$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa File: 3d20060e-f449-30c4-8530-5b626095efd1.roa (raw, json) Hash identifier: hHHOnQstUzgvVI1xJ6w23/TwRun1M2acuiysF9lBdvo= Subject key identifier: 1A:1B:F2:3F:CD:94:84:95:DF:98:CF:62:F3:F1:8E:02:3F:5E:A4:89 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584EA79342023998CDD67309FE80 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21658 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:42:02:39:98:cd:d6:73:09:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cc68fe76-c475-4ead-a6e0-2f460814ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:2d:77:b1:75:7c:15:d3:9b:ef:8b:13:51: 3e:56:6d:86:b1:4e:3a:53:0d:54:a9:3b:4e:c1:78: c5:7b:0e:7f:94:09:6d:17:42:5d:32:28:ba:8c:48: 3e:df:10:43:c7:0f:f4:1c:9b:6b:7e:33:fc:2c:99: 24:50:38:50:5d:bb:37:a2:54:0f:79:3e:45:5c:ca: f3:51:cd:2c:ea:23:67:6b:f7:d8:c5:4e:16:ca:1b: dd:10:3f:18:b1:4c:81:99:ef:5c:b8:7a:84:3b:bd: bd:5f:1e:b2:24:56:06:cf:18:cc:13:3e:43:77:24: 21:79:b6:32:bf:b6:53:ef:88:04:ed:97:40:78:86: 17:e8:f2:d3:6b:77:bb:30:01:4e:f3:1b:67:3d:8e: 3f:0a:7e:53:d6:f0:d0:4b:42:f6:99:f7:0c:71:a2: 63:8d:92:92:db:6a:64:50:14:ce:fd:13:49:98:c5: a5:e9:38:f7:7f:18:00:83:84:03:60:d1:73:86:a3: 94:1a:d5:53:d8:65:6a:83:ea:8a:65:75:07:74:c4: cd:34:cb:db:9c:b3:89:65:0f:1b:ca:a9:e2:70:ab: 84:c2:15:44:d6:b3:96:f6:71:d9:8d:34:85:35:94: f9:37:62:fd:1b:9c:25:62:de:b1:4c:8e:36:8f:d3: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1B:F2:3F:CD:94:84:95:DF:98:CF:62:F3:F1:8E:02:3F:5E:A4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:57:ae:12:18:cd:71:38:e5:e8:ca:3a:d4:98:d6:c0:e9:a0: a0:6a:9c:c5:cf:69:ab:2f:de:77:f8:03:f4:02:8e:2a:a0:09: ba:21:19:08:ed:3f:95:37:93:ad:8c:a4:03:98:88:02:a0:d1: ce:c9:43:2a:ab:af:29:e3:e2:a2:41:c4:64:92:06:69:1c:a0: e6:c9:1d:64:3c:ef:0f:a8:06:69:3e:1e:16:9c:f6:ba:c9:67: 88:52:79:80:3b:5c:32:10:fc:a5:3d:f5:20:98:33:d5:fb:c1: 75:79:e7:0b:89:25:cd:21:ab:d3:f4:46:4f:4b:82:bf:ee:de: db:17:d1:2f:0b:82:b5:1e:0a:96:11:80:bd:c8:83:b9:fe:89: 48:aa:ef:11:75:bf:37:74:7d:f6:2c:28:e9:28:90:8f:a5:f6: b4:4d:8d:7b:36:64:37:7c:1d:2e:09:60:45:6c:5d:0b:cc:78: 8e:cb:cc:c7:35:0f:83:32:e2:ca:c7:1b:db:76:7a:ac:08:4a: e5:28:9c:b0:4a:90:14:94:40:c8:44:08:1f:35:94:60:f0:c3: 88:b1:74:19:76:ea:21:a0:30:47:2c:fc:75:4e:9f:6b:da:37: 0a:87:c9:f2:29:b8:9b:2f:b8:f2:8d:43:d3:b6:3c:80:0a:d2: 7c:71:7e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk0ICOZjN1nMJ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2M2OGZlNzYtYzQ3NS00ZWFkLWE2ZTAtMmY0NjA4MTRjZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Mtd7F1fBXTm++LE1E+Vm2GsU46Uw1UqTtO wXjFew5/lAltF0JdMii6jEg+3xBDxw/0HJtrfjP8LJkkUDhQXbs3olQPeT5FXMrz Uc0s6iNna/fYxU4WyhvdED8YsUyBme9cuHqEO729Xx6yJFYGzxjMEz5DdyQhebYy v7ZT74gE7ZdAeIYX6PLTa3e7MAFO8xtnPY4/Cn5T1vDQS0L2mfcMcaJjjZKS22pk UBTO/RNJmMWl6Tj3fxgAg4QDYNFzhqOUGtVT2GVqg+qKZXUHdMTNNMvbnLOJZQ8b yqnicKuEwhVE1rOW9nHZjTSFNZT5N2L9G5wlYt6xTI42j9OelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBob8j/NlISV35jPYvPxjgI/XqSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvM2QyMDA2MGUtZjQ0OS0z MGM0LTg1MzAtNWI2MjYwOTVlZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtXrhIYzXE45ejKOtSY1sDpoKBqnMXPaasv3nf4A/QCjiqgCbohGQjt P5U3k62MpAOYiAKg0c7JQyqrrynj4qJBxGSSBmkcoObJHWQ87w+oBmk+Hhac9rrJ Z4hSeYA7XDIQ/KU99SCYM9X7wXV55wuJJc0hq9P0Rk9Lgr/u3tsX0S8LgrUeCpYR gL3Ig7n+iUiq7xF1vzd0ffYsKOkokI+l9rRNjXs2ZDd8HS4JYEVsXQvMeI7LzMc1 D4My4srHG9t2eqwISuUonLBKkBSUQMhECB81lGDww4ixdBl26iGgMEcs/HVOn2va NwqHyfIpuJsvuPKNQ9O2PIAK0nxxfnE= -----END CERTIFICATE-----Generated at Wed Jul 29 11:30:38 2026 by rpki-client