$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa File: 2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa (raw, json) Hash identifier: 976gA6fRw2botxuZr7XmlykeG6V37Vdfl6kTc+29Wqc= Subject key identifier: E4:0D:16:14:01:37:89:11:68:EE:83:7E:8E:1C:D7:B2:B4:40:A1:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8CAC774260C4C090A480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8c:ac:77:42:60:c4:c0:90:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=20a477a7-e007-4a32-9cdf-35a36ba0be85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:fc:80:73:93:fa:51:10:96:08:cc:67:fa: 8f:77:2c:a2:fd:06:d9:27:59:1e:79:36:a0:24:02: 73:51:5b:a4:73:d9:9d:08:1c:8f:85:d3:1a:3e:a6: 1f:5c:38:33:3f:35:b4:6a:38:85:84:87:b1:81:4e: 7b:90:14:7b:d3:0e:18:d3:9e:6b:c1:ae:39:56:82: 2b:63:11:ef:c9:10:87:af:dd:ba:90:d3:9b:2c:9a: 31:b8:b1:4a:7a:01:0f:02:1c:f0:b9:0b:07:9b:e3: ea:cf:4d:20:a1:14:ca:7b:e8:81:59:e1:ea:1a:df: 52:ad:93:5b:85:0e:62:94:9a:61:79:69:9a:08:89: 11:f6:b1:9c:83:fe:24:ae:56:e6:98:06:7f:7f:36: c1:4a:a0:38:17:10:01:74:58:7d:17:35:30:72:e3: fe:2e:3c:15:cd:d2:08:4b:b7:14:25:81:8e:87:60: 90:a0:dd:4a:f2:3f:cd:60:80:57:a3:34:d4:ae:c5: ce:d0:e3:e4:19:7c:2e:0c:44:df:73:0d:ee:7d:80: 41:9b:7b:90:0c:1c:83:08:f7:a4:44:f6:57:80:96: 49:8f:11:f5:c0:09:c3:01:22:7b:9b:15:98:30:48: 95:38:ef:56:02:72:a2:21:fb:a3:7b:2f:73:67:2c: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:16:14:01:37:89:11:68:EE:83:7E:8E:1C:D7:B2:B4:40:A1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f0:4e:58:8c:77:33:79:2d:5b:19:ee:0f:46:cc:ca:2b:49: 19:7d:80:e4:b3:84:6f:8d:9a:fc:da:4b:08:a1:92:75:06:95: 0e:20:c4:1a:e0:d1:9d:13:97:ea:f5:1b:7c:32:e5:5b:bd:8d: 33:29:8e:ac:f6:c6:47:c1:04:1d:c1:a1:cc:c0:16:57:7b:3e: fa:08:9b:0f:5a:bd:e2:75:b5:f1:41:93:12:62:c8:8e:28:f3: d3:0b:01:75:a1:c5:9e:1f:2c:76:4a:70:e7:ce:3f:ff:72:a4: 86:c7:12:48:aa:46:89:2f:16:d9:39:86:e2:fa:c8:b1:12:19: fd:b3:03:eb:51:76:d2:fe:2a:ce:c2:88:d1:6c:68:33:a7:c4: 11:ff:bc:b1:a4:b9:37:0c:74:a2:41:3b:ab:3e:c1:c5:26:2d: 77:25:25:de:9b:9b:00:1d:60:6d:35:1c:12:21:f7:c4:04:9c: dc:18:75:b6:50:61:81:6f:b4:51:41:c0:69:f2:d9:65:84:ef: d9:b9:dc:15:fb:db:69:b7:09:93:44:2c:f0:38:67:a2:39:61: d8:6b:1d:18:75:d9:7e:c2:0c:14:10:9f:1f:11:9f:05:e1:24: 99:ab:76:99:5c:69:9d:82:fe:1a:d9:7c:37:ae:43:16:4c:4e: b5:7d:b9:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYysd0JgxMCQpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjBhNDc3YTctZTAwNy00YTMyLTljZGYtMzVhMzZiYTBiZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLv8gHOT+lEQlgjMZ/qPdyyi/QbZJ1keeTag JAJzUVukc9mdCByPhdMaPqYfXDgzPzW0ajiFhIexgU57kBR70w4Y055rwa45VoIr YxHvyRCHr926kNObLJoxuLFKegEPAhzwuQsHm+Pqz00goRTKe+iBWeHqGt9SrZNb hQ5ilJpheWmaCIkR9rGcg/4krlbmmAZ/fzbBSqA4FxABdFh9FzUwcuP+LjwVzdII S7cUJYGOh2CQoN1K8j/NYIBXozTUrsXO0OPkGXwuDETfcw3ufYBBm3uQDByDCPek RPZXgJZJjxH1wAnDASJ7mxWYMEiVOO9WAnKiIfujey9zZyx7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQNFhQBN4kRaO6Dfo4c17K0QKHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ3ZjFhYWEtOTAwMC0z OTQ4LWFhNjMtMGRlOWQ0NmE4ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjwTliMdzN5LVsZ7g9GzMorSRl9gOSzhG+NmvzaSwihknUGlQ4gxBrg 0Z0Tl+r1G3wy5Vu9jTMpjqz2xkfBBB3BoczAFld7PvoImw9aveJ1tfFBkxJiyI4o 89MLAXWhxZ4fLHZKcOfOP/9ypIbHEkiqRokvFtk5huL6yLESGf2zA+tRdtL+Ks7C iNFsaDOnxBH/vLGkuTcMdKJBO6s+wcUmLXclJd6bmwAdYG01HBIh98QEnNwYdbZQ YYFvtFFBwGny2WWE79m53BX722m3CZNELPA4Z6I5YdhrHRh12X7CDBQQnx8RnwXh JJmrdplcaZ2C/hrZfDeuQxZMTrV9uVY= -----END CERTIFICATE-----Generated at Tue Sep 22 14:51:24 2026 by rpki-client