$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa File: 50204a4b-b26e-3495-9dff-aefd45a35a55.roa (raw, json) Hash identifier: eciO6BA86Po5fNV/DMuRViJzBp7aFT6sGaoHu5buH1Y= Subject key identifier: F4:75:73:86:D8:05:BA:C2:72:3D:5C:29:FA:DC:59:05:B5:58:3E:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB88ED5FC18CD6AA62A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 24.255.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b8:8e:d5:fc:18:cd:6a:a6:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=e9596ea6-4154-4ee7-858b-84649bc333c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:71:e4:15:bc:0f:12:b2:26:6c:03:b6:c4: e2:f0:91:1f:77:fd:3a:60:00:df:17:24:55:1e:92: 65:ce:1b:a9:84:f9:c2:42:24:14:12:ac:a6:86:42: e9:95:ca:b5:33:54:46:17:ae:99:4a:03:ea:b1:54: e1:70:88:da:4d:7c:7b:17:c7:76:96:a6:2b:44:8a: 34:f4:2f:78:18:07:d7:16:5d:91:69:69:e5:c5:c9: b1:90:cf:03:5f:8f:c5:06:61:26:bb:8b:57:80:50: 16:69:79:6f:29:98:78:b9:91:d4:4d:38:cc:34:7c: b0:d2:20:2c:e7:b6:ff:af:a4:2d:ad:4d:75:0e:65: 41:03:20:02:54:6d:e5:24:5e:68:a4:5f:2e:51:9d: e3:00:be:8a:0d:1a:15:ca:4f:ba:a0:db:e8:ed:33: 72:9d:c9:9c:df:4b:d3:b1:d9:0a:53:11:74:c8:47: 6b:b9:24:0b:37:3f:03:86:53:d2:e0:75:32:68:0d: f3:48:25:cd:ed:fc:36:9d:45:ab:59:56:5d:96:9b: de:ca:65:1b:47:ee:b2:6a:ee:7b:c9:52:e9:b9:d2: b6:a1:f4:06:12:c1:1c:ab:e5:59:ae:34:24:0d:29: 83:9a:6f:77:a4:ec:a6:2f:42:a0:58:df:b6:20:28: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:75:73:86:D8:05:BA:C2:72:3D:5C:29:FA:DC:59:05:B5:58:3E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50204a4b-b26e-3495-9dff-aefd45a35a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:95:14:37:0c:fe:c7:00:fc:00:2a:e6:91:a9:ae:30:6c:1c: 31:e9:0f:20:8b:e5:31:51:5f:e3:fb:68:de:36:bb:99:45:b3: 1f:e0:dc:03:4d:47:9b:0b:c6:ff:7a:36:e2:eb:f7:9b:83:80: 13:e8:09:5c:b1:51:bb:8c:9b:8a:e0:02:f5:ea:af:04:e2:12: ce:af:b8:81:9e:94:25:f7:74:4f:41:5c:d7:a3:11:6b:4a:ad: 6d:8f:4a:c0:d4:ec:f8:1d:dd:a0:0b:31:7a:0c:d6:97:f6:5e: 30:05:04:9f:1e:8a:52:f6:ef:18:e8:b4:c0:35:c8:26:6d:64: 0d:c5:45:5a:f0:c5:a0:29:ae:f2:59:e2:5e:cb:f5:b2:39:31: 67:3e:65:2b:08:3f:bc:2a:eb:8e:7f:6a:71:27:20:be:35:91: bd:f8:c2:58:70:da:3e:e5:3e:90:62:1a:e8:da:0a:c7:7b:0c: fb:c3:fa:1c:9f:8b:0a:92:e0:5a:f2:54:91:49:f9:43:ad:86: 56:c6:60:7b:15:0f:b3:82:d9:f3:92:6e:86:69:30:1c:01:f6: bc:8b:ab:b2:2d:a5:73:0c:b8:ee:c6:04:5d:c7:09:65:ae:51: a3:4a:3e:12:77:2b:22:ad:b7:5b:fa:d6:d4:0b:38:03:87:47: 49:5f:24:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSriO1fwYzWqmKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZTk1OTZlYTYtNDE1NC00ZWU3LTg1OGItODQ2NDliYzMzM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmtx5BW8DxKyJmwDtsTi8JEfd/06YADfFyRV HpJlzhuphPnCQiQUEqymhkLplcq1M1RGF66ZSgPqsVThcIjaTXx7F8d2lqYrRIo0 9C94GAfXFl2RaWnlxcmxkM8DX4/FBmEmu4tXgFAWaXlvKZh4uZHUTTjMNHyw0iAs 57b/r6QtrU11DmVBAyACVG3lJF5opF8uUZ3jAL6KDRoVyk+6oNvo7TNyncmc30vT sdkKUxF0yEdruSQLNz8DhlPS4HUyaA3zSCXN7fw2nUWrWVZdlpveymUbR+6yau57 yVLpudK2ofQGEsEcq+VZrjQkDSmDmm93pOymL0KgWN+2ICj95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR1c4bYBbrCcj1cKfrcWQW1WD65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTAyMDRhNGItYjI2ZS0z NDk1LTlkZmYtYWVmZDQ1YTM1YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+VFDcM/scA/AAq5pGprjBsHDHpDyCL5TFRX+P7aN42u5lFsx/g3ANN R5sLxv96NuLr95uDgBPoCVyxUbuMm4rgAvXqrwTiEs6vuIGelCX3dE9BXNejEWtK rW2PSsDU7Pgd3aALMXoM1pf2XjAFBJ8eilL27xjotMA1yCZtZA3FRVrwxaAprvJZ 4l7L9bI5MWc+ZSsIP7wq645/anEnIL41kb34wlhw2j7lPpBiGujaCsd7DPvD+hyf iwqS4FryVJFJ+UOthlbGYHsVD7OC2fOSboZpMBwB9ryLq7ItpXMMuO7GBF3HCWWu UaNKPhJ3KyKtt1v61tQLOAOHR0lfJCE= -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:58 2026 by rpki-client