$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a5159c-d78c-30b8-8052-0934d23b04e3.roa File: 03a5159c-d78c-30b8-8052-0934d23b04e3.roa (raw, json) Hash identifier: YyG9J5SZTGidE0UaWz9N0pkukSRF+J7WMUbz8H+ygag= Subject key identifier: 41:51:61:6D:CF:29:8A:DF:0F:72:3F:4F:DB:37:93:D4:E4:B1:8E:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD35D824C4E63275609E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a5159c-d78c-30b8-8052-0934d23b04e3.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.255.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:35:d8:24:c4:e6:32:75:60:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=cb8821a1-42c5-4ce6-8ab4-d3c1d8bbb288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:db:63:b1:93:bd:4b:73:11:6d:97:1b:30: 5e:3b:3f:25:bd:51:88:63:ed:41:96:56:35:05:5d: 82:53:ce:12:99:d8:6b:fe:e3:4c:17:3c:ca:6e:81: b1:05:4d:6e:1c:97:07:ab:2b:d9:d8:89:c0:99:aa: c9:cf:79:ca:13:14:b4:53:3e:3f:33:e9:75:b6:38: e6:ef:20:dc:db:f1:93:9b:e6:04:48:c1:1b:e6:bc: 2f:6e:d7:a6:44:82:b5:01:1c:77:e5:22:36:e5:f5: 6e:a6:37:f4:bd:08:d9:57:82:05:07:b7:2e:13:fc: 88:05:76:28:28:df:2d:f0:01:87:e5:d5:37:7f:8b: d2:29:e3:fd:7d:bf:3b:68:40:50:b3:06:2e:84:be: 68:88:d7:88:3a:2d:48:9d:62:9b:7c:75:12:19:6d: c4:d9:0a:50:31:8d:6e:d1:47:0b:80:08:b1:0f:e5: 51:5e:32:c3:7e:ef:77:1b:50:ab:1f:26:0c:55:7c: 82:5d:cc:cb:85:4b:e9:db:69:35:13:de:67:e1:36: c8:0f:c0:89:d8:76:b3:ff:8f:a3:ed:36:05:41:ef: 95:7b:42:8c:e9:5f:31:1b:1e:45:7f:2c:a2:ce:4c: a1:d1:82:20:0a:95:fe:24:85:dd:f3:c5:4e:4e:78: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:51:61:6D:CF:29:8A:DF:0F:72:3F:4F:DB:37:93:D4:E4:B1:8E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a5159c-d78c-30b8-8052-0934d23b04e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:94:8f:66:4a:72:6a:26:9c:af:b8:c7:e5:1d:79:56:f5:4d: 80:84:c7:8a:ef:8c:b3:b5:c4:86:5c:b2:60:1c:0a:46:77:8f: 03:04:45:b7:53:80:b9:28:ee:b8:e9:18:17:b5:37:52:9d:c9: 07:de:33:45:8d:2e:09:31:56:f0:65:fe:ae:76:a5:38:83:33: 02:08:ca:33:b8:2c:73:af:fb:ab:74:5a:50:ee:bf:46:1a:fa: 42:9f:af:ad:7a:89:ec:52:fb:fe:7c:42:75:e1:65:3b:ea:0b: e2:c8:d0:5c:65:a8:b8:fd:1a:83:76:4c:6b:8a:65:69:b1:41: 9a:5f:5b:70:67:1d:63:aa:c3:1e:64:ca:53:16:9d:e2:ee:32: 5b:d2:5b:dd:10:1e:86:b9:95:7d:a4:4b:95:b0:a3:e2:a0:cf: 85:3c:75:9e:ba:75:ad:81:ea:b1:67:a3:bd:11:1b:74:04:a6: 70:ca:ce:d3:d3:0d:81:ac:7b:83:57:55:54:04:3c:91:9e:94: 7e:5b:dd:d2:74:7b:11:21:ca:2a:f7:d7:c2:ef:d1:49:a2:9b: b8:e6:ab:e6:05:61:40:6c:8f:a4:d5:81:87:fe:bf:70:50:23: 8f:f1:e1:60:6b:4f:8d:02:a2:d5:cd:26:6c:26:5f:34:a0:ff: dd:3f:03:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTXYJMTmMnVgnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk Y2I4ODIxYTEtNDJjNS00Y2U2LThhYjQtZDNjMWQ4YmJiMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSLbY7GTvUtzEW2XGzBeOz8lvVGIY+1BllY1 BV2CU84Smdhr/uNMFzzKboGxBU1uHJcHqyvZ2InAmarJz3nKExS0Uz4/M+l1tjjm 7yDc2/GTm+YESMEb5rwvbtemRIK1ARx35SI25fVupjf0vQjZV4IFB7cuE/yIBXYo KN8t8AGH5dU3f4vSKeP9fb87aEBQswYuhL5oiNeIOi1InWKbfHUSGW3E2QpQMY1u 0UcLgAixD+VRXjLDfu93G1CrHyYMVXyCXczLhUvp22k1E95n4TbID8CJ2Haz/4+j 7TYFQe+Ve0KM6V8xGx5Ffyyizkyh0YIgCpX+JIXd88VOTniaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFRYW3PKYrfD3I/T9s3k9TksY4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNhNTE1OWMtZDc4Yy0z MGI4LTgwNTItMDkzNGQyM2IwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP85MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiUj2ZKcmomnK+4x+UdeVb1TYCEx4rvjLO1xIZcsmAcCkZ3jwMERbdT gLko7rjpGBe1N1KdyQfeM0WNLgkxVvBl/q52pTiDMwIIyjO4LHOv+6t0WlDuv0Ya +kKfr616iexS+/58QnXhZTvqC+LI0FxlqLj9GoN2TGuKZWmxQZpfW3BnHWOqwx5k ylMWneLuMlvSW90QHoa5lX2kS5Wwo+Kgz4U8dZ66da2B6rFno70RG3QEpnDKztPT DYGse4NXVVQEPJGelH5b3dJ0exEhyir318Lv0Umim7jmq+YFYUBsj6TVgYf+v3BQ I4/x4WBrT40CotXNJmwmXzSg/90/A5Q= -----END CERTIFICATE-----Generated at Sat Sep 26 13:39:32 2026 by rpki-client