$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa File: 2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa (raw, json) Hash identifier: ulDvT2aNCmbeoIv9EFl0gJPWRPN8N7A1Tihu0sMN1q4= Subject key identifier: 4B:AA:13:EA:B6:EA:5C:D7:F3:AB:55:F3:D2:76:45:4B:09:B9:E8:A0 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584EE4F1ED9373B39AC902C3E400 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 30399 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:ed:93:73:b3:9a:c9:02:c3:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=d90aa90c-11d4-4dfc-8f35-b6802f54f748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:6f:f1:bc:1b:aa:78:ad:cb:c5:c2:52:5a: c4:82:9d:65:a8:cc:c1:4d:28:6d:bd:0f:21:ae:2c: fa:44:5f:19:38:5b:db:fd:e2:3f:c9:a3:e5:ee:93: 7d:c6:ee:df:48:34:f7:45:f3:04:c0:2d:95:09:12: 39:9f:74:e0:8b:36:33:e3:de:39:f0:66:5c:05:ab: 63:8c:fd:0e:ee:0f:95:55:c4:75:ad:ba:df:e3:93: 6b:41:91:96:eb:02:cd:bc:7c:45:4d:de:7d:56:27: d4:b2:da:ce:4b:96:e5:2b:f2:d0:3b:1c:55:36:14: 8c:3f:73:32:1b:e6:42:78:fe:b7:5f:77:e4:05:12: 54:a6:34:5f:5c:1b:a1:91:e5:94:4b:3f:24:05:be: 3c:90:e7:5d:0d:47:5e:88:14:b5:90:e0:82:a6:14: ac:67:20:d2:63:fe:15:b4:4d:cf:8e:98:83:5d:63: 87:3a:31:91:4d:e1:02:ed:af:3e:eb:0e:bd:9f:44: 47:af:26:b6:dd:9f:be:cc:dc:63:be:7c:d2:c3:78: 97:60:62:de:65:97:50:6f:4b:a9:52:bb:a5:46:3b: e0:85:e3:c8:68:90:84:4a:b4:fb:e4:ba:db:7f:86: 0b:a4:97:06:c6:65:5c:e1:45:52:b6:0e:8f:52:e5: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:13:EA:B6:EA:5C:D7:F3:AB:55:F3:D2:76:45:4B:09:B9:E8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e0:9e:b4:d5:45:44:dd:f0:15:b7:28:a4:bb:a0:68:82:4b: 72:de:c4:30:d7:67:71:4f:9b:83:fc:a3:29:d3:22:13:15:16: 4c:c9:ba:29:d4:13:f8:28:86:9a:e4:a3:99:f9:83:27:7a:78: 78:52:cd:31:c1:26:a7:59:d5:e5:53:1a:29:10:9f:ab:78:a8: 24:1d:ec:02:f7:81:6c:7b:e5:dc:04:d4:75:b8:58:cd:36:43: 37:4b:a1:22:14:22:12:9f:79:78:04:23:44:d0:4a:69:65:ae: a8:69:a3:ff:57:4a:e3:1d:41:82:5d:c8:6d:34:a7:8c:70:99: 9d:12:ac:a3:80:23:ac:50:2a:37:18:27:f9:a1:c7:b1:06:a1: b0:9f:ef:b0:a1:63:f0:c1:de:47:79:6c:8c:d5:55:b6:aa:49: cf:e4:bc:4d:79:08:0e:8d:87:80:60:1c:dd:d1:59:e1:f5:6e: 26:76:b9:f4:8e:4b:30:54:e0:54:5b:d2:56:71:28:85:26:aa: 8e:1d:e8:16:0f:55:53:09:c1:63:68:9e:d0:48:05:72:f3:93: bc:0d:88:67:90:1b:5b:ec:58:ac:c8:12:dc:c6:e9:38:d1:c2: 99:6c:59:25:85:7b:b4:d5:2a:76:5a:b4:a7:df:c6:29:de:ec: d0:33:ef:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8e2Tc7OayQLD5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDkwYWE5MGMtMTFkNC00ZGZjLThmMzUtYjY4MDJmNTRmNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/lv8bwbqnity8XCUlrEgp1lqMzBTShtvQ8h riz6RF8ZOFvb/eI/yaPl7pN9xu7fSDT3RfMEwC2VCRI5n3TgizYz49458GZcBatj jP0O7g+VVcR1rbrf45NrQZGW6wLNvHxFTd59VifUstrOS5blK/LQOxxVNhSMP3My G+ZCeP63X3fkBRJUpjRfXBuhkeWUSz8kBb48kOddDUdeiBS1kOCCphSsZyDSY/4V tE3PjpiDXWOHOjGRTeEC7a8+6w69n0RHrya23Z++zNxjvnzSw3iXYGLeZZdQb0up UrulRjvghePIaJCESrT75Lrbf4YLpJcGxmVc4UVStg6PUuXmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuqE+q26lzX86tV89J2RUsJueigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMmNhNGExZGEtMmNlOC0z MjBmLTk1MGItZmY1MDA3NGQ1NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDgnrTVRUTd8BW3KKS7oGiCS3LexDDXZ3FPm4P8oynTIhMVFkzJuinU E/gohprko5n5gyd6eHhSzTHBJqdZ1eVTGikQn6t4qCQd7AL3gWx75dwE1HW4WM02 QzdLoSIUIhKfeXgEI0TQSmllrqhpo/9XSuMdQYJdyG00p4xwmZ0SrKOAI6xQKjcY J/mhx7EGobCf77ChY/DB3kd5bIzVVbaqSc/kvE15CA6Nh4BgHN3RWeH1biZ2ufSO SzBU4FRb0lZxKIUmqo4d6BYPVVMJwWNontBIBXLzk7wNiGeQG1vsWKzIEtzG6TjR wplsWSWFe7TVKnZatKffxine7NAz79I= -----END CERTIFICATE-----Generated at Sun Sep 13 16:38:47 2026 by rpki-client