$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a966fe73-9980-30f1-92d3-16edbcf04b66.roa File: a966fe73-9980-30f1-92d3-16edbcf04b66.roa (raw, json) Hash identifier: 8gV0MrJ68TaUF/bL89ipOy2KEm1SkcpxOW1YA94l1DI= Subject key identifier: 60:93:4F:97:AF:7C:FC:2C:02:69:CC:CC:63:BC:C6:8F:7D:4C:97:EA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F0AA2228BAC30BE871A6178A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a966fe73-9980-30f1-92d3-16edbcf04b66.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 40346 IP address blocks: 24.249.93.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:22:8b:ac:30:be:87:1a:61:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=70e488b1-02e2-4e93-9b63-9e24d8acb6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:d7:81:6a:60:6c:45:00:cf:af:11:21:87: 41:c8:e6:e7:d5:ee:96:4f:31:59:8e:a9:86:94:cf: 85:26:46:0d:79:bc:6a:5f:cf:b0:c1:82:73:7a:90: b0:cc:4f:0d:01:90:6d:0e:55:b4:04:47:04:a0:c5: 87:ac:58:f4:3c:93:d6:c4:01:f7:f7:9d:68:29:06: b7:eb:5e:22:9b:5e:9d:da:84:9f:ea:20:6a:b8:9d: 7c:09:f2:7a:56:e7:1e:ba:1c:5d:2b:e8:b3:49:f8: 68:7c:79:18:ae:e2:46:e9:d7:db:b0:5d:8e:13:1d: da:e5:fc:fa:79:a0:9e:92:62:9d:ed:f7:81:62:62: 49:4e:21:f6:24:11:a6:6d:96:97:c3:8f:cd:fd:5e: 8e:7d:00:a0:0f:4e:78:ee:ba:63:9c:bb:0f:c3:5c: 43:92:82:f8:91:aa:cf:40:0b:93:40:97:fa:fe:8b: d1:7a:1d:a3:a2:85:96:8f:1e:95:dc:84:ec:e0:4b: 03:c8:5d:ac:aa:4d:b1:d6:26:ca:ee:cb:e2:c2:32: c3:32:49:9f:a0:bc:08:5b:8b:b6:d0:5f:2c:3f:72: b5:e9:24:b9:9e:06:68:8c:f2:35:00:30:64:e0:ef: 17:9f:55:bd:6f:29:37:22:e5:be:2c:16:18:7d:89: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:93:4F:97:AF:7C:FC:2C:02:69:CC:CC:63:BC:C6:8F:7D:4C:97:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a966fe73-9980-30f1-92d3-16edbcf04b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.93.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ef:17:2b:5f:77:87:53:d9:d1:4e:11:e0:13:de:0d:c8:33: bc:60:d5:22:a8:2b:c8:d5:7d:90:1e:e9:7c:93:11:1d:29:72: 2c:df:3b:df:53:76:57:08:f0:a1:38:d0:dc:66:02:4f:3b:e1: 05:dc:c3:7e:0c:d4:09:bb:e9:40:e1:b8:09:fb:2b:ee:ca:c1: 70:e3:ed:51:86:82:3a:34:22:77:6f:65:b2:bd:92:a6:38:89: 97:5c:2b:79:67:08:a2:4c:79:8d:a1:61:99:2d:e1:f7:4e:46: 5a:13:b5:c4:8d:a5:31:8c:0c:19:99:1b:a0:8c:bf:1b:39:41: 62:42:11:af:68:d3:ab:10:b9:11:9e:54:7a:5c:14:fc:65:1f: 1a:8e:10:5e:f3:8e:3f:92:b1:92:43:6d:18:55:b1:42:77:23: 95:f9:d9:a1:ca:8c:de:30:92:90:b6:09:b7:bc:44:19:ca:f0: 08:9c:5b:5e:aa:2d:a0:ea:d7:22:42:0d:78:6d:fa:2d:1f:7a: 4c:ec:e5:01:1d:34:0d:98:96:7e:91:00:8f:73:e4:c0:2b:77: 09:a9:ef:58:00:fb:bd:95:f8:d9:77:e2:57:14:f4:c1:f6:98: f7:fd:2f:0b:bf:94:1d:c9:cc:63:d6:e5:4f:5c:ed:15:ba:88: 2d:e4:49:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8KoiKLrDC+hxpheKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NzBlNDg4YjEtMDJlMi00ZTkzLTliNjMtOWUyNGQ4YWNiNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/XgWpgbEUAz68RIYdByObn1e6WTzFZjqmG lM+FJkYNebxqX8+wwYJzepCwzE8NAZBtDlW0BEcEoMWHrFj0PJPWxAH3951oKQa3 614im16d2oSf6iBquJ18CfJ6VuceuhxdK+izSfhofHkYruJG6dfbsF2OEx3a5fz6 eaCekmKd7feBYmJJTiH2JBGmbZaXw4/N/V6OfQCgD0547rpjnLsPw1xDkoL4karP QAuTQJf6/ovReh2jooWWjx6V3ITs4EsDyF2sqk2x1ibK7sviwjLDMkmfoLwIW4u2 0F8sP3K16SS5ngZojPI1ADBk4O8Xn1W9byk3IuW+LBYYfYlPpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGCTT5evfPwsAmnMzGO8xo99TJfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTk2NmZlNzMtOTk4MC0z MGYxLTkyZDMtMTZlZGJjZjA0YjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDGPldyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA77xcrX3eHU9nRThHgE94NyDO8YNUiqCvI1X2QHul8kxEdKXIs3zvf U3ZXCPChONDcZgJPO+EF3MN+DNQJu+lA4bgJ+yvuysFw4+1RhoI6NCJ3b2WyvZKm OImXXCt5ZwiiTHmNoWGZLeH3TkZaE7XEjaUxjAwZmRugjL8bOUFiQhGvaNOrELkR nlR6XBT8ZR8ajhBe844/krGSQ20YVbFCdyOV+dmhyozeMJKQtgm3vEQZyvAInFte qi2g6tciQg14bfotH3pM7OUBHTQNmJZ+kQCPc+TAK3cJqe9YAPu9lfjZd+JXFPTB 9pj3/S8Lv5Qdycxj1uVPXO0Vuogt5El7 -----END CERTIFICATE-----Generated at Thu Oct 1 02:43:43 2026 by rpki-client