$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36c1107e-24f1-393e-81fe-ed137e5a5362.roa File: 36c1107e-24f1-393e-81fe-ed137e5a5362.roa (raw, json) Hash identifier: lvayz8fUU/4HBWUq3ch4NU3LPl+cwqfbyv5hOAAQsr4= Subject key identifier: E7:DA:7C:F0:83:B9:AA:29:DE:E9:D0:05:0E:EB:4C:7B:8A:5E:59:88 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539E48B76CDF764BB325E300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36c1107e-24f1-393e-81fe-ed137e5a5362.roa Signing time: Mon 28 Sep 2026 16:26:28 +0000 ROA not before: Mon 28 Sep 2026 16:26:28 +0000 ROA not after: Sun 27 Dec 2026 17:26:28 +0000 asID: 22773 IP address blocks: 24.255.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:48:b7:6c:df:76:4b:b3:25:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:26:28 2026 GMT Not After : Dec 27 17:26:28 2026 GMT Subject: CN=24f00cd5-a88d-4f4b-8680-448650876ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:de:87:59:4e:4d:44:ae:a1:85:6d:3e:f2: 34:63:62:7e:ea:8e:7e:ab:d3:e6:18:fd:76:79:e2: 53:59:b9:02:48:f6:69:2c:2f:6c:39:fe:6f:c9:2d: 76:5f:cc:23:ae:ad:a3:06:a7:da:5b:6c:87:de:42: 70:76:b3:b4:b9:76:44:4a:6d:ec:df:f9:1c:dc:15: 3b:1e:d4:20:f8:aa:1a:92:c2:1f:82:fd:68:40:dd: d1:89:c7:38:54:72:26:5d:d4:28:b8:1d:89:ba:32: 21:df:39:8c:44:7e:ac:4d:1d:c3:5b:87:6b:4d:3c: e8:10:ed:cd:c9:6a:38:54:68:f6:6e:af:da:01:f0: 3d:b4:fb:e8:28:b8:df:41:f8:5b:3c:e5:5d:80:55: ac:23:72:c9:f6:99:4f:3d:b2:24:b4:a8:2c:4b:67: dd:aa:25:0d:44:a6:1d:0d:cb:2a:7e:b2:96:c0:10: 3f:3e:57:84:21:18:7d:e1:ef:ae:71:59:8b:3d:b9: 4a:fc:d2:d4:3b:01:15:ad:f8:3d:de:38:ae:ae:40: da:c7:9e:b5:0d:44:57:6e:dd:c0:89:f0:4e:d2:eb: 5f:45:9e:9f:77:7e:bd:ec:c3:a7:95:83:0e:40:bd: 25:e1:41:00:63:6f:6a:1c:86:c0:23:0b:a8:f0:fd: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DA:7C:F0:83:B9:AA:29:DE:E9:D0:05:0E:EB:4C:7B:8A:5E:59:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36c1107e-24f1-393e-81fe-ed137e5a5362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:08:4c:fa:d3:e9:7c:a9:dd:c0:93:86:12:5f:cb:47:d4:25: 07:cd:df:05:4c:90:b0:29:e1:19:ad:9b:11:95:a8:4c:15:1c: 4c:fb:ad:95:c1:24:60:6b:01:1d:ed:8e:7c:f2:24:f6:f9:17: 2c:7e:32:4f:3e:9e:14:39:46:ee:a9:73:ce:e0:76:fe:b5:9f: fe:81:8c:18:c9:c3:4d:d0:b9:f9:36:02:62:d1:e8:92:90:a2: bd:ec:38:b2:e5:3b:d7:3d:a5:f8:ab:cb:b4:4f:64:85:b4:97: 95:5f:7b:ed:12:1c:dc:85:da:fc:a6:78:ba:2e:6e:79:81:6a: 17:09:14:e3:72:05:d9:85:d7:ed:f0:d4:90:3a:28:82:36:05: 5e:e9:a9:b1:ec:50:86:af:04:8b:37:0a:8e:90:d3:54:53:b5: 59:fc:09:5c:40:6c:e8:27:8d:38:73:a9:70:77:e7:c1:8f:92: 0f:0c:27:24:54:26:f3:43:63:9c:e6:ab:91:2c:14:40:4a:ef: 5e:92:e0:cf:8a:f7:9a:1c:a8:ae:23:70:c8:8a:49:2a:ae:08: f3:64:d0:04:22:ff:16:55:16:53:7f:27:ac:09:26:e7:a7:d5: db:9e:07:c5:fe:cb:d1:18:ee:84:15:ae:cf:7c:d6:da:88:f6: fd:bb:f4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tnki3bN92S7Ml4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjYyOFoXDTI2MTIyNzE3MjYyOFowLzEtMCsGA1UEAxMk MjRmMDBjZDUtYTg4ZC00ZjRiLTg2ODAtNDQ4NjUwODc2YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vveh1lOTUSuoYVtPvI0Y2J+6o5+q9PmGP12 eeJTWbkCSPZpLC9sOf5vyS12X8wjrq2jBqfaW2yH3kJwdrO0uXZESm3s3/kc3BU7 HtQg+KoaksIfgv1oQN3Ricc4VHImXdQouB2JujIh3zmMRH6sTR3DW4drTTzoEO3N yWo4VGj2bq/aAfA9tPvoKLjfQfhbPOVdgFWsI3LJ9plPPbIktKgsS2fdqiUNRKYd DcsqfrKWwBA/PleEIRh94e+ucVmLPblK/NLUOwEVrfg93jiurkDax561DURXbt3A ifBO0utfRZ6fd3697MOnlYMOQL0l4UEAY29qHIbAIwuo8P0yKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfafPCDuaop3unQBQ7rTHuKXlmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZjMTEwN2UtMjRmMS0z OTNlLTgxZmUtZWQxMzdlNWE1MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGP8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0ITPrT6Xyp3cCThhJfy0fUJQfN3wVMkLAp4RmtmxGVqEwVHEz7rZXB JGBrAR3tjnzyJPb5Fyx+Mk8+nhQ5Ru6pc87gdv61n/6BjBjJw03Qufk2AmLR6JKQ or3sOLLlO9c9pfiry7RPZIW0l5Vfe+0SHNyF2vymeLoubnmBahcJFONyBdmF1+3w 1JA6KII2BV7pqbHsUIavBIs3Co6Q01RTtVn8CVxAbOgnjThzqXB358GPkg8MJyRU JvNDY5zmq5EsFEBK716S4M+K95ocqK4jcMiKSSquCPNk0AQi/xZVFlN/J6wJJuen 1dueB8X+y9EY7oQVrs981tqI9v279E4= -----END CERTIFICATE-----Generated at Wed Sep 30 22:45:11 2026 by rpki-client