$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528c85bf-1ecf-3e48-8f7b-4c7271ff32c5.roa File: 528c85bf-1ecf-3e48-8f7b-4c7271ff32c5.roa (raw, json) Hash identifier: UQhNf+Bks5RdeWlEGyDHoELvQCNiPkAtBc8AbLKj9DQ= Subject key identifier: 96:86:7F:74:4B:80:C8:8C:CC:F1:CD:E8:FF:4F:64:60:74:3D:34:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD835F04873046D3FE2780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528c85bf-1ecf-3e48-8f7b-4c7271ff32c5.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:83:5f:04:87:30:46:d3:fe:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=74f73439-6dd0-4671-b537-f5f04942c2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:c9:30:cb:46:6d:63:9b:64:b2:f3:aa:81: f0:e0:a4:c4:6e:79:53:9f:f5:13:9d:b2:4e:7d:f6: 1f:b0:c5:b2:c7:78:ba:b4:aa:af:e3:93:fd:08:1d: b2:ec:25:81:52:fa:25:c0:06:46:88:2b:50:5a:80: 7a:e7:a7:96:a9:8a:66:42:2c:0d:e9:26:b6:9e:2c: b9:66:b5:19:ad:3b:38:04:c4:60:81:dd:09:65:5d: d7:08:0e:4c:24:37:12:f7:95:b6:11:8e:f3:97:6a: 39:b0:a5:09:6d:32:c7:c9:f1:f7:db:bf:8c:86:f5: 1d:73:1d:c5:c3:80:bf:40:60:b1:0d:09:30:57:63: 14:99:71:38:55:99:96:42:bd:69:73:d5:81:61:26: ce:90:85:1b:b6:da:3d:de:d2:7e:2a:b1:6d:3c:bf: 0b:70:15:56:f4:4a:08:f1:8a:64:0b:48:6f:c5:f8: 35:b8:27:c9:74:92:33:1f:83:8f:32:b7:c1:b1:55: b5:1b:d3:a6:ed:c3:ee:bd:5e:5e:0e:ba:67:18:60: ef:f2:14:6a:f7:77:61:45:a8:17:cc:df:ed:22:27: d1:e3:a6:78:56:20:5f:19:7a:fd:b1:f8:6b:40:31: a1:36:19:6f:6a:70:84:c2:d4:be:26:4b:cf:ef:a1: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:7F:74:4B:80:C8:8C:CC:F1:CD:E8:FF:4F:64:60:74:3D:34:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528c85bf-1ecf-3e48-8f7b-4c7271ff32c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:6b:6b:cc:53:00:ce:10:1f:6f:bc:20:83:d1:be:eb:61: 87:28:81:52:f8:d6:de:9b:3b:37:e0:b4:b2:af:82:bc:ae:5a: c4:cc:bc:72:b3:34:1a:3a:9f:44:13:92:91:ae:ff:31:39:fb: f1:c3:1c:c9:5e:54:1f:52:c6:1e:84:51:be:8a:4f:30:77:dd: 17:bb:bb:b1:41:f9:6d:79:a5:8d:32:1b:82:ae:48:63:34:99: 3c:e2:b0:b5:d0:77:5d:dc:28:0d:95:10:f0:41:00:00:82:14: 0f:a4:f1:03:74:58:51:e6:b1:e7:16:92:91:dc:e0:f3:c4:50: 71:49:88:b3:ad:bd:ed:87:8e:51:14:0b:be:e4:53:c0:b5:2a: 19:2e:c5:fc:5f:3f:44:70:8e:c0:03:6e:42:b9:c1:79:ec:ab: 8e:7b:c2:88:26:88:27:98:4a:e4:f0:e4:0b:80:1e:e2:5d:0f: 43:d0:c9:ce:2f:4e:84:a6:30:8c:06:0d:4d:cb:0e:e7:0d:27: fd:1c:0e:7c:c9:b4:d5:e1:ac:fe:98:21:6b:2b:ad:ca:9c:ad: ec:15:77:b3:8b:bd:b9:24:34:62:ca:cc:e1:eb:08:0f:40:52: 7e:42:c3:f6:59:1a:c7:f2:af:e6:88:c0:dd:a3:3c:52:01:e7: 61:56:80:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYNfBIcwRtP+J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NzRmNzM0MzktNmRkMC00NjcxLWI1MzctZjVmMDQ5NDJjMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVjJMMtGbWObZLLzqoHw4KTEbnlTn/UTnbJO ffYfsMWyx3i6tKqv45P9CB2y7CWBUvolwAZGiCtQWoB656eWqYpmQiwN6Sa2niy5 ZrUZrTs4BMRggd0JZV3XCA5MJDcS95W2EY7zl2o5sKUJbTLHyfH327+MhvUdcx3F w4C/QGCxDQkwV2MUmXE4VZmWQr1pc9WBYSbOkIUbtto93tJ+KrFtPL8LcBVW9EoI 8YpkC0hvxfg1uCfJdJIzH4OPMrfBsVW1G9Om7cPuvV5eDrpnGGDv8hRq93dhRagX zN/tIifR46Z4ViBfGXr9sfhrQDGhNhlvanCEwtS+JkvP76G+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaGf3RLgMiMzPHN6P9PZGB0PTQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI4Yzg1YmYtMWVjZi0z ZTQ4LThmN2ItNGM3MjcxZmYzMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Ea2vMUwDOEB9vvCCD0b7rYYcogVL41t6bOzfgtLKvgryuWsTMvHKz NBo6n0QTkpGu/zE5+/HDHMleVB9Sxh6EUb6KTzB33Re7u7FB+W15pY0yG4KuSGM0 mTzisLXQd13cKA2VEPBBAACCFA+k8QN0WFHmsecWkpHc4PPEUHFJiLOtve2HjlEU C77kU8C1KhkuxfxfP0RwjsADbkK5wXnsq457wogmiCeYSuTw5AuAHuJdD0PQyc4v ToSmMIwGDU3LDucNJ/0cDnzJtNXhrP6YIWsrrcqcrewVd7OLvbkkNGLKzOHrCA9A Un5Cw/ZZGsfyr+aIwN2jPFIB52FWgC4= -----END CERTIFICATE-----Generated at Tue Sep 22 08:58:42 2026 by rpki-client