$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa File: 50204a4b-b26e-3495-9dff-aefd45a35a55.roa (raw, json) Hash identifier: Gh6WHf8D9F+Nb3qnnQp1a6WslhTSdsTeySJhYwhXFwg= Subject key identifier: 2E:92:93:E1:85:91:94:DA:A7:90:3C:10:9F:22:AF:0E:3D:1A:A4:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8CFF6B88A2F9C1872D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.255.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8c:ff:6b:88:a2:f9:c1:87:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=ef4c4c9c-af43-4f35-b4fb-f0b5c2cb6667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:79:47:02:0d:d6:db:35:00:bf:5f:6f:87: 9a:73:35:a7:54:3d:fe:86:15:81:fa:ba:c2:45:b0: a2:31:e7:02:e9:4a:d5:a5:ec:28:6c:f9:89:65:5a: 14:03:70:60:34:11:d7:4e:d1:33:cf:a8:1e:9a:73: 99:6d:16:7d:cf:bc:6f:37:df:1e:37:26:b6:39:97: 42:33:10:dd:cd:3a:35:b5:10:1c:91:70:11:ef:b7: 82:1f:f7:af:49:ce:ae:db:33:02:91:9a:7a:b5:04: e4:6a:7d:ca:3a:44:0b:08:32:38:70:4d:04:9c:01: 72:6c:5b:a0:bc:02:37:ff:08:6c:bc:3e:ab:66:c1: 48:e3:a3:ae:07:ae:a5:ff:b2:e1:1d:02:05:6a:b3: b7:10:80:08:d4:b6:c7:d8:f3:32:1d:96:b6:7c:72: 6e:9f:e4:9f:c6:20:42:95:05:d1:da:ff:35:ac:b6: 28:56:42:37:a7:3c:b6:d2:93:6a:fb:8d:a3:f6:27: 3a:4e:ca:22:b0:c7:36:1b:b3:2a:d3:e3:d7:f1:69: 0f:41:27:bf:df:e2:50:4f:15:7c:db:d5:3b:10:25: 93:64:62:65:7c:66:35:d9:5f:14:19:4c:e8:37:13: 46:f8:52:3f:84:11:49:8b:7d:86:17:61:46:47:b9: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:93:E1:85:91:94:DA:A7:90:3C:10:9F:22:AF:0E:3D:1A:A4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ce:ce:52:55:25:6b:6a:1e:21:9f:26:c6:8a:35:fb:d8:84: 1c:e5:21:a0:fb:67:55:d5:fa:d4:98:e5:80:30:13:3b:45:36: cb:98:5e:da:44:22:a5:ca:d4:89:39:b4:02:76:75:3d:0c:da: d1:e4:d4:49:e8:7c:0d:26:d9:9b:14:a8:9d:33:e7:3b:fd:78: b9:93:05:3a:81:95:be:1c:b4:fe:dc:98:b1:88:6a:00:31:ea: 97:4f:9c:50:2a:25:9d:04:34:cd:6a:c7:fc:80:2f:b1:44:2b: bb:71:24:22:99:80:12:5c:15:6b:b9:3b:16:8d:13:a1:5d:3a: 0a:73:1f:fc:1c:6d:9c:cd:b6:c9:13:85:5d:54:d7:d0:a7:70: 85:f8:41:c2:11:5d:48:e4:51:95:20:e3:aa:fc:f6:cd:64:e7: a9:37:ad:f0:bf:79:71:37:54:46:f2:47:1f:81:f2:4a:39:1a: b3:4b:a4:b3:14:1c:05:b1:c7:0c:3a:67:f0:17:c0:3e:d0:ea: 56:49:07:70:ea:e1:f2:45:3e:07:98:b8:35:1c:96:09:91:55: fc:be:0b:21:a6:1e:bf:a5:a0:e3:a1:9c:7c:29:88:79:c7:28: e1:72:c5:74:2d:f7:fc:dc:03:b0:48:27:4d:4e:01:95:86:e8: 1c:50:10:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYz/a4ii+cGHLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWY0YzRjOWMtYWY0My00ZjM1LWI0ZmItZjBiNWMyY2I2NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkB5RwIN1ts1AL9fb4eaczWnVD3+hhWB+rrC RbCiMecC6UrVpewobPmJZVoUA3BgNBHXTtEzz6gemnOZbRZ9z7xvN98eNya2OZdC MxDdzTo1tRAckXAR77eCH/evSc6u2zMCkZp6tQTkan3KOkQLCDI4cE0EnAFybFug vAI3/whsvD6rZsFI46OuB66l/7LhHQIFarO3EIAI1LbH2PMyHZa2fHJun+SfxiBC lQXR2v81rLYoVkI3pzy20pNq+42j9ic6TsoisMc2G7Mq0+PX8WkPQSe/3+JQTxV8 29U7ECWTZGJlfGY12V8UGUzoNxNG+FI/hBFJi32GF2FGR7l7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6Sk+GFkZTap5A8EJ8irw49GqTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTAyMDRhNGItYjI2ZS0z NDk1LTlkZmYtYWVmZDQ1YTM1YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHOzlJVJWtqHiGfJsaKNfvYhBzlIaD7Z1XV+tSY5YAwEztFNsuYXtpE IqXK1Ik5tAJ2dT0M2tHk1EnofA0m2ZsUqJ0z5zv9eLmTBTqBlb4ctP7cmLGIagAx 6pdPnFAqJZ0ENM1qx/yAL7FEK7txJCKZgBJcFWu5OxaNE6FdOgpzH/wcbZzNtskT hV1U19CncIX4QcIRXUjkUZUg46r89s1k56k3rfC/eXE3VEbyRx+B8ko5GrNLpLMU HAWxxww6Z/AXwD7Q6lZJB3Dq4fJFPgeYuDUclgmRVfy+CyGmHr+loOOhnHwpiHnH KOFyxXQt9/zcA7BIJ01OAZWG6BxQEIo= -----END CERTIFICATE-----Generated at Wed Sep 23 01:38:02 2026 by rpki-client