$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca101c-f70a-33bb-9192-8e61b27309fa.roa File: 30ca101c-f70a-33bb-9192-8e61b27309fa.roa (raw, json) Hash identifier: LDUXp7cTtnS/0YVeYacJZTE5We9W+RHGcPjUz9V0V3s= Subject key identifier: B3:AF:5F:49:A8:F5:D6:C4:B4:C8:12:C2:D8:16:38:50:7D:8D:25:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A9E383A0325428CB8BA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca101c-f70a-33bb-9192-8e61b27309fa.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 65533 IP address blocks: 24.120.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:9e:38:3a:03:25:42:8c:b8:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=55ebff67-3f43-470a-8998-aad019895a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:47:e9:cd:3a:95:57:8a:df:86:51:35:98: fd:0f:d5:91:5c:1e:0c:6c:9c:1c:15:53:16:e1:e0: 9a:39:77:ec:43:a5:6b:67:4a:ab:ed:da:6f:a5:15: ba:e6:98:a1:20:e4:ac:4e:f8:2e:b7:24:62:52:bd: 4e:04:a1:b2:24:82:b1:aa:84:4c:97:c8:84:12:12: f3:ca:76:94:d6:78:4e:d2:24:1a:4e:33:9c:05:b0: dc:e3:ee:67:b4:58:02:ea:7e:f9:77:fd:63:db:20: 80:67:57:6e:aa:14:bb:a6:37:fd:19:38:1a:ba:30: 8f:03:3f:e1:83:df:49:15:d8:8f:b7:21:8d:48:79: 85:65:65:1e:f6:dd:2c:02:bf:d0:d9:77:d4:53:8f: 94:32:b9:76:c7:7d:63:66:7d:e1:f1:c3:32:55:57: 5f:20:09:dc:2c:da:63:aa:0b:0a:94:88:a0:db:af: 35:8b:81:41:5b:45:e9:30:22:cb:4b:b6:e1:95:9b: 8e:01:97:46:f1:8a:21:35:ce:39:70:c7:02:19:3d: 0b:70:1f:2a:db:c5:1d:78:d6:2f:d7:3c:cc:a9:ea: 0e:d8:f6:07:5f:44:eb:02:1c:ff:95:90:e2:f2:ae: 39:1f:60:16:56:5a:3a:55:af:82:82:01:34:6f:cb: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:5F:49:A8:F5:D6:C4:B4:C8:12:C2:D8:16:38:50:7D:8D:25:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca101c-f70a-33bb-9192-8e61b27309fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.120.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:93:9a:5c:2a:32:13:ee:02:3a:e8:19:f1:60:e7:95:72:9c: 9f:94:b1:5d:b1:a8:8c:20:ed:d3:11:c6:b8:a5:c2:89:32:56: 61:65:52:c3:99:db:7a:a1:5f:02:ae:3f:f6:87:ec:ba:ec:77: bd:fb:1c:df:4d:e7:37:97:a5:c8:e7:21:6b:32:ec:e3:50:d3: 13:2a:19:5f:58:af:f6:c7:e4:54:03:e1:fc:fb:cc:e0:fb:d8: 1f:b2:08:13:bf:76:d6:e4:ea:ad:d7:99:e7:09:19:f7:be:3d: d5:f2:5a:08:b4:27:4a:1e:72:ce:cf:16:ab:93:7e:da:76:0f: 40:7d:08:12:89:29:31:0e:d2:0b:c4:21:37:f0:3e:d4:ad:74: 9f:02:14:fc:88:72:7a:e7:6c:f9:d0:1d:3a:c9:4c:4c:c4:54: 2d:5b:c9:34:fd:4d:51:ba:01:b5:81:dd:fc:ad:e9:97:8a:fd: d3:ec:a5:44:4c:c2:be:4d:f6:5a:a7:b5:b5:02:fc:66:75:77: 66:ba:88:77:7c:f7:fd:b0:81:e5:5c:65:b2:d8:ef:8e:63:2f: d4:97:ac:ff:ac:27:9a:27:c0:ca:f5:86:30:02:a3:27:84:1b: 47:59:41:ce:bb:81:f4:dd:ef:ff:70:80:13:be:60:b5:32:03: 48:a6:41:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hep44OgMlQoy4ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NTVlYmZmNjctM2Y0My00NzBhLTg5OTgtYWFkMDE5ODk1YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhixH6c06lVeK34ZRNZj9D9WRXB4MbJwcFVMW 4eCaOXfsQ6VrZ0qr7dpvpRW65pihIOSsTvgutyRiUr1OBKGyJIKxqoRMl8iEEhLz ynaU1nhO0iQaTjOcBbDc4+5ntFgC6n75d/1j2yCAZ1duqhS7pjf9GTgaujCPAz/h g99JFdiPtyGNSHmFZWUe9t0sAr/Q2XfUU4+UMrl2x31jZn3h8cMyVVdfIAncLNpj qgsKlIig2681i4FBW0XpMCLLS7bhlZuOAZdG8YohNc45cMcCGT0LcB8q28UdeNYv 1zzMqeoO2PYHX0TrAhz/lZDi8q45H2AWVlo6Va+CggE0b8ti4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOvX0mo9dbEtMgSwtgWOFB9jSUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzBjYTEwMWMtZjcwYS0z M2JiLTkxOTItOGU2MWIyNzMwOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHjfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGTmlwqMhPuAjroGfFg55VynJ+UsV2xqIwg7dMRxrilwokyVmFlUsOZ 23qhXwKuP/aH7Lrsd737HN9N5zeXpcjnIWsy7ONQ0xMqGV9Yr/bH5FQD4fz7zOD7 2B+yCBO/dtbk6q3XmecJGfe+PdXyWgi0J0oecs7PFquTftp2D0B9CBKJKTEO0gvE ITfwPtStdJ8CFPyIcnrnbPnQHTrJTEzEVC1byTT9TVG6AbWB3fyt6ZeK/dPspURM wr5N9lqntbUC/GZ1d2a6iHd89/2wgeVcZbLY745jL9SXrP+sJ5onwMr1hjACoyeE G0dZQc67gfTd7/9wgBO+YLUyA0imQTU= -----END CERTIFICATE-----Generated at Wed Jul 29 07:10:31 2026 by rpki-client