$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa File: 3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa (raw, json) Hash identifier: nkiQRjIziKv6UcaMj8lBpYY64CKXf5kmgf5SEG4gU3I= Subject key identifier: 96:74:71:92:7F:35:C4:03:0F:64:DF:21:F4:22:84:8C:E1:51:46:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD294EE61978BA011DD020 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:29:4e:e6:19:78:ba:01:1d:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=eabf97d6-51b0-434e-b22b-7e2ce616e95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:b7:f8:93:b6:ef:6d:f3:97:2a:3b:b8:84: 54:1b:e4:7a:df:ad:48:97:e6:59:1a:96:05:1b:10: fa:fa:7a:21:02:b6:0e:d8:da:db:65:80:68:2a:9e: be:38:77:f8:cf:12:b9:bd:c7:16:98:be:91:02:61: a2:05:3c:98:8a:fc:9d:28:b0:37:4c:ac:7f:07:27: a9:02:3d:f9:fc:91:46:d4:bb:2c:d3:2a:4f:8f:bc: 8e:14:de:a6:9e:45:f9:3c:a1:66:6c:ec:8e:48:71: 72:ed:66:32:0b:e4:0f:f4:4a:d3:61:3e:ab:b9:fa: fb:64:98:0b:ea:58:65:de:49:62:53:1a:84:40:6e: 52:da:f9:9b:da:84:4e:7d:e6:e8:8e:57:b3:ad:2b: fa:6e:73:b4:d0:7c:19:5a:26:52:79:2f:cd:3e:3b: 44:ca:38:f9:1a:97:58:58:be:ab:b0:0d:b8:1a:a6: fb:11:b5:f2:5a:f3:54:37:89:97:50:26:d3:6a:09: 82:aa:51:9a:63:68:3b:ca:04:9d:3c:c4:2f:13:98: a9:2a:7b:d8:1f:12:03:9d:60:78:b4:77:82:6d:73: de:fa:2e:d7:9b:7e:a1:19:d8:76:b4:5d:dc:91:0e: 53:b7:44:c2:22:28:eb:76:f7:54:09:e6:0d:2a:5d: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:74:71:92:7F:35:C4:03:0F:64:DF:21:F4:22:84:8C:E1:51:46:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3c:9d:c4:eb:57:c5:24:27:bf:63:aa:d0:b5:9b:37:9f:18: 27:25:47:71:e6:22:71:98:b8:80:75:5e:d5:34:34:58:d3:cb: 06:4f:a3:a0:62:43:e2:6d:4d:6f:bc:32:f4:8b:a8:6a:72:b8: b0:b2:ea:8f:60:3c:8c:a7:7e:b0:bf:cc:b5:00:f2:a0:bc:02: b5:1d:3a:e8:6d:29:91:1a:b9:48:41:8c:3b:07:13:0b:72:fe: 71:bd:cb:86:2e:cc:01:f7:e8:f5:bf:0a:56:7c:d5:62:71:a1: 0e:99:34:a7:84:4f:9a:c4:00:91:ad:37:54:b2:26:7f:41:1d: 17:c2:88:27:ce:cb:2d:70:09:c5:f9:e4:d3:f6:30:72:a8:bc: 60:f7:bd:c3:2a:f1:b3:7a:c7:7f:ce:f2:d8:9e:69:af:4b:5f: 85:93:72:9d:7f:c9:dc:9c:7d:fa:11:51:21:ed:16:b4:83:df: 4a:37:bb:9f:c9:7e:72:43:29:fb:b4:16:99:b3:c3:d4:f0:d8: a9:fd:ac:18:e8:52:e7:84:8b:54:22:d5:e2:25:f8:90:9d:48: 35:d8:45:6f:b5:30:f0:3c:40:ff:76:8d:0d:71:8d:74:69:fa: 78:44:a9:eb:ee:a9:e1:90:40:0c:d9:c7:ef:3c:39:b1:61:ae: 05:36:c0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSlO5hl4ugEd0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWFiZjk3ZDYtNTFiMC00MzRlLWIyMmItN2UyY2U2MTZlOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMG3+JO2723zlyo7uIRUG+R6361Il+ZZGpYF GxD6+nohArYO2NrbZYBoKp6+OHf4zxK5vccWmL6RAmGiBTyYivydKLA3TKx/Byep Aj35/JFG1Lss0ypPj7yOFN6mnkX5PKFmbOyOSHFy7WYyC+QP9ErTYT6rufr7ZJgL 6lhl3kliUxqEQG5S2vmb2oROfebojlezrSv6bnO00HwZWiZSeS/NPjtEyjj5GpdY WL6rsA24Gqb7EbXyWvNUN4mXUCbTagmCqlGaY2g7ygSdPMQvE5ipKnvYHxIDnWB4 tHeCbXPe+i7Xm36hGdh2tF3ckQ5Tt0TCIijrdvdUCeYNKl3ehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ0cZJ/NcQDD2TfIfQihIzhUUZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NiOWU1YTItMWIzOC0z M2VkLTgzMTUtYWZkYjZmMjQ0MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII8ncTrV8UkJ79jqtC1mzefGCclR3HmInGYuIB1XtU0NFjTywZPo6Bi Q+JtTW+8MvSLqGpyuLCy6o9gPIynfrC/zLUA8qC8ArUdOuhtKZEauUhBjDsHEwty /nG9y4YuzAH36PW/ClZ81WJxoQ6ZNKeET5rEAJGtN1SyJn9BHRfCiCfOyy1wCcX5 5NP2MHKovGD3vcMq8bN6x3/O8tieaa9LX4WTcp1/ydycffoRUSHtFrSD30o3u5/J fnJDKfu0Fpmzw9Tw2Kn9rBjoUueEi1Qi1eIl+JCdSDXYRW+1MPA8QP92jQ1xjXRp +nhEqevuqeGQQAzZx+88ObFhrgU2wLw= -----END CERTIFICATE-----Generated at Fri Sep 25 00:30:35 2026 by rpki-client