$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa File: 2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa (raw, json) Hash identifier: OUzMNFSzsIlX6uwUgsA++mswNe177ErrPqgwFI0HOKk= Subject key identifier: 5D:F9:79:9F:B3:31:F7:B0:08:47:FA:37:DA:C9:37:32:D2:A8:CC:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB84C1DDFFEB4801DAB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 24.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b8:4c:1d:df:fe:b4:80:1d:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=fd9fc289-e03c-42fb-8a37-91d33ddc2d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d4:98:b2:08:6d:1e:f3:f2:e0:56:6d:36:0f: b3:bd:da:22:aa:60:d3:cf:de:f4:3e:d4:25:71:3b: 56:2f:65:8d:34:92:3d:8e:b3:74:ab:7f:ba:7a:30: 0f:7c:70:22:ad:70:7a:4a:c9:a0:46:c4:74:58:1f: 96:a4:5e:2e:3d:71:ef:7b:94:15:96:2a:57:65:46: 4e:55:a5:a1:43:19:8b:6d:3c:bf:5b:87:54:57:b2: be:bf:ec:d8:81:dd:54:e3:25:34:14:b6:5b:d5:af: 48:de:4c:7a:ac:79:24:55:bb:ea:bb:e8:ff:5f:44: fa:ff:fe:63:38:4f:03:72:6d:53:d7:70:f8:f2:cb: 4d:fc:51:a5:ad:2d:94:e6:11:42:13:72:10:42:f8: f9:a3:22:f9:e9:26:56:1f:d1:25:db:43:c6:11:4b: 4d:f2:4e:ca:67:80:02:c6:f8:79:eb:f5:6b:cb:70: 8f:18:6a:32:15:c7:a7:9b:b2:95:98:9c:57:53:f0: e0:49:4c:73:0d:20:25:95:c0:dd:81:16:e7:62:a3: bc:00:f5:c8:63:a0:e7:f0:86:b0:48:ed:72:1f:af: f6:d1:53:08:37:7f:06:85:00:44:b7:fe:2c:2e:b4: d0:00:b9:1f:7c:3e:18:b0:a2:ef:4c:7e:8c:20:7f: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F9:79:9F:B3:31:F7:B0:08:47:FA:37:DA:C9:37:32:D2:A8:CC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:eb:50:06:54:e4:85:6f:dc:bc:78:fc:f9:30:6a:39:d2:fe: 1b:0c:05:93:a6:52:64:c1:32:13:35:38:49:5d:5b:aa:18:ad: de:80:5a:da:48:25:ba:f1:11:e9:24:cf:51:54:66:68:c8:94: 5f:2d:3e:09:28:02:32:e9:9b:40:24:34:ab:ac:56:a3:02:b0: 80:1e:fa:50:57:de:57:ec:ae:02:83:dc:88:82:2f:8e:84:36: ce:ce:6f:87:c3:f8:08:ff:75:80:b8:f1:6b:91:45:67:7c:c7: a3:f9:f5:d7:fd:c7:4e:29:15:4a:3a:c0:fc:60:41:81:b3:16: d6:0d:64:db:f7:e1:89:87:25:27:e4:fc:48:02:35:cc:cb:b3: e7:fc:b3:3a:28:21:44:04:9d:c9:c4:04:d3:df:b1:a2:ec:9e: 55:99:35:f3:5c:9d:5c:e9:13:0e:7e:ae:d3:83:3c:93:42:ee: e7:40:c8:cc:f2:a0:84:38:c8:e0:37:da:c7:8f:cd:17:b6:01: 01:16:e1:3f:ad:be:10:b2:38:06:52:b6:8e:af:6c:61:b3:91: 81:3d:57:54:cf:6f:74:f3:a2:10:74:dc:21:15:ff:86:eb:2f: 00:fc:b5:ed:d7:ab:b8:99:58:4d:76:0a:8c:6e:ad:f9:bf:35: 71:20:30:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrhMHd/+tIAdq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZmQ5ZmMyODktZTAzYy00MmZiLThhMzctOTFkMzNkZGMyZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtSYsghtHvPy4FZtNg+zvdoiqmDTz970PtQl cTtWL2WNNJI9jrN0q3+6ejAPfHAirXB6SsmgRsR0WB+WpF4uPXHve5QVlipXZUZO VaWhQxmLbTy/W4dUV7K+v+zYgd1U4yU0FLZb1a9I3kx6rHkkVbvqu+j/X0T6//5j OE8Dcm1T13D48stN/FGlrS2U5hFCE3IQQvj5oyL56SZWH9El20PGEUtN8k7KZ4AC xvh56/Vry3CPGGoyFcenm7KVmJxXU/DgSUxzDSAllcDdgRbnYqO8APXIY6Dn8Iaw SO1yH6/20VMIN38GhQBEt/4sLrTQALkffD4YsKLvTH6MIH/zLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF35eZ+zMfewCEf6N9rJNzLSqMzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ3ZjFhYWEtOTAwMC0z OTQ4LWFhNjMtMGRlOWQ0NmE4ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzrUAZU5IVv3Lx4/PkwajnS/hsMBZOmUmTBMhM1OEldW6oYrd6AWtpI JbrxEekkz1FUZmjIlF8tPgkoAjLpm0AkNKusVqMCsIAe+lBX3lfsrgKD3IiCL46E Ns7Ob4fD+Aj/dYC48WuRRWd8x6P59df9x04pFUo6wPxgQYGzFtYNZNv34YmHJSfk /EgCNczLs+f8szooIUQEncnEBNPfsaLsnlWZNfNcnVzpEw5+rtODPJNC7udAyMzy oIQ4yOA32sePzRe2AQEW4T+tvhCyOAZSto6vbGGzkYE9V1TPb3TzohB03CEV/4br LwD8te3Xq7iZWE12Coxurfm/NXEgMM4= -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:51 2026 by rpki-client