$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3529316c-ad2f-33c1-bae8-4f8eea301874.roa File: 3529316c-ad2f-33c1-bae8-4f8eea301874.roa (raw, json) Hash identifier: 1Pxf4Ocoii+VPuozuCA4RxHYQH3wpI8MOulqXXCGCSg= Subject key identifier: 22:D9:6A:F3:BA:01:86:B6:7A:A8:C3:DE:86:42:17:E3:9F:82:DD:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539E2140434F56E2C0FD2640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3529316c-ad2f-33c1-bae8-4f8eea301874.roa Signing time: Mon 28 Sep 2026 16:26:09 +0000 ROA not before: Mon 28 Sep 2026 16:26:09 +0000 ROA not after: Sun 27 Dec 2026 17:26:09 +0000 asID: 22773 IP address blocks: 24.249.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:21:40:43:4f:56:e2:c0:fd:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:26:09 2026 GMT Not After : Dec 27 17:26:09 2026 GMT Subject: CN=bf7a758e-75c2-445c-907d-56381c26a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:d7:2b:d0:55:d3:65:2c:9f:dc:51:4b:d6: 22:b8:ad:9f:5e:b6:23:e0:38:65:f0:32:9f:ec:2f: a8:d3:5e:76:4e:93:bf:8e:cc:34:d7:28:bc:ca:61: 7f:6e:75:00:20:99:f2:45:cf:b0:dd:d9:bc:99:2f: 1b:b0:17:b7:73:9f:dc:ef:28:d8:00:69:2d:9f:f0: 1f:cb:37:f9:87:0d:39:7b:27:74:3e:35:6e:33:0c: cc:dd:3d:6b:84:90:4e:4e:8b:ef:bd:82:de:f8:37: 03:ed:c7:e6:dd:f6:60:6b:0d:da:04:72:79:90:87: 49:f1:b9:d0:a6:d6:6c:6e:be:0b:f8:e0:26:ec:a5: d6:61:4f:8b:3c:69:be:87:05:3e:da:92:a1:e6:6f: ad:e7:4b:bf:6c:06:fe:1d:88:33:a9:8f:a6:ad:67: c1:f0:91:71:99:87:4c:44:2b:e2:b2:14:1a:95:fd: c6:94:d1:f2:75:82:e1:bd:19:81:d6:11:1b:75:ce: 5b:0b:4e:24:de:d9:80:1c:90:f2:0d:d3:d8:88:5f: cd:76:39:dd:cf:4f:19:0d:49:f4:bc:fb:41:61:57: 81:ec:af:86:37:c6:7f:21:77:af:8d:33:7a:31:03: 17:e7:cb:33:6d:cd:6c:2f:d8:c5:65:7b:bd:0f:d3: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:6A:F3:BA:01:86:B6:7A:A8:C3:DE:86:42:17:E3:9F:82:DD:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3529316c-ad2f-33c1-bae8-4f8eea301874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5c:33:eb:fe:79:f2:fa:dd:c2:ed:52:d4:8e:fd:d6:cc:74: dc:f3:70:02:74:0f:5c:e5:f0:70:2a:6c:a5:60:8e:84:10:47: cf:dc:58:30:f8:c8:0e:8e:c0:03:9f:eb:36:0c:64:2d:1e:9d: 4c:95:19:fe:e0:98:1f:d2:91:7e:b7:ec:99:14:5e:1d:77:9f: c3:63:8a:41:d1:a6:b5:90:7d:5c:cc:47:3e:47:66:a5:dc:c2: e4:2d:72:1f:8d:c5:7f:d0:49:4c:c1:0b:14:d7:3c:f4:16:29: 77:98:31:8e:69:68:20:51:89:0b:b2:96:cc:d8:e3:11:ed:9e: fa:f4:78:42:84:b4:3e:45:89:8b:2d:42:dc:c3:c6:d2:3b:8e: c0:af:a0:7a:26:6c:a1:ef:bf:a0:ef:61:44:3c:3a:0e:e1:8a: e9:52:9a:74:43:64:97:4f:cf:09:8d:22:79:6b:66:da:e3:92: c9:c3:34:80:87:b4:94:b1:72:52:dd:04:3f:ad:c1:ef:1f:62: a9:e1:ea:4c:63:a0:f1:24:8c:74:ed:94:87:01:46:ab:ae:ed: 04:bd:08:d9:cc:4a:44:f4:dd:fb:9e:cb:09:bc:1c:05:d6:04: d8:2f:d1:f3:49:61:6f:f4:8e:45:18:91:1f:72:71:32:fa:47: 06:4f:a6:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TniFAQ09W4sD9JkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjYwOVoXDTI2MTIyNzE3MjYwOVowLzEtMCsGA1UEAxMk YmY3YTc1OGUtNzVjMi00NDVjLTkwN2QtNTYzODFjMjZhM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjLXK9BV02Usn9xRS9YiuK2fXrYj4Dhl8DKf 7C+o0152TpO/jsw01yi8ymF/bnUAIJnyRc+w3dm8mS8bsBe3c5/c7yjYAGktn/Af yzf5hw05eyd0PjVuMwzM3T1rhJBOTovvvYLe+DcD7cfm3fZgaw3aBHJ5kIdJ8bnQ ptZsbr4L+OAm7KXWYU+LPGm+hwU+2pKh5m+t50u/bAb+HYgzqY+mrWfB8JFxmYdM RCvishQalf3GlNHydYLhvRmB1hEbdc5bC04k3tmAHJDyDdPYiF/Ndjndz08ZDUn0 vPtBYVeB7K+GN8Z/IXevjTN6MQMX58szbc1sL9jFZXu9D9N/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZavO6AYa2eqjD3oZCF+Ofgt3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzUyOTMxNmMtYWQyZi0z M2MxLWJhZTgtNGY4ZWVhMzAxODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpcM+v+efL63cLtUtSO/dbMdNzzcAJ0D1zl8HAqbKVgjoQQR8/cWDD4 yA6OwAOf6zYMZC0enUyVGf7gmB/SkX637JkUXh13n8NjikHRprWQfVzMRz5HZqXc wuQtch+NxX/QSUzBCxTXPPQWKXeYMY5paCBRiQuylszY4xHtnvr0eEKEtD5FiYst QtzDxtI7jsCvoHombKHvv6DvYUQ8Og7hiulSmnRDZJdPzwmNInlrZtrjksnDNICH tJSxclLdBD+twe8fYqnh6kxjoPEkjHTtlIcBRquu7QS9CNnMSkT03fueywm8HAXW BNgv0fNJYW/0jkUYkR9ycTL6RwZPpnM= -----END CERTIFICATE-----Generated at Tue Sep 29 19:13:47 2026 by rpki-client