$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17191dc9-2a0d-388e-aaa3-399447841d1f.roa File: 17191dc9-2a0d-388e-aaa3-399447841d1f.roa (raw, json) Hash identifier: okgmR7WlE3zb0596QMJC0rlMKPMBBTY/+3y222JUPns= Subject key identifier: 89:77:6F:B5:9B:FD:C7:35:48:95:98:A9:CA:78:B3:04:1B:D6:25:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB316961AE23AEF60B100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17191dc9-2a0d-388e-aaa3-399447841d1f.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 24.251.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b3:16:96:1a:e2:3a:ef:60:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=234755ba-9dff-4e0a-b301-e13d748204a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:1c:94:fe:46:c1:a2:93:80:78:42:16:56: 5f:c5:20:a3:30:79:73:ab:db:5a:8a:c2:cb:63:97: 77:1a:2d:f9:0f:33:58:bf:50:94:fb:cd:59:68:e9: 45:05:17:f1:4d:c4:6f:f8:24:0e:98:99:78:a9:a0: cd:39:da:e3:9d:11:e1:7b:bd:fe:39:7e:ed:3d:0d: f5:77:79:53:21:82:0d:ad:c6:cf:0b:00:2d:dc:96: a8:0e:b5:1d:3b:e5:99:ce:5b:1a:92:92:07:35:f1: b3:c8:17:e8:43:ba:74:6c:3f:34:88:80:20:02:ae: b9:12:18:06:0f:bc:f1:76:b1:72:08:6e:8a:ca:e4: ff:e7:e3:99:cd:0f:e8:49:30:ea:1a:3b:e1:ae:a9: 31:06:d9:0a:c2:9c:f4:c2:d7:2c:94:fd:f7:3d:b0: 90:20:b6:ac:a2:2c:6a:b8:13:12:c4:63:44:94:55: 32:0e:8d:94:ba:d7:0e:0d:a8:5c:25:c7:d2:84:32: 4f:59:05:84:04:74:80:aa:d1:98:65:fd:9f:6d:94: 95:d6:6d:1e:b1:9d:e8:1a:85:8c:c5:13:9b:14:19: 60:02:2e:32:87:77:bf:1b:6d:3b:62:d3:ff:e6:47: ea:00:52:80:e7:c9:43:af:f6:36:55:4c:e5:97:eb: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:6F:B5:9B:FD:C7:35:48:95:98:A9:CA:78:B3:04:1B:D6:25:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17191dc9-2a0d-388e-aaa3-399447841d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a1:46:f7:99:e9:76:6b:1b:1b:5d:f5:96:27:5a:ed:0e:0f: 5e:6b:a9:95:bc:1b:bd:39:5d:16:a6:47:92:79:9b:c5:5c:fb: b2:ad:67:f4:94:5f:59:58:08:08:a6:cd:c2:95:b7:f2:4a:f4: 7f:08:53:95:33:e7:4d:4a:04:f1:30:1c:8e:de:71:58:fe:8a: 38:92:1f:00:63:b7:d1:31:46:21:34:aa:fd:92:e8:27:76:89: c9:12:99:79:75:b4:b6:70:41:8d:5b:9a:63:53:f0:b0:3d:a1: 2e:91:89:d2:02:fb:c5:78:98:2f:78:f0:b5:d5:c1:58:d0:bb: cc:aa:ea:ed:68:7b:8c:ed:0e:be:f8:35:fe:98:78:9e:28:07: 8e:a7:64:bf:77:46:d7:93:3b:72:97:f0:df:60:b5:3a:aa:54: a1:5b:60:17:7f:43:7b:90:5b:24:1c:89:47:93:58:d3:36:5d: 56:08:6c:4d:f6:11:30:f9:27:8e:cd:70:18:b1:6d:06:32:7a: 75:8f:69:d9:c7:c1:06:92:ec:fa:2a:27:d6:c2:a0:8e:5c:6d: f9:ab:23:40:01:7a:26:76:0c:b5:c5:b7:35:60:37:65:24:ea: 57:2a:25:33:e9:97:e4:d4:e7:63:30:72:1e:c4:a9:d2:99:80: b1:e2:8d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrMWlhriOu9gsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MjM0NzU1YmEtOWRmZi00ZTBhLWIzMDEtZTEzZDc0ODIwNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsIclP5GwaKTgHhCFlZfxSCjMHlzq9taisLL Y5d3Gi35DzNYv1CU+81ZaOlFBRfxTcRv+CQOmJl4qaDNOdrjnRHhe73+OX7tPQ31 d3lTIYINrcbPCwAt3JaoDrUdO+WZzlsakpIHNfGzyBfoQ7p0bD80iIAgAq65EhgG D7zxdrFyCG6KyuT/5+OZzQ/oSTDqGjvhrqkxBtkKwpz0wtcslP33PbCQILasoixq uBMSxGNElFUyDo2UutcODahcJcfShDJPWQWEBHSAqtGYZf2fbZSV1m0esZ3oGoWM xRObFBlgAi4yh3e/G207YtP/5kfqAFKA58lDr/Y2VUzll+s5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl3b7Wb/cc1SJWYqcp4swQb1iUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxOTFkYzktMmEwZC0z ODhlLWFhYTMtMzk5NDQ3ODQxZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPt5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKhRveZ6XZrGxtd9ZYnWu0OD15rqZW8G705XRamR5J5m8Vc+7KtZ/SU X1lYCAimzcKVt/JK9H8IU5Uz501KBPEwHI7ecVj+ijiSHwBjt9ExRiE0qv2S6Cd2 ickSmXl1tLZwQY1bmmNT8LA9oS6RidIC+8V4mC948LXVwVjQu8yq6u1oe4ztDr74 Nf6YeJ4oB46nZL93RteTO3KX8N9gtTqqVKFbYBd/Q3uQWyQciUeTWNM2XVYIbE32 ETD5J47NcBixbQYyenWPadnHwQaS7PoqJ9bCoI5cbfmrI0ABeiZ2DLXFtzVgN2Uk 6lcqJTPpl+TU52Mwch7EqdKZgLHijRA= -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:56 2026 by rpki-client