$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25434fdd-d4ea-37ec-aca8-8ca65e6adc90.roa File: 25434fdd-d4ea-37ec-aca8-8ca65e6adc90.roa (raw, json) Hash identifier: iBtuA1ZA+nb82iIYDJSJaR4HL1C4nGOtWH61Itg8rws= Subject key identifier: 4B:5C:51:47:12:0D:84:56:22:F4:38:B7:64:05:87:50:6A:77:B9:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8D6D783CBB76D1D8E500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25434fdd-d4ea-37ec-aca8-8ca65e6adc90.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.255.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8d:6d:78:3c:bb:76:d1:d8:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2b9c1b20-d743-4175-8dc2-b98a04878cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b0:9a:7e:c2:30:13:22:ec:83:58:7b:fd:1d: c4:a4:89:95:a9:95:a5:24:f3:66:b9:3e:2a:04:f1: e1:60:f1:77:95:6e:e1:6f:42:a3:55:5f:b8:7c:a2: 8d:68:35:43:38:07:f6:d9:82:6c:40:0e:a3:42:bc: 38:16:32:ab:65:43:f6:8a:5a:3f:e2:82:68:73:dc: 02:cf:25:cc:9c:56:e9:2e:93:3f:44:b3:45:56:69: 9e:c8:6a:e7:e6:5d:f7:e0:fe:e3:22:80:bc:2f:08: de:e9:b0:01:74:aa:74:f7:d3:07:95:db:8a:80:87: e5:81:08:2c:1f:f7:06:e9:01:73:f5:49:cc:48:0f: 91:e4:0c:7a:c9:17:54:ef:63:cb:d5:5c:6b:c9:2b: ef:c4:19:31:98:6e:3b:fd:7c:69:a4:08:6e:3a:34: 0e:cd:4f:29:da:2e:af:c8:8f:6d:ca:84:d8:1e:ec: 2d:cb:65:e4:06:57:54:1e:23:c4:0c:b8:02:35:52: 2c:2d:11:e2:ca:a2:89:ea:49:b0:4b:5c:22:9c:96: 65:f0:86:44:9d:cf:b3:36:6f:da:af:93:25:8c:72: 90:ce:6c:08:3b:63:55:a5:f0:7e:57:d6:00:5d:a5: c7:a0:68:f3:2f:e9:9d:ed:ea:cf:31:9f:80:1f:55: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:51:47:12:0D:84:56:22:F4:38:B7:64:05:87:50:6A:77:B9:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25434fdd-d4ea-37ec-aca8-8ca65e6adc90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9c:57:f6:9c:b5:d1:3b:dd:39:6d:b0:2d:a8:fe:b6:16:79: e3:db:46:6a:6f:69:ec:4f:21:d3:17:25:ba:73:a0:b8:fc:1b: 93:7e:8f:43:2e:46:18:7f:5b:1e:91:bd:e0:ce:ab:78:d3:f3: 28:5d:61:4c:3f:c6:2d:e4:ff:87:ec:6a:03:98:07:c0:d3:c7: 1d:77:37:46:02:ba:d3:f0:5d:29:53:18:ee:39:67:6f:4d:03: 44:f2:b9:74:73:0b:fc:7b:5a:a4:41:2b:10:7b:b9:eb:08:ef: 0d:58:53:43:89:23:7d:a9:f8:00:49:74:40:a4:9d:2a:40:6c: b2:48:33:76:c1:8d:4c:6c:60:86:bd:28:89:54:96:9f:c8:49: 62:19:42:df:dd:a0:c9:e3:9b:15:56:9e:83:9b:ee:48:f9:c9: 6d:88:ff:6f:f8:bf:94:6d:3d:e8:44:23:39:32:5c:82:e7:77: c1:39:68:e4:85:65:c9:69:4d:6c:5e:a7:75:07:44:f8:dd:69: 41:a2:98:1a:48:c6:37:ad:09:56:63:e1:0f:d1:6d:8b:df:33: 40:65:09:84:1a:24:07:df:da:80:d4:4a:f6:38:a0:52:99:30: 2a:50:de:02:a8:c8:fd:1d:68:62:47:3e:a1:7c:7e:2c:e7:4c: 39:d9:74:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rY1teDy7dtHY5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MmI5YzFiMjAtZDc0My00MTc1LThkYzItYjk4YTA0ODc4Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbCafsIwEyLsg1h7/R3EpImVqZWlJPNmuT4q BPHhYPF3lW7hb0KjVV+4fKKNaDVDOAf22YJsQA6jQrw4FjKrZUP2ilo/4oJoc9wC zyXMnFbpLpM/RLNFVmmeyGrn5l334P7jIoC8Lwje6bABdKp099MHlduKgIflgQgs H/cG6QFz9UnMSA+R5Ax6yRdU72PL1VxrySvvxBkxmG47/XxppAhuOjQOzU8p2i6v yI9tyoTYHuwty2XkBldUHiPEDLgCNVIsLRHiyqKJ6kmwS1winJZl8IZEnc+zNm/a r5MljHKQzmwIO2NVpfB+V9YAXaXHoGjzL+md7erPMZ+AH1XfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtcUUcSDYRWIvQ4t2QFh1Bqd7lqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU0MzRmZGQtZDRlYS0z N2VjLWFjYTgtOGNhNjVlNmFkYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGcV/actdE73TltsC2o/rYWeePbRmpvaexPIdMXJbpzoLj8G5N+j0Mu Rhh/Wx6RveDOq3jT8yhdYUw/xi3k/4fsagOYB8DTxx13N0YCutPwXSlTGO45Z29N A0TyuXRzC/x7WqRBKxB7uesI7w1YU0OJI32p+ABJdECknSpAbLJIM3bBjUxsYIa9 KIlUlp/ISWIZQt/doMnjmxVWnoOb7kj5yW2I/2/4v5RtPehEIzkyXILnd8E5aOSF ZclpTWxep3UHRPjdaUGimBpIxjetCVZj4Q/RbYvfM0BlCYQaJAff2oDUSvY4oFKZ MCpQ3gKoyP0daGJHPqF8fiznTDnZdDk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:14:11 2026 by rpki-client