$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/722717b7-bb2c-34dd-8885-a9a77fa64185.roa File: 722717b7-bb2c-34dd-8885-a9a77fa64185.roa (raw, json) Hash identifier: 0T6+N+FTAMW9BXQjUpWc7+n53y5ms2FkIIjBsKRxTHg= Subject key identifier: 32:91:21:D7:CA:DB:33:4B:B8:96:7D:A7:00:41:3A:BE:97:0B:6F:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AD5B1418833756E2C28740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/722717b7-bb2c-34dd-8885-a9a77fa64185.roa Signing time: Mon 28 Sep 2026 16:56:50 +0000 ROA not before: Mon 28 Sep 2026 16:56:50 +0000 ROA not after: Sun 27 Dec 2026 17:56:50 +0000 asID: 33438 IP address blocks: 2001:57a:507::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:5b:14:18:83:37:56:e2:c2:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:56:50 2026 GMT Not After : Dec 27 17:56:50 2026 GMT Subject: CN=fc061cbe-2a80-4349-846c-d0fe0e130583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:ce:22:3b:d9:48:b4:ba:3b:dd:36:09:56: e0:47:19:2e:39:c8:50:c7:1b:af:e3:5e:1b:2d:3f: 45:15:d3:00:34:60:81:e7:b7:a9:a0:39:01:49:39: 47:e1:c1:fb:0b:dc:c1:93:13:f6:d2:2d:2a:2a:7a: 08:4e:d9:a7:4d:81:24:11:af:ab:c1:f2:02:b5:ae: 7a:ed:74:9b:d6:d9:83:c8:f5:8a:79:56:6f:de:f4: e7:ed:61:4f:12:b1:90:d0:a0:5c:17:3a:93:de:9e: f7:f3:a5:71:8c:65:bb:67:a8:a2:6b:b0:12:fa:74: a6:b0:a5:5a:e5:7d:e3:3c:0c:5e:34:64:6a:b9:db: d4:fb:2b:e7:ce:60:c2:5f:ad:74:40:d3:ec:ae:92: 79:28:c6:b9:31:c3:c1:e5:bb:f2:21:4a:07:7c:ca: b8:ee:78:aa:66:e7:6f:31:21:ea:2c:ce:b1:0a:de: 06:cd:21:9e:d0:78:d7:01:4c:5d:53:68:db:0c:ac: e9:92:5d:38:a0:cc:a9:44:4e:f8:cb:e4:13:d5:8c: 38:b1:80:db:95:b2:ce:67:78:1f:75:0b:22:91:87: d3:6d:50:98:03:cf:d5:61:7f:28:46:c8:e9:3b:84: a5:2b:2d:38:fa:c5:b9:12:41:59:13:1c:d7:63:28: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:91:21:D7:CA:DB:33:4B:B8:96:7D:A7:00:41:3A:BE:97:0B:6F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/722717b7-bb2c-34dd-8885-a9a77fa64185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:507::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8c:6d:b8:52:6a:58:45:a8:c0:ba:b5:79:e2:38:97:7c:74: 37:e6:c5:e8:a3:c0:18:34:f7:ac:c4:2f:45:a3:ac:87:16:1d: dd:44:5e:d3:c5:dc:e3:fc:0d:ae:14:0a:1b:71:4a:8b:e2:a8: 7a:63:f7:77:f6:f9:c2:5a:b6:85:0e:b1:a8:b0:f6:03:f8:25: 1e:b0:d2:2d:c6:5b:0b:f8:cf:54:28:6a:1a:f0:19:83:26:58: 3a:1c:c0:23:16:5e:c4:98:93:98:1a:7a:88:3b:6e:02:48:75: f2:6e:4a:db:fe:9e:dd:d1:1a:d8:61:d8:f3:61:5e:9d:94:86: 10:c2:c2:63:e0:b6:00:4b:65:28:ed:f2:64:00:f7:d5:59:34: e2:c2:e8:19:2f:34:49:b9:bd:a0:d4:83:a6:0a:ce:df:4b:78: f8:44:70:a3:69:48:90:d8:a2:ad:b8:82:97:0f:3c:b2:ba:94: 94:a7:12:48:e7:9f:76:f1:08:97:37:38:fc:79:38:60:18:c0: 05:00:8f:cb:55:76:09:af:6a:09:47:fd:64:e9:ee:75:bc:4d: dc:99:a4:51:76:c2:47:1b:a7:5f:6f:c7:cc:77:a9:5c:f2:d0: e6:55:e8:f4:9e:e8:00:6f:c8:30:2a:d6:6e:31:28:32:40:12: fa:79:5e:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TrVsUGIM3VuLCh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTY1MFoXDTI2MTIyNzE3NTY1MFowLzEtMCsGA1UEAxMk ZmMwNjFjYmUtMmE4MC00MzQ5LTg0NmMtZDBmZTBlMTMwNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsofOIjvZSLS6O902CVbgRxkuOchQxxuv414b LT9FFdMANGCB57epoDkBSTlH4cH7C9zBkxP20i0qKnoITtmnTYEkEa+rwfICta56 7XSb1tmDyPWKeVZv3vTn7WFPErGQ0KBcFzqT3p7386VxjGW7Z6iia7AS+nSmsKVa 5X3jPAxeNGRqudvU+yvnzmDCX610QNPsrpJ5KMa5McPB5bvyIUoHfMq47niqZudv MSHqLM6xCt4GzSGe0HjXAUxdU2jbDKzpkl04oMypRE74y+QT1Yw4sYDblbLOZ3gf dQsikYfTbVCYA8/VYX8oRsjpO4SlKy04+sW5EkFZExzXYyiP/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKRIdfK2zNLuJZ9pwBBOr6XC29IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzIyNzE3YjctYmIyYy0z NGRkLTg4ODUtYTlhNzdmYTY0MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFegUH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJWMbbhSalhFqMC6tXniOJd8dDfmxeijwBg096zEL0WjrIcWHd1E XtPF3OP8Da4UChtxSoviqHpj93f2+cJatoUOsaiw9gP4JR6w0i3GWwv4z1Qoahrw GYMmWDocwCMWXsSYk5gaeog7bgJIdfJuStv+nt3RGthh2PNhXp2UhhDCwmPgtgBL ZSjt8mQA99VZNOLC6BkvNEm5vaDUg6YKzt9LePhEcKNpSJDYoq24gpcPPLK6lJSn Ekjnn3bxCJc3OPx5OGAYwAUAj8tVdgmvaglH/WTp7nW8TdyZpFF2wkcbp19vx8x3 qVzy0OZV6PSe6ABvyDAq1m4xKDJAEvp5XjA= -----END CERTIFICATE-----Generated at Mon Oct 26 00:52:55 2026 by rpki-client