$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fb0bf6-a522-33d8-9064-2b821bbf69b1.roa File: 39fb0bf6-a522-33d8-9064-2b821bbf69b1.roa (raw, json) Hash identifier: +KM0DrwwIe5Or8Ny5P+zxNyI+LeDdTHHV6nLiAvBO0I= Subject key identifier: 2C:9D:CF:46:00:19:1B:5A:AF:CE:FF:B5:5D:B4:AB:80:90:70:33:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB7FF22B56577AEAAF210 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fb0bf6-a522-33d8-9064-2b821bbf69b1.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 24.251.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b7:ff:22:b5:65:77:ae:aa:f2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=b796bc41-63fe-417c-93f2-82762acb0eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:a7:f1:f2:21:0c:59:65:d3:2f:27:b4:b0: 90:e0:f9:9d:f2:b6:80:cc:da:da:d6:b7:42:69:3e: 69:c4:85:58:7d:93:fd:b9:88:70:02:30:76:80:b1: 55:a2:02:1d:14:87:8a:08:3f:63:2a:cf:f5:44:d8: aa:aa:e9:e9:34:27:f1:bb:63:c5:71:65:5f:7a:a1: 0e:5c:b9:fa:6b:e7:c0:7c:71:2e:70:5f:d2:49:78: 43:65:03:17:c5:2e:32:c5:cf:38:3e:f8:d0:27:4d: 96:8c:d1:46:3c:98:59:b5:e6:79:67:70:d7:ef:5f: 7f:96:d5:26:1f:96:c2:d4:f3:23:4d:47:32:54:ba: e7:55:c9:3e:e7:96:56:8e:bb:5b:94:21:ba:33:a7: 36:ac:9b:54:38:2f:f1:31:ea:41:73:35:0a:5b:0d: 9c:67:a3:60:bc:aa:0d:a5:ed:ad:d5:d9:91:6e:f7: e1:f8:89:01:d1:19:de:cd:3b:db:77:72:ae:fb:28: 58:38:3f:7d:7c:ff:81:62:bd:44:7f:3e:cf:61:a5: 58:5f:4e:9c:a1:82:60:45:9b:33:c2:89:ff:97:86: 7b:74:95:03:9e:c5:e4:c6:78:99:9a:96:a6:48:c2: da:68:20:e1:9c:a5:60:dc:ce:1a:a2:25:c9:aa:7f: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:CF:46:00:19:1B:5A:AF:CE:FF:B5:5D:B4:AB:80:90:70:33:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fb0bf6-a522-33d8-9064-2b821bbf69b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4f:b5:46:66:c1:ef:c8:1a:65:1f:68:03:d3:86:bd:e4:0e: ae:31:fc:7f:1e:26:7d:b7:70:de:29:35:d4:04:90:c6:cf:db: 9d:61:94:a0:a9:75:06:86:5e:f0:1f:1a:d1:c9:1a:1b:8c:96: 70:e1:4f:53:b4:37:f6:21:0f:29:a8:60:d3:ed:43:42:37:45: 25:ec:ec:c8:91:7a:92:c5:43:94:90:b8:5f:6f:d1:b1:8e:53: a5:3b:60:ce:b4:89:18:83:9f:83:c4:c3:29:63:90:39:c9:42: 1b:0e:b9:32:e2:b4:ac:73:31:81:7d:93:15:b3:cf:ba:97:b9: b1:c1:0d:03:de:df:e0:c5:81:3b:41:58:ac:6f:34:8e:a3:00: e4:36:4f:28:29:66:92:ad:2a:bd:f0:c2:da:ec:4d:bc:c0:bd: b7:86:7b:78:7e:40:77:2c:5c:e0:94:be:8a:3d:c5:49:f9:1f: c5:5e:45:96:78:95:37:d6:22:ec:a1:68:b1:54:a5:bc:9b:57: ea:e4:df:61:b3:2e:a5:c7:65:9a:0c:a7:dd:44:60:81:cd:0f: 93:d5:b1:bd:58:62:56:75:58:32:f5:52:5e:50:e5:b2:a9:39: b4:15:67:f3:13:ce:fe:42:54:d0:0a:24:e0:18:2f:91:b4:5a: 14:ae:63:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrf/IrVld66q8hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk Yjc5NmJjNDEtNjNmZS00MTdjLTkzZjItODI3NjJhY2IwZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG+n8fIhDFll0y8ntLCQ4Pmd8raAzNra1rdC aT5pxIVYfZP9uYhwAjB2gLFVogIdFIeKCD9jKs/1RNiqqunpNCfxu2PFcWVfeqEO XLn6a+fAfHEucF/SSXhDZQMXxS4yxc84PvjQJ02WjNFGPJhZteZ5Z3DX719/ltUm H5bC1PMjTUcyVLrnVck+55ZWjrtblCG6M6c2rJtUOC/xMepBczUKWw2cZ6NgvKoN pe2t1dmRbvfh+IkB0RnezTvbd3Ku+yhYOD99fP+BYr1Efz7PYaVYX06coYJgRZsz won/l4Z7dJUDnsXkxniZmpamSMLaaCDhnKVg3M4aoiXJqn/COQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCydz0YAGRtar87/tV20q4CQcDNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzlmYjBiZjYtYTUyMi0z M2Q4LTkwNjQtMmI4MjFiYmY2OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtPtUZmwe/IGmUfaAPThr3kDq4x/H8eJn23cN4pNdQEkMbP251hlKCp dQaGXvAfGtHJGhuMlnDhT1O0N/YhDymoYNPtQ0I3RSXs7MiRepLFQ5SQuF9v0bGO U6U7YM60iRiDn4PEwyljkDnJQhsOuTLitKxzMYF9kxWzz7qXubHBDQPe3+DFgTtB WKxvNI6jAOQ2TygpZpKtKr3wwtrsTbzAvbeGe3h+QHcsXOCUvoo9xUn5H8VeRZZ4 lTfWIuyhaLFUpbybV+rk32GzLqXHZZoMp91EYIHND5PVsb1YYlZ1WDL1Ul5Q5bKp ObQVZ/MTzv5CVNAKJOAYL5G0WhSuY8A= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:11 2026 by rpki-client