$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa File: 3d20060e-f449-30c4-8530-5b626095efd1.roa (raw, json) Hash identifier: iZP5bSQdLXqOeftQUTADKX0L8T4rAHZ5gWeKmp0tCLk= Subject key identifier: 8E:30:FD:87:78:68:37:94:15:A4:41:E4:E9:30:A4:1A:1B:B3:1D:E4 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584DEB15E5DE836E41352E7361C0 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa Signing time: Fri 22 May 2026 13:00:31 +0000 ROA not before: Fri 22 May 2026 13:00:31 +0000 ROA not after: Thu 20 Aug 2026 13:00:31 +0000 asID: 21658 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:e5:de:83:6e:41:35:2e:73:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: May 22 13:00:31 2026 GMT Not After : Aug 20 13:00:31 2026 GMT Subject: CN=b2d061fe-fd39-412d-92d4-d752c544ec42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:6a:32:93:50:35:0c:5c:c5:69:f4:56:fe: db:d5:b7:82:4d:f2:e6:0e:2b:26:6b:7c:6a:01:f8: b6:21:29:3c:81:4f:1c:65:2f:d5:b1:75:d1:9a:c1: 33:82:97:14:33:f1:ec:1f:51:89:66:71:f3:1b:c7: 70:52:3e:5a:22:15:b5:fd:59:cb:82:27:e9:40:b5: 37:63:38:c1:5a:8b:bd:a3:c6:3b:cf:59:aa:9e:a2: 98:18:cd:44:be:a8:73:7b:80:1d:bc:bc:28:ff:35: 08:51:93:e7:60:c9:c5:5d:d4:13:de:03:af:a9:c9: 62:87:72:35:2c:fd:91:ad:2e:1e:b0:ff:80:7f:59: 9c:a8:51:ed:73:64:66:55:73:0c:e6:ce:a7:66:67: 6e:bd:74:45:50:e2:0b:a7:bc:b9:a5:63:ac:76:a4: a2:9d:0e:ca:9f:b1:74:19:4d:fc:9e:95:d7:05:bc: 45:ac:b7:d1:37:39:d6:1a:7b:43:be:2e:2b:7b:c7: e3:84:1e:60:96:fe:5c:d1:d6:ac:73:1e:2f:48:e4: 76:d9:77:ed:b3:7c:48:fa:b5:82:ef:eb:47:2f:e3: 43:fd:35:b9:89:fd:af:52:ca:bf:56:8e:91:4c:34: e4:f8:15:b9:eb:e8:18:a8:dd:2d:06:a5:eb:c7:ef: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:30:FD:87:78:68:37:94:15:A4:41:E4:E9:30:A4:1A:1B:B3:1D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:77:3d:40:3c:ca:07:7d:12:e2:50:ee:22:3a:8b:67:c3:06: 16:e0:c6:09:20:4a:a0:8e:63:2d:d3:ea:e1:52:40:c6:4c:58: 23:c5:1b:ee:70:37:0a:1f:0d:ca:ce:09:84:0b:3d:df:b3:a7: b1:cb:7f:54:4f:5a:d8:84:37:5e:28:ff:89:44:c2:f0:f1:d0: e7:e8:34:27:35:77:81:6a:9d:da:59:35:dd:f0:49:ba:69:e6: 2d:a6:a3:21:b4:2c:25:74:49:6d:2d:10:00:6d:c6:bc:b4:53: 3d:5c:f1:d7:23:7c:5c:f9:17:e3:66:a5:65:2c:22:99:b9:b6: 1d:9f:a4:06:cc:0b:f0:4d:d5:19:27:68:83:c0:55:1a:ff:45: e3:88:40:b5:61:8e:50:3a:a6:e8:7f:be:d7:93:10:d2:9e:39: 83:77:35:9b:93:99:3c:cc:bf:94:76:fb:60:18:f3:63:f1:9d: 97:34:29:34:a7:89:03:d0:38:f1:6b:53:91:cc:ea:e9:fb:12: 11:7e:c3:8a:c9:84:2c:00:53:87:76:1f:77:10:38:b5:b0:05: 20:f9:85:b2:66:ae:78:31:eb:36:f6:97:22:5a:ef:66:e5:56: 21:f3:c8:ba:65:38:47:ac:cd:bd:f7:ca:df:1b:7f:03:4c:b1: 69:9c:60:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFeXeg25BNS5zYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk YjJkMDYxZmUtZmQzOS00MTJkLTkyZDQtZDc1MmM1NDRlYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVhqMpNQNQxcxWn0Vv7b1beCTfLmDisma3xq Afi2ISk8gU8cZS/VsXXRmsEzgpcUM/HsH1GJZnHzG8dwUj5aIhW1/VnLgifpQLU3 YzjBWou9o8Y7z1mqnqKYGM1Evqhze4AdvLwo/zUIUZPnYMnFXdQT3gOvqclih3I1 LP2RrS4esP+Af1mcqFHtc2RmVXMM5s6nZmduvXRFUOILp7y5pWOsdqSinQ7Kn7F0 GU38npXXBbxFrLfRNznWGntDvi4re8fjhB5glv5c0dascx4vSOR22Xfts3xI+rWC 7+tHL+ND/TW5if2vUsq/Vo6RTDTk+BW56+gYqN0tBqXrx+9NIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4w/Yd4aDeUFaRB5OkwpBobsx3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvM2QyMDA2MGUtZjQ0OS0z MGM0LTg1MzAtNWI2MjYwOTVlZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF53PUA8ygd9EuJQ7iI6i2fDBhbgxgkgSqCOYy3T6uFSQMZMWCPFG+5w NwofDcrOCYQLPd+zp7HLf1RPWtiEN14o/4lEwvDx0OfoNCc1d4FqndpZNd3wSbpp 5i2moyG0LCV0SW0tEABtxry0Uz1c8dcjfFz5F+NmpWUsIpm5th2fpAbMC/BN1Rkn aIPAVRr/ReOIQLVhjlA6puh/vteTENKeOYN3NZuTmTzMv5R2+2AY82PxnZc0KTSn iQPQOPFrU5HM6un7EhF+w4rJhCwAU4d2H3cQOLWwBSD5hbJmrngx6zb2lyJa72bl ViHzyLplOEeszb33yt8bfwNMsWmcYLo= -----END CERTIFICATE-----Generated at Sat Jun 13 23:05:46 2026 by rpki-client