba:41:53:96:6c:c9: f7:79:f0:67:9f:3a:9d:6b:c1:b8:41:91:aa:6f:17: c0:68:a8:79:6e:19:52:07:31:95:63:c4:c1:ce:3c: a5:95:8d:a9:98:be:f0:f2:a1:00:48:b4:4f:4c:a5: 07:26:d7:86:14:85:ef:45:6c:b7:5e:58:7b:7f:ff: 2c:97:b8:1a:1a:04:77:f1:ee:9f:7b:b6:a3:d7:4f: de:2e:ee:0e:80:6d:7e:35:e1:66:80:5e:b7:42:25: 16:96:6c:59:bd:7e:b6:d4:50:c9:46:f2:1c:cb:e3: 61:53:7f:2e:09:bc:0f:ac:ed:2d:65:75:da:36:82: e6:d0:cf:ad:1d:4b:66:6b:83:db:7e:78:d4:4e:c3: 04:0a:c7:b2:ac:11:14:6d:8c:23:b2:bd:ac:27:7c: f7:a7:09:40:b0:8c:91:79:d6:76:db:db:9a:a0:c2: d7:24:d4:5c:db:7b:23:1d:e0:73:66:3c:19:9e:cc: 0f:99:d2:93:0a:27:93:85:ff:c8:a3:5d:db:38:11: e1:09:73:ee:eb:fd:31:1d:74:6b:72:a2:05:b2:15: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:CB:A5:E3:B0:09:12:E0:BD:28:5C:63:92:FB:F3:10:FC:53:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae21e3d-f50a-3092-a61b-c2a57814bd4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8808:1506::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:24:98:64:0e:ec:2f:4b:00:7d:7f:24:2f:63:2e:bd:fd:b6: 68:ff:89:fd:a8:fc:64:4b:47:c1:b5:7e:88:58:ab:e5:98:d4: fd:34:5c:86:eb:de:bc:2c:f4:79:e5:84:39:d4:c6:54:a7:32: b1:a3:41:05:65:de:cc:e1:18:b0:02:ea:9f:7c:e4:b1:59:8c: 22:91:6c:21:20:f3:bd:d4:a9:4c:38:30:d5:c2:53:a2:19:64: 3f:11:9b:ad:1b:57:99:23:f3:2e:a2:28:8f:aa:05:33:58:38: 77:6f:0c:ef:b4:78:93:78:91:b5:cd:d0:a6:1c:2f:38:19:3f: fe:d9:0a:db:fd:eb:81:c6:44:16:3c:fa:17:5a:ee:48:f0:17: d3:08:ab:97:94:8e:81:2c:d2:45:87:6c:2a:d2:a2:c4:e2:c6: 8c:5f:62:1f:25:1b:91:98:56:d9:b3:b7:f1:33:de:cb:d0:6c: 4c:3d:62:a2:22:44:ce:93:57:04:84:3e:47:92:12:3e:92:4e: 8d:a7:05:72:8b:d9:8f:f2:d3:8b:ff:0c:6e:1d:a3:31:9a:9b: 7c:52:72:e6:1a:ba:cc:68:6c:75:00:ee:e8:fe:b5:18:ac:15: 1f:a3:4e:7c:0b:c4:5d:24:fa:00:e6:77:d8:6a:96:c6:7e:67: 8b:c4:75:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TrQ5E/77vtKnr6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTYxNFoXDTI2MTIyNzE3NTYxNFowLzEtMCsGA1UEAxMk NmQ4YjJlNjQtZWMwNy00OWJiLWJkNTItNWZkZWViN2JlMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVgDfO3UErcYLTLJjygHDjB7XZLkN7EpK/QB mNz464aVgUFkfq+6QVOWbMn3efBnnzqda8G4QZGqbxfAaKh5bhlSBzGVY8TBzjyl lY2pmL7w8qEASLRPTKUHJteGFIXvRWy3Xlh7f/8sl7gaGgR38e6fe7aj10/eLu4O gG1+NeFmgF63QiUWlmxZvX621FDJRvIcy+NhU38uCbwPrO0tZXXaNoLm0M+tHUtm a4PbfnjUTsMECseyrBEUbYwjsr2sJ3z3pwlAsIyRedZ229uaoMLXJNRc23sjHeBz ZjwZnswPmdKTCieThf/Io13bOBHhCXPu6/0xHXRrcqIFshVxPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwCy6XjsAkS4L0oXGOS+/MQ/FM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FlMjFlM2QtZjUwYS0z MDkyLWE2MWItYzJhNTc4MTRiZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgCICBUG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKUkmGQO7C9LAH1/JC9jLr39tmj/if2o/GRLR8G1fohYq+WY1P00 XIbr3rws9HnlhDnUxlSnMrGjQQVl3szhGLAC6p985LFZjCKRbCEg873UqUw4MNXC U6IZZD8Rm60bV5kj8y6iKI+qBTNYOHdvDO+0eJN4kbXN0KYcLzgZP/7ZCtv964HG RBY8+hda7kjwF9MIq5eUjoEs0kWHbCrSosTixoxfYh8lG5GYVtmzt/Ez3svQbEw9 YqIiRM6TVwSEPkeSEj6STo2nBXKL2Y/y04v/DG4dozGam3xScuYausxobHUA7uj+ tRisFR+jTnwLxF0k+gDmd9hqlsZ+Z4vEdes= -----END CERTIFICATE-----Generated at Tue Sep 29 19:18:43 2026 by rpki-client