$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a16af86-0a80-3f6b-9001-1a733bb38c4b.roa File: 4a16af86-0a80-3f6b-9001-1a733bb38c4b.roa (raw, json) Hash identifier: C3uexdRfFNByo+6Qrlpk82g32ul8DwSrPpWSeWE6AjY= Subject key identifier: 3B:78:51:F8:E3:95:67:85:EF:32:A2:1A:4C:8B:83:85:AA:4B:D8:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F0ED239EC89F688A4CDA71720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a16af86-0a80-3f6b-9001-1a733bb38c4b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 62957 IP address blocks: 2001:57a:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:39:ec:89:f6:88:a4:cd:a7:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=2f7eb41f-4f66-46c4-8fee-84801e010d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:27:b2:d4:08:06:2f:28:b6:eb:7e:48:63: aa:bb:c7:3f:65:90:31:14:61:43:11:89:6c:4e:83: 71:21:cd:0b:bf:90:39:c6:df:a5:7f:c5:90:56:e5: 9a:c9:06:da:a5:03:4f:43:ca:8f:95:2e:dc:3f:da: 2a:a7:42:63:db:18:ec:07:fb:b4:6c:b6:52:a9:8e: 7e:dd:fd:22:c1:4a:50:86:41:68:f4:45:38:74:ea: fc:22:29:44:e2:12:8d:07:ae:d7:9d:fd:7d:ae:5e: 76:3a:e3:ab:0d:5c:83:40:b6:39:a6:b9:bc:7a:9f: f0:72:29:0e:16:92:9f:9c:7c:ba:ad:32:f4:f4:7d: ca:83:5f:95:c9:3c:45:1b:27:d9:fb:dc:5f:0e:8a: 41:b1:03:dd:75:78:87:d2:5a:90:69:ef:a1:bb:86: 42:fc:0a:5b:c6:6e:37:5f:cb:e6:3b:b3:70:b8:53: 73:17:13:4e:31:a8:b9:1e:9d:0c:9b:94:a4:4b:ae: 14:76:76:8e:f9:97:f5:db:2b:c6:52:71:20:9c:1e: 37:e1:c3:4c:cd:b9:0c:6a:4f:a8:81:a2:d9:67:8a: 94:45:3d:b9:64:95:94:fc:d4:b3:0d:ce:89:7d:3b: b4:b4:30:17:36:a8:bd:ef:9e:65:e3:68:27:43:c6: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:78:51:F8:E3:95:67:85:EF:32:A2:1A:4C:8B:83:85:AA:4B:D8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a16af86-0a80-3f6b-9001-1a733bb38c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:f300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:93:be:a4:f7:d1:14:eb:28:ad:7d:fd:2b:58:e4:cc:27:2d: fa:0b:aa:30:88:32:f8:e3:58:2c:4f:2a:88:2d:3c:6a:b0:26: dd:7b:a8:86:cc:8a:7f:bb:54:1f:cb:bd:c8:c7:ca:77:6f:8e: 83:f1:c9:af:e6:3a:ba:ec:f1:54:bb:1e:7f:87:de:98:aa:ed: e4:87:c6:30:fa:28:30:59:89:8a:d3:b8:7a:18:33:b6:cc:47: f6:ad:9e:b6:5c:4c:13:e3:a1:ba:b6:71:19:66:c7:24:ee:a0: 10:fe:d0:cc:40:75:87:8f:a6:4c:e5:bf:f4:25:ed:fd:45:20: a5:d3:7a:20:ea:7f:54:42:d1:3b:7a:d8:7f:c4:ec:7d:f0:b0: 14:b6:5d:f1:61:e9:4c:a0:37:40:0b:b9:c1:8a:cd:87:21:bd: 9d:ed:a3:a0:c1:e5:d4:61:80:a0:4b:79:d9:00:fc:5a:53:66: 8d:36:95:e5:20:09:4f:5c:16:fb:01:97:d5:a3:bc:be:50:88: a4:d1:48:72:95:52:4e:6f:5d:32:a4:a6:d0:ee:3c:a5:6a:0f: de:9a:39:eb:e1:49:78:7f:8b:6b:c7:1b:6d:6c:25:82:e1:08: a8:3e:b4:8f:5b:14:1c:55:f3:bc:55:31:b2:e8:d1:93:3c:90: 33:fe:bf:fa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8O0jnsifaIpM2nFyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MmY3ZWI0MWYtNGY2Ni00NmM0LThmZWUtODQ4MDFlMDEwZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wnstQIBi8otut+SGOqu8c/ZZAxFGFDEYls ToNxIc0Lv5A5xt+lf8WQVuWayQbapQNPQ8qPlS7cP9oqp0Jj2xjsB/u0bLZSqY5+ 3f0iwUpQhkFo9EU4dOr8IilE4hKNB67Xnf19rl52OuOrDVyDQLY5prm8ep/wcikO FpKfnHy6rTL09H3Kg1+VyTxFGyfZ+9xfDopBsQPddXiH0lqQae+hu4ZC/Apbxm43 X8vmO7NwuFNzFxNOMai5Hp0Mm5SkS64UdnaO+Zf12yvGUnEgnB434cNMzbkMak+o gaLZZ4qURT25ZJWU/NSzDc6JfTu0tDAXNqi9755l42gnQ8aRwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDt4UfjjlWeF7zKiGkyLg4WqS9hMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGExNmFmODYtMGE4MC0z ZjZiLTkwMDEtMWE3MzNiYjM4YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFevMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYpO+pPfRFOsorX39K1jkzCct+guqMIgy+ONYLE8qiC08arAm3Xuo hsyKf7tUH8u9yMfKd2+Og/HJr+Y6uuzxVLsef4femKrt5IfGMPooMFmJitO4ehgz tsxH9q2etlxME+OhurZxGWbHJO6gEP7QzEB1h4+mTOW/9CXt/UUgpdN6IOp/VELR O3rYf8TsffCwFLZd8WHpTKA3QAu5wYrNhyG9ne2joMHl1GGAoEt52QD8WlNmjTaV 5SAJT1wW+wGX1aO8vlCIpNFIcpVSTm9dMqSm0O48pWoP3po56+FJeH+La8cbbWwl guEIqD60j1sUHFXzvFUxsujRkzyQM/6/+g== -----END CERTIFICATE-----Generated at Fri Sep 18 10:02:07 2026 by rpki-client