$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0397f09-41d1-37ee-a29c-482f718b6be5.roa File: d0397f09-41d1-37ee-a29c-482f718b6be5.roa (raw, json) Hash identifier: MHZVnk9UGdXJlN5PIq9FA+NatO5UUHFQwxEh712eEj8= Subject key identifier: 13:B2:E3:DA:17:65:BF:A0:A5:8C:C8:45:56:81:76:A0:D9:E4:34:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D092BB21B80E3C312FF67B200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0397f09-41d1-37ee-a29c-482f718b6be5.roa Signing time: Mon 02 Mar 2026 14:51:53 +0000 ROA not before: Mon 02 Mar 2026 14:51:53 +0000 ROA not after: Sun 31 May 2026 13:51:53 +0000 asID: 22773 IP address blocks: 2001:57a:1207::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:2b:b2:1b:80:e3:c3:12:ff:67:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 14:51:53 2026 GMT Not After : May 31 13:51:53 2026 GMT Subject: CN=c3b6f9e3-f9c4-4e55-a87e-ac21b86877c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:77:76:26:c2:2a:d1:8f:ee:b9:dc:d8:9a: 25:df:46:1b:e1:12:37:6b:71:d1:de:d6:1b:7f:8f: 76:c3:da:d8:83:85:f7:2c:72:80:69:cf:77:57:3e: a4:e7:11:56:b7:db:a3:63:16:a2:3a:50:a1:be:34: 44:64:01:bd:8c:36:d8:e3:66:d0:3c:31:66:50:e7: 15:56:b5:32:10:f1:45:cc:c9:48:a3:28:8c:1e:66: de:a5:d6:9a:2b:bb:bd:7e:4d:f7:fd:43:21:aa:57: a9:4c:b8:f2:09:18:c6:b9:de:17:52:79:e2:b9:bc: 00:78:cf:51:1f:9d:50:99:cb:1c:bf:69:19:0b:0d: a3:09:ab:34:a5:d0:69:2f:eb:73:76:a2:7b:3a:25: 2c:81:d3:4a:9a:4c:95:97:b3:b4:b4:82:47:68:f9: f7:bc:e0:0d:91:7e:51:f8:65:29:4a:e2:99:93:dc: c9:f4:be:ae:6a:5e:25:5a:0f:e1:dc:9e:00:73:ab: d1:86:35:da:c5:42:35:ac:85:bc:37:d2:29:5c:26: 37:b4:da:96:2b:28:02:85:55:d4:80:38:bf:62:c5: e0:52:14:ac:c0:66:16:29:30:51:de:76:eb:f3:49: 91:98:7f:78:a9:00:04:0a:87:e9:b2:b7:ba:50:6d: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B2:E3:DA:17:65:BF:A0:A5:8C:C8:45:56:81:76:A0:D9:E4:34:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0397f09-41d1-37ee-a29c-482f718b6be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:1207::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f8:33:d3:10:b5:a3:09:01:4b:0f:1e:fc:1b:bc:9f:fe:24: e8:a1:79:ae:f3:8b:9f:b3:ef:3f:26:13:40:3e:3d:36:3c:3f: f9:fe:8f:61:21:dc:85:19:66:3b:a1:15:e6:d5:e9:a5:cb:ab: e3:34:a8:4d:27:dd:c0:6e:5b:39:ec:a5:60:ee:80:cd:ca:c1: 1d:d6:31:4c:07:ad:00:f1:e7:a9:ce:f9:96:7c:fd:61:1f:e1: 4c:f1:d7:16:da:45:46:76:c3:35:41:21:14:a7:72:b7:8c:3e: 7b:27:a1:dc:21:78:67:2c:4f:9e:43:00:a6:f3:2f:57:59:43: c6:99:15:e0:f0:64:3f:3a:03:3a:1c:8d:dc:d8:46:43:d5:eb: 48:41:39:0c:8e:79:98:c7:53:25:c4:19:d4:31:4c:c8:84:c9: ff:05:81:cf:9f:b0:f8:93:3c:b2:94:b6:e9:9a:92:42:96:80: 73:cc:bd:45:76:f3:a4:5d:64:2e:80:24:9f:ef:30:b1:98:80: 2b:26:40:e8:d1:6f:ac:37:3a:ed:04:79:ea:bb:7f:56:fd:67: 7c:5d:b7:66:9a:13:f0:ce:3f:e1:22:f0:8e:8b:23:13:b2:63: fe:20:84:14:00:af:b1:96:a2:64:f7:b4:58:b7:29:19:7b:5a: 35:61:92:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JK7IbgOPDEv9nsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMwMjE0NTE1M1oXDTI2MDUzMTEzNTE1M1owLzEtMCsGA1UEAxMk YzNiNmY5ZTMtZjljNC00ZTU1LWE4N2UtYWMyMWI4Njg3N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjt3dibCKtGP7rnc2Jol30Yb4RI3a3HR3tYb f492w9rYg4X3LHKAac93Vz6k5xFWt9ujYxaiOlChvjREZAG9jDbY42bQPDFmUOcV VrUyEPFFzMlIoyiMHmbepdaaK7u9fk33/UMhqlepTLjyCRjGud4XUnniubwAeM9R H51Qmcscv2kZCw2jCas0pdBpL+tzdqJ7OiUsgdNKmkyVl7O0tIJHaPn3vOANkX5R +GUpSuKZk9zJ9L6ual4lWg/h3J4Ac6vRhjXaxUI1rIW8N9IpXCY3tNqWKygChVXU gDi/YsXgUhSswGYWKTBR3nbr80mRmH94qQAECofpsre6UG2YKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBOy49oXZb+gpYzIRVaBdqDZ5DQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDAzOTdmMDktNDFkMS0z N2VlLWEyOWMtNDgyZjcxOGI2YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFehIH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGT4M9MQtaMJAUsPHvwbvJ/+JOihea7zi5+z7z8mE0A+PTY8P/n+ j2Eh3IUZZjuhFebV6aXLq+M0qE0n3cBuWznspWDugM3KwR3WMUwHrQDx56nO+ZZ8 /WEf4Uzx1xbaRUZ2wzVBIRSncreMPnsnodwheGcsT55DAKbzL1dZQ8aZFeDwZD86 AzocjdzYRkPV60hBOQyOeZjHUyXEGdQxTMiEyf8Fgc+fsPiTPLKUtumakkKWgHPM vUV286RdZC6AJJ/vMLGYgCsmQOjRb6w3Ou0Eeeq7f1b9Z3xdt2aaE/DOP+Ei8I6L IxOyY/4ghBQAr7GWomT3tFi3KRl7WjVhkqA= -----END CERTIFICATE-----Generated at Mon Mar 9 10:02:37 2026 by rpki-client