$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12487b79-e12b-351a-92f2-765c7a36928a.roa File: 12487b79-e12b-351a-92f2-765c7a36928a.roa (raw, json) Hash identifier: oe8/IJ7F8zwltsEn1wWDdNzWeSQsUZ7v76Y0KK1yy/c= Subject key identifier: 41:83:94:26:E0:68:9B:93:8E:CC:73:8B:3D:1A:FB:76:38:AC:B0:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539D94DDAC0902A93D8A6980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12487b79-e12b-351a-92f2-765c7a36928a.roa Signing time: Mon 28 Sep 2026 16:25:03 +0000 ROA not before: Mon 28 Sep 2026 16:25:03 +0000 ROA not after: Sun 27 Dec 2026 17:25:03 +0000 asID: 15013 IP address blocks: 24.248.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:94:dd:ac:09:02:a9:3d:8a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:03 2026 GMT Not After : Dec 27 17:25:03 2026 GMT Subject: CN=30cbac37-8ea1-4ca3-9ec5-4a956fcd2fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:45:41:01:e4:5b:a6:e0:82:76:d3:d8:b1: e8:2c:8f:73:1d:35:f6:9b:5e:d2:8d:b9:74:af:be: 30:d2:88:95:27:df:17:37:d2:29:29:fd:5d:04:61: 04:7f:96:1f:52:2c:3e:c5:8a:8e:16:9c:27:aa:42: e2:fe:4c:31:14:dd:0a:58:45:ea:99:4f:4b:b9:8e: 01:8e:d6:a3:93:d4:16:97:2d:1e:ad:9d:96:7f:b5: ee:67:3c:e5:43:85:a5:0d:22:b8:84:a5:35:d8:19: 4e:59:16:d4:e2:49:d7:39:06:fd:40:9a:9f:c2:67: 25:ff:20:20:2a:d8:b0:5d:4e:34:bf:f8:f0:3d:9e: 4c:44:88:1b:46:8d:7a:1d:c8:85:90:9b:b5:81:0b: 0e:ae:ca:5e:0a:a7:da:34:cf:63:7e:cc:37:66:5d: 19:ce:fd:bd:b6:05:26:67:40:59:91:51:98:ff:69: c8:be:fb:42:25:e1:4d:19:a1:b1:be:3b:a6:aa:5b: 58:71:27:70:6e:ef:2a:9d:ae:50:9d:80:74:89:70: f9:8a:f2:25:14:35:f0:75:cc:e1:44:56:45:a6:98: 4e:47:cf:de:a4:32:19:25:b5:75:7a:f1:5f:e9:9c: 0f:94:53:48:9a:ff:c6:d2:66:94:d1:4a:c8:73:a1: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:83:94:26:E0:68:9B:93:8E:CC:73:8B:3D:1A:FB:76:38:AC:B0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12487b79-e12b-351a-92f2-765c7a36928a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.248.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:46:a3:60:fe:ba:71:9d:58:87:31:94:0f:69:52:6a:39:7a: 56:26:09:2e:5e:82:e4:e7:04:95:1d:22:60:10:d7:fb:39:bf: 69:72:db:08:31:1d:0e:0a:06:b2:db:d4:f5:3c:52:b0:ab:25: b9:ff:42:37:da:ff:b1:dd:9c:99:73:c3:56:99:55:ee:d8:83: fa:26:09:23:05:fd:1f:87:86:01:15:42:ee:7f:b4:a8:11:bf: fb:e3:f6:41:b1:51:28:62:6b:a7:87:04:29:90:af:52:f9:4e: 9b:96:10:df:32:ef:58:1c:c3:bb:83:b2:d2:b6:dd:81:6d:db: a4:dc:ca:12:e5:32:62:ce:04:05:a7:f5:86:35:52:95:1d:60: b5:9f:6b:f0:65:df:bf:32:cf:85:2f:6d:05:94:9d:7d:ad:79: f7:cb:b2:86:36:7f:94:3b:a6:b0:4a:3c:79:c5:52:e3:90:07: 84:ee:c2:2a:2d:5a:a3:a8:9f:fe:e2:be:d1:5e:26:21:39:a9: 76:c0:b1:71:4a:42:4f:cc:f6:9d:1b:15:e6:a7:e3:e5:41:12: cd:42:56:d2:57:ad:33:32:a9:05:e7:3d:d3:30:a4:86:fc:97: d7:bd:a1:e0:e6:62:5e:f5:fd:ca:53:36:b3:3f:78:d4:45:43: 44:76:02:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnZTdrAkCqT2KaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUwM1oXDTI2MTIyNzE3MjUwM1owLzEtMCsGA1UEAxMk MzBjYmFjMzctOGVhMS00Y2EzLTllYzUtNGE5NTZmY2QyZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx1FQQHkW6bggnbT2LHoLI9zHTX2m17Sjbl0 r74w0oiVJ98XN9IpKf1dBGEEf5YfUiw+xYqOFpwnqkLi/kwxFN0KWEXqmU9LuY4B jtajk9QWly0erZ2Wf7XuZzzlQ4WlDSK4hKU12BlOWRbU4knXOQb9QJqfwmcl/yAg KtiwXU40v/jwPZ5MRIgbRo16HciFkJu1gQsOrspeCqfaNM9jfsw3Zl0Zzv29tgUm Z0BZkVGY/2nIvvtCJeFNGaGxvjumqltYcSdwbu8qna5QnYB0iXD5ivIlFDXwdczh RFZFpphOR8/epDIZJbV1evFf6ZwPlFNImv/G0maU0UrIc6HvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGDlCbgaJuTjsxziz0a+3Y4rLAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTI0ODdiNzktZTEyYi0z NTFhLTkyZjItNzY1YzdhMzY5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPhZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxGo2D+unGdWIcxlA9pUmo5elYmCS5eguTnBJUdImAQ1/s5v2ly2wgx HQ4KBrLb1PU8UrCrJbn/Qjfa/7HdnJlzw1aZVe7Yg/omCSMF/R+HhgEVQu5/tKgR v/vj9kGxUShia6eHBCmQr1L5TpuWEN8y71gcw7uDstK23YFt26TcyhLlMmLOBAWn 9YY1UpUdYLWfa/Bl378yz4UvbQWUnX2teffLsoY2f5Q7prBKPHnFUuOQB4Tuwiot WqOon/7ivtFeJiE5qXbAsXFKQk/M9p0bFean4+VBEs1CVtJXrTMyqQXnPdMwpIb8 l9e9oeDmYl71/cpTNrM/eNRFQ0R2An4= -----END CERTIFICATE-----Generated at Wed Sep 30 22:38:32 2026 by rpki-client