$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ad33851-1073-3586-a614-ba13935156e8.roa File: 2ad33851-1073-3586-a614-ba13935156e8.roa (raw, json) Hash identifier: X11v9jWv6S37y7mecUEzOrQwG+Bkihpuf3uOYD6+4lo= Subject key identifier: 2F:36:29:BD:D5:3E:B3:26:D5:CC:D5:78:E9:96:0E:17:34:4C:25:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32C4C071CCAEEEFACA7A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ad33851-1073-3586-a614-ba13935156e8.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 24.253.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c4:c0:71:cc:ae:ee:fa:ca:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9575f840-9c17-4e33-bf80-bcce020e6348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:8e:51:d1:ee:92:04:1b:05:57:6b:e4:d1: b2:39:b3:45:53:ed:3e:f5:34:d1:52:3d:ac:04:bc: 26:48:0d:b4:3c:a8:37:9b:7d:47:52:5a:b0:e9:8e: 83:34:9a:a9:d8:8b:ad:51:93:ce:1a:11:da:3d:bd: 1c:b7:a0:ee:bb:af:d3:ae:af:16:2c:ff:4f:c5:eb: 32:80:3c:75:0b:5b:80:68:74:3b:49:28:3c:31:74: 9d:34:76:c0:38:1b:e4:00:27:10:78:08:01:40:21: cf:6b:7f:eb:29:62:3d:a7:f8:35:30:26:d5:0a:6a: de:b6:e2:31:1f:0d:a1:76:f3:3b:4d:bf:7b:2e:cc: 72:b3:28:ae:ad:e6:17:da:0a:03:8a:41:3d:cd:6a: 2c:3c:ee:b9:4b:53:5c:d8:60:83:3e:5e:62:cb:f7: 9e:ef:09:9f:bc:18:43:8f:51:4c:fc:27:65:dd:0d: 51:82:3a:63:01:b8:17:8a:03:6f:9f:3d:0b:45:b7: 85:a8:05:c0:d7:03:96:32:c5:e9:40:ec:42:ed:73: aa:9b:fa:a4:4a:6e:5a:f0:32:66:44:f5:82:d6:27: 65:67:78:c0:24:e9:97:00:41:e8:e7:fc:8d:eb:1f: e2:a5:30:ad:4c:41:07:60:e0:7a:8f:6a:e8:54:97: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:29:BD:D5:3E:B3:26:D5:CC:D5:78:E9:96:0E:17:34:4C:25:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ad33851-1073-3586-a614-ba13935156e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:94:79:29:16:ec:3e:c7:69:83:ac:c2:7e:39:ca:28:8c:2a: 97:d6:c5:9a:91:8e:48:3d:62:7c:2c:d8:9b:70:dd:fa:02:05: 8b:cb:9c:b9:57:c7:a3:ba:9f:3e:21:92:ba:ec:01:5f:62:8d: b4:1d:b8:33:a4:ca:ae:25:85:1f:80:74:26:ac:d0:10:c0:7c: 40:8e:f0:80:66:64:42:75:48:31:2d:62:db:07:e7:20:57:c0: 4e:23:f2:dc:5e:87:03:80:09:71:cb:f1:00:af:af:7a:16:7c: b2:fc:ac:21:f4:72:e2:d8:da:a6:a8:f3:58:57:55:9d:64:73: cc:05:c5:13:20:d6:3e:0c:ab:49:c7:1a:fd:70:06:e5:87:2d: 9f:78:6f:aa:ce:e2:26:ae:f4:f7:e0:a0:24:94:7f:fb:b6:78: 7b:67:c9:68:38:e5:43:e1:1b:4c:fc:67:e4:df:62:f1:8a:12: 5b:c7:fa:91:c8:87:a6:74:6b:db:98:57:ee:bd:6c:75:2f:57: 09:7b:a3:10:14:f2:3e:42:91:64:6f:0d:5e:20:b4:40:7e:87: d8:7b:82:7e:63:b8:2c:7f:af:f8:1f:5b:dd:0e:3f:ed:3c:2d: f4:a4:19:13:ff:d1:32:b9:2d:3d:21:a5:04:56:87:a4:b2:81: cc:8e:2b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsTAccyu7vrKeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTU3NWY4NDAtOWMxNy00ZTMzLWJmODAtYmNjZTAyMGU2MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI2OUdHukgQbBVdr5NGyObNFU+0+9TTRUj2s BLwmSA20PKg3m31HUlqw6Y6DNJqp2IutUZPOGhHaPb0ct6Duu6/Trq8WLP9Pxesy gDx1C1uAaHQ7SSg8MXSdNHbAOBvkACcQeAgBQCHPa3/rKWI9p/g1MCbVCmretuIx Hw2hdvM7Tb97LsxysyiureYX2goDikE9zWosPO65S1Nc2GCDPl5iy/ee7wmfvBhD j1FM/Cdl3Q1RgjpjAbgXigNvnz0LRbeFqAXA1wOWMsXpQOxC7XOqm/qkSm5a8DJm RPWC1idlZ3jAJOmXAEHo5/yN6x/ipTCtTEEHYOB6j2roVJd3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC82Kb3VPrMm1czVeOmWDhc0TCVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFkMzM4NTEtMTA3My0z NTg2LWE2MTQtYmExMzkzNTE1NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiUeSkW7D7HaYOswn45yiiMKpfWxZqRjkg9Ynws2Jtw3foCBYvLnLlX x6O6nz4hkrrsAV9ijbQduDOkyq4lhR+AdCas0BDAfECO8IBmZEJ1SDEtYtsH5yBX wE4j8txehwOACXHL8QCvr3oWfLL8rCH0cuLY2qao81hXVZ1kc8wFxRMg1j4Mq0nH Gv1wBuWHLZ94b6rO4iau9PfgoCSUf/u2eHtnyWg45UPhG0z8Z+TfYvGKElvH+pHI h6Z0a9uYV+69bHUvVwl7oxAU8j5CkWRvDV4gtEB+h9h7gn5juCx/r/gfW90OP+08 LfSkGRP/0TK5LT0hpQRWh6SygcyOK2c= -----END CERTIFICATE-----Generated at Thu Oct 8 10:28:21 2026 by rpki-client