$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3642ba74-74db-39d6-a9cb-52f40563553d.roa File: 3642ba74-74db-39d6-a9cb-52f40563553d.roa (raw, json) Hash identifier: aeuhBJ7xegmacLPQMjVXyHjpsKo0ivV4m0aGeJWozeA= Subject key identifier: 08:EA:47:59:D9:FF:27:50:AF:66:86:FB:BA:F3:B4:CC:E7:BF:F4:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539E42C97E4DFB12D48E5624 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3642ba74-74db-39d6-a9cb-52f40563553d.roa Signing time: Mon 28 Sep 2026 16:26:25 +0000 ROA not before: Mon 28 Sep 2026 16:26:25 +0000 ROA not after: Sun 27 Dec 2026 17:26:25 +0000 asID: 22773 IP address blocks: 24.254.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:42:c9:7e:4d:fb:12:d4:8e:56:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:26:25 2026 GMT Not After : Dec 27 17:26:25 2026 GMT Subject: CN=01e608a8-cf8d-4169-bbdc-77a354b006ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:0b:2a:f4:45:6d:02:6d:05:12:cc:38:26: 5f:a4:33:4c:fa:72:de:93:0c:ea:f7:4d:1b:4f:24: a8:65:27:53:1d:32:03:d0:d7:e7:35:3d:3e:16:df: cd:62:d2:65:96:f6:75:06:6f:eb:a2:8a:7f:a2:e7: b6:29:86:d2:ea:fe:30:7f:42:15:2c:bc:80:a8:38: 0d:1a:b2:b4:45:74:42:a4:33:59:98:5b:9d:de:73: 55:f8:8c:ef:65:a9:34:05:42:a7:0a:a1:0b:f7:7d: 86:0b:ce:b1:35:68:65:94:d1:7e:91:5b:43:b3:13: c9:a8:a9:32:00:39:8c:e2:48:82:d9:ab:77:d7:a2: d0:ed:b6:39:34:8d:61:ec:c5:cc:50:d0:34:eb:3d: e2:26:5c:86:76:2d:5e:7f:a9:2b:f6:96:09:4e:cb: d9:e7:27:6d:10:05:d0:57:c1:26:1c:e1:04:74:63: 9c:07:fe:ea:48:78:07:88:33:65:21:e5:c0:46:78: 77:65:b8:f3:9d:99:86:05:d8:f3:91:f5:53:01:f4: 2c:58:e5:53:6e:2e:71:b6:92:ec:11:d1:e3:0e:b4: 77:ee:83:0d:c1:dd:1b:a1:16:11:54:d4:4d:db:79: cd:7e:f0:61:d6:90:8e:43:17:ab:c4:8b:79:97:23: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EA:47:59:D9:FF:27:50:AF:66:86:FB:BA:F3:B4:CC:E7:BF:F4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3642ba74-74db-39d6-a9cb-52f40563553d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f0:7e:d6:af:7f:38:2c:52:3b:29:54:cc:31:ff:ae:b2:1b: 5a:1f:f7:9f:53:d3:23:1a:3e:1e:f0:03:bb:ec:f7:50:a8:0b: 38:bc:b3:bc:fd:db:71:0d:c7:ec:05:b0:74:0f:2d:20:47:37: ba:30:45:eb:58:fd:dd:67:f5:c8:01:77:f3:e2:64:f8:93:06: e4:4d:b2:54:f0:44:97:dd:94:a8:08:1e:24:b0:8f:25:02:0a: fd:1e:76:02:36:7f:92:c9:5b:d8:ce:72:58:db:3c:f4:60:db: 85:26:7d:b2:ce:cd:a8:bf:52:b6:d3:c3:c8:84:78:59:24:4a: 9b:c8:8b:23:2f:fc:e3:62:2c:f0:f8:28:2d:fb:4e:32:21:ed: ba:1c:6a:49:20:2a:e8:99:29:22:ec:95:3c:b5:69:fd:1b:de: 80:31:dd:ec:93:64:5d:02:fa:80:56:7a:bb:f8:d5:44:66:e9: b7:ac:a1:49:96:74:69:eb:d1:bd:87:c4:1a:cb:d1:56:55:3a: 33:b3:80:6a:bd:e4:56:69:e3:95:0f:6f:35:4f:3b:51:d9:77: 8f:56:dd:38:39:bd:b5:94:c0:cb:a8:8e:6e:be:55:26:17:32: 1f:74:52:76:42:63:1f:91:ac:8c:2f:b5:a6:dd:69:ce:34:00: 8f:ac:3f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnkLJfk37EtSOViQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjYyNVoXDTI2MTIyNzE3MjYyNVowLzEtMCsGA1UEAxMk MDFlNjA4YTgtY2Y4ZC00MTY5LWJiZGMtNzdhMzU0YjAwNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOgLKvRFbQJtBRLMOCZfpDNM+nLekwzq900b TySoZSdTHTID0NfnNT0+Ft/NYtJllvZ1Bm/roop/oue2KYbS6v4wf0IVLLyAqDgN GrK0RXRCpDNZmFud3nNV+IzvZak0BUKnCqEL932GC86xNWhllNF+kVtDsxPJqKky ADmM4kiC2at316LQ7bY5NI1h7MXMUNA06z3iJlyGdi1ef6kr9pYJTsvZ5ydtEAXQ V8EmHOEEdGOcB/7qSHgHiDNlIeXARnh3ZbjznZmGBdjzkfVTAfQsWOVTbi5xtpLs EdHjDrR37oMNwd0boRYRVNRN23nNfvBh1pCOQxerxIt5lyM7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjqR1nZ/ydQr2aG+7rztMznv/RGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY0MmJhNzQtNzRkYi0z OWQ2LWE5Y2ItNTJmNDA1NjM1NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGP5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/wftavfzgsUjspVMwx/66yG1of959T0yMaPh7wA7vs91CoCzi8s7z9 23ENx+wFsHQPLSBHN7owRetY/d1n9cgBd/PiZPiTBuRNslTwRJfdlKgIHiSwjyUC Cv0edgI2f5LJW9jOcljbPPRg24UmfbLOzai/UrbTw8iEeFkkSpvIiyMv/ONiLPD4 KC37TjIh7bocakkgKuiZKSLslTy1af0b3oAx3eyTZF0C+oBWerv41URm6besoUmW dGnr0b2HxBrL0VZVOjOzgGq95FZp45UPbzVPO1HZd49W3Tg5vbWUwMuojm6+VSYX Mh90UnZCYx+RrIwvtabdac40AI+sPxQ= -----END CERTIFICATE-----Generated at Tue Sep 29 19:17:43 2026 by rpki-client