$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa File: 3488763e-d46e-3215-b3d9-da4985524061.roa (raw, json) Hash identifier: cMDCNEiPe0gIC/Jk5VjNt1T8hrfiDH2E77EH3A6w/5s= Subject key identifier: 3E:EA:D1:51:D2:88:16:EC:89:1D:73:1F:B6:57:2A:EE:05:4D:4E:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD2977977DF635840CE500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:29:77:97:7d:f6:35:84:0c:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=076e8734-fb13-4a7a-bc2d-92086a38b58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:9a:ee:48:88:17:b2:d8:90:12:fe:66:06: b8:76:e3:89:b2:b3:cf:9b:46:2e:2f:65:bc:4a:21: 81:04:07:0f:3f:fe:bb:cc:ba:2f:0f:21:8a:10:3a: fb:91:90:cf:fa:6d:b8:36:bf:80:43:94:06:4e:65: ff:76:2d:f6:06:df:29:2d:ad:3f:33:3a:71:53:2f: a6:67:f4:6d:0a:f7:66:68:76:8f:bd:52:c4:ee:ea: 4a:81:f4:f8:49:a0:cf:21:a0:22:0b:fd:a9:97:80: e8:bf:9a:5e:99:bb:59:8e:5d:04:bd:44:92:71:07: 89:9d:3c:4b:2e:46:09:28:4e:d7:be:3b:7f:34:21: a3:c8:02:20:9c:09:1f:30:a7:49:59:42:24:09:9b: 7e:14:3a:d7:e1:7c:ff:99:08:81:d8:fd:1e:4a:a2: 4b:ac:d5:10:bb:83:86:1b:9e:82:0f:e3:67:b6:fe: 88:67:bb:6e:83:8a:d6:17:19:cf:2b:41:ca:f9:24: c1:ab:78:6e:27:a4:64:7c:79:55:cc:b0:68:8c:bc: 66:4c:32:a4:e4:f2:f5:f1:ec:b1:fd:62:e5:de:8d: c5:43:18:d4:47:45:eb:f7:2b:3d:f0:ed:b8:42:62: a8:04:47:65:0a:d5:ca:7f:7b:b3:58:02:d0:55:b4: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:D1:51:D2:88:16:EC:89:1D:73:1F:B6:57:2A:EE:05:4D:4E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0b:44:64:9b:f2:31:62:fc:e9:39:d2:56:54:bc:97:5d:f2: ab:84:49:a7:2f:44:4b:75:50:a1:49:89:b0:2f:4e:ab:b9:64: 76:cc:22:f8:99:3c:bd:fe:8a:12:30:63:6b:2b:a3:7a:4e:e4: 72:78:87:de:1f:ca:d0:f1:ac:ac:93:c7:27:59:95:b5:bf:46: 30:99:95:2d:1a:2a:19:12:17:01:c5:16:d6:dd:37:8a:9d:a4: ca:10:5f:a2:1a:6d:15:a9:b6:d6:7a:29:97:5d:88:b4:6f:c8: 5e:35:1a:79:59:a8:7f:6f:f7:58:a5:8a:90:28:47:3d:5c:c7: b7:ac:4d:70:b6:e9:38:45:9f:71:7e:70:c0:a1:31:39:c1:8c: ed:4f:83:5f:fc:ac:93:ad:b8:90:71:27:e9:2c:ef:24:b5:85: b8:9a:65:52:1b:1c:f7:0d:62:d0:b8:87:d7:99:ea:a8:53:81: 63:4e:6a:53:8f:c0:2e:1d:81:6c:a4:7d:6f:cc:06:ac:14:58: 54:ac:06:c2:f6:47:d6:1f:2a:71:ad:b6:56:01:42:b5:e6:b5: b6:e3:31:ba:dd:f6:a6:9b:26:58:06:5a:c5:9f:9a:ea:f6:6a: 51:c1:75:71:e4:04:fc:b4:c7:7e:0d:6b:fd:ee:01:b9:5c:4e: 0c:cc:e6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSl3l332NYQM5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDc2ZTg3MzQtZmIxMy00YTdhLWJjMmQtOTIwODZhMzhiNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbSa7kiIF7LYkBL+Zga4duOJsrPPm0YuL2W8 SiGBBAcPP/67zLovDyGKEDr7kZDP+m24Nr+AQ5QGTmX/di32Bt8pLa0/MzpxUy+m Z/RtCvdmaHaPvVLE7upKgfT4SaDPIaAiC/2pl4Dov5pembtZjl0EvUSScQeJnTxL LkYJKE7Xvjt/NCGjyAIgnAkfMKdJWUIkCZt+FDrX4Xz/mQiB2P0eSqJLrNUQu4OG G56CD+Nntv6IZ7tug4rWFxnPK0HK+STBq3huJ6RkfHlVzLBojLxmTDKk5PL18eyx /WLl3o3FQxjUR0Xr9ys98O24QmKoBEdlCtXKf3uzWALQVbSVoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7q0VHSiBbsiR1zH7ZXKu4FTU4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ4ODc2M2UtZDQ2ZS0z MjE1LWIzZDktZGE0OTg1NTI0MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEELRGSb8jFi/Ok50lZUvJdd8quESacvREt1UKFJibAvTqu5ZHbMIviZ PL3+ihIwY2sro3pO5HJ4h94fytDxrKyTxydZlbW/RjCZlS0aKhkSFwHFFtbdN4qd pMoQX6IabRWpttZ6KZddiLRvyF41GnlZqH9v91ilipAoRz1cx7esTXC26ThFn3F+ cMChMTnBjO1Pg1/8rJOtuJBxJ+ks7yS1hbiaZVIbHPcNYtC4h9eZ6qhTgWNOalOP wC4dgWykfW/MBqwUWFSsBsL2R9YfKnGttlYBQrXmtbbjMbrd9qabJlgGWsWfmur2 alHBdXHkBPy0x34Na/3uAblcTgzM5vM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:24:59 2026 by rpki-client