$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298eda79-0a79-3144-b99d-afeddf3babb5.roa File: 298eda79-0a79-3144-b99d-afeddf3babb5.roa (raw, json) Hash identifier: ILUtJmEYvxVjbHggdac+U/YG/POV/nWxXQ8rMEROFdU= Subject key identifier: 83:12:C8:47:71:22:87:12:78:9A:7D:42:F9:BF:39:50:D8:18:47:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539DC7865BBDCD77E36A0C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298eda79-0a79-3144-b99d-afeddf3babb5.roa Signing time: Mon 28 Sep 2026 16:25:27 +0000 ROA not before: Mon 28 Sep 2026 16:25:27 +0000 ROA not after: Sun 27 Dec 2026 17:25:27 +0000 asID: 22773 IP address blocks: 24.120.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:c7:86:5b:bd:cd:77:e3:6a:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:27 2026 GMT Not After : Dec 27 17:25:27 2026 GMT Subject: CN=9d36a2bb-aa50-4d9b-ab47-e210fb60a420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:5f:52:5d:b7:07:d8:45:96:1b:38:d7:30: 20:72:f5:2d:f4:30:0a:95:7b:20:87:a5:65:5c:42: c4:ff:c0:f8:1f:1b:37:c8:b3:96:73:41:4b:52:32: c5:39:11:f9:2e:21:6f:52:d5:c9:2f:d3:66:eb:4f: 61:64:5a:54:e3:7c:fa:8e:23:e0:fb:af:2e:fd:de: 03:df:eb:fe:74:19:9b:8d:77:93:60:2a:c5:52:00: c2:ce:2f:12:4f:c5:a9:7c:f6:bf:e7:16:1e:c0:47: 4b:c0:1a:83:bb:d2:63:21:02:4f:25:c4:a7:65:9c: 80:b8:34:25:d8:35:fa:04:78:27:d6:1c:74:e1:c9: e0:27:e9:1b:42:98:87:2c:b7:9e:8d:08:bf:b7:ab: 32:84:25:cd:66:19:86:7d:8a:1f:45:a3:e5:e6:2b: 25:c3:83:a6:bd:86:41:14:60:35:0c:71:35:10:de: a8:aa:53:76:8e:f6:cf:c4:b8:cd:ae:05:c2:17:c2: 3c:50:a3:c0:27:2f:7d:e6:bc:58:16:bf:a6:48:c2: 79:0d:f9:83:8c:f2:22:35:9b:b3:94:3c:b5:38:dc: 1e:0d:a7:9c:0e:91:5c:ba:30:28:24:8d:51:01:cc: 85:e5:7d:4a:c7:3c:87:3f:ca:99:1f:a3:96:b6:7b: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:C8:47:71:22:87:12:78:9A:7D:42:F9:BF:39:50:D8:18:47:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298eda79-0a79-3144-b99d-afeddf3babb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.120.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e0:37:3b:d8:cc:24:0c:26:6e:71:ca:c5:75:ba:b6:75:e0: b2:aa:2c:64:7f:34:b1:60:13:ec:13:6f:bb:4b:21:a3:46:dc: e6:b8:1b:43:31:c6:1e:86:1a:63:8f:40:a4:82:c5:82:8f:ce: b9:d5:8f:bd:78:ad:8b:71:9e:82:3a:0d:c2:b0:c1:26:c3:e8: 20:96:1d:12:72:77:d9:06:46:a0:87:fc:da:80:6f:ea:b5:db: 08:8c:6d:1e:8f:3d:75:85:8b:3f:a1:5e:d3:cf:8f:d3:19:79: 25:2c:7a:e8:47:48:a8:62:47:16:10:e9:81:4e:bf:f2:b4:e9: 96:42:e2:2f:82:b5:26:7e:5f:46:26:7c:ff:22:40:5d:20:78: 99:d0:65:07:ea:cf:18:0e:7b:1e:23:a3:17:85:24:4e:2f:f1: 30:50:34:83:13:79:c2:44:88:e0:12:95:b3:e3:67:e9:0a:ff: 17:66:57:fb:df:b9:71:36:96:b3:d2:5d:31:5a:ab:de:be:f8: 42:7b:bc:38:59:7d:25:f2:1d:26:0f:71:1f:bd:06:a8:18:e8: 65:10:a0:e9:54:8f:e9:46:7f:2c:73:63:de:19:ca:be:6d:2b: 31:b3:a9:3c:2c:a8:15:ee:7d:d0:b2:2d:b2:e9:d1:dc:5d:2e: 27:a0:7b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnceGW73Nd+NqDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUyN1oXDTI2MTIyNzE3MjUyN1owLzEtMCsGA1UEAxMk OWQzNmEyYmItYWE1MC00ZDliLWFiNDctZTIxMGZiNjBhNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zpfUl23B9hFlhs41zAgcvUt9DAKlXsgh6Vl XELE/8D4Hxs3yLOWc0FLUjLFORH5LiFvUtXJL9Nm609hZFpU43z6jiPg+68u/d4D 3+v+dBmbjXeTYCrFUgDCzi8ST8WpfPa/5xYewEdLwBqDu9JjIQJPJcSnZZyAuDQl 2DX6BHgn1hx04cngJ+kbQpiHLLeejQi/t6syhCXNZhmGfYofRaPl5islw4OmvYZB FGA1DHE1EN6oqlN2jvbPxLjNrgXCF8I8UKPAJy995rxYFr+mSMJ5DfmDjPIiNZuz lDy1ONweDaecDpFcujAoJI1RAcyF5X1KxzyHP8qZH6OWtntMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMSyEdxIocSeJp9Qvm/OVDYGEfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk4ZWRhNzktMGE3OS0z MTQ0LWI5OWQtYWZlZGRmM2JhYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKngNzvYzCQMJm5xysV1urZ14LKqLGR/NLFgE+wTb7tLIaNG3Oa4G0Mx xh6GGmOPQKSCxYKPzrnVj714rYtxnoI6DcKwwSbD6CCWHRJyd9kGRqCH/NqAb+q1 2wiMbR6PPXWFiz+hXtPPj9MZeSUseuhHSKhiRxYQ6YFOv/K06ZZC4i+CtSZ+X0Ym fP8iQF0geJnQZQfqzxgOex4joxeFJE4v8TBQNIMTecJEiOASlbPjZ+kK/xdmV/vf uXE2lrPSXTFaq96++EJ7vDhZfSXyHSYPcR+9BqgY6GUQoOlUj+lGfyxzY94Zyr5t KzGzqTwsqBXufdCyLbLp0dxdLiege8E= -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:32 2026 by rpki-client