$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce8f912-cb27-3e80-bc4d-7daae7ca51f2.roa File: 3ce8f912-cb27-3e80-bc4d-7daae7ca51f2.roa (raw, json) Hash identifier: ycdj7btIy5DWs6f7RMWYI9VNrHuXU4Xrm5bIiN8pqWU= Subject key identifier: C4:E2:AC:93:9F:02:0B:E2:85:4D:71:B8:4C:31:8D:98:46:31:64:B4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539DC91328C625A10B5FD740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce8f912-cb27-3e80-bc4d-7daae7ca51f2.roa Signing time: Mon 28 Sep 2026 16:25:28 +0000 ROA not before: Mon 28 Sep 2026 16:25:28 +0000 ROA not after: Sun 27 Dec 2026 17:25:28 +0000 asID: 22773 IP address blocks: 24.120.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:c9:13:28:c6:25:a1:0b:5f:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:28 2026 GMT Not After : Dec 27 17:25:28 2026 GMT Subject: CN=0f1170ea-5b24-4b6f-b999-4674d3c48ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:72:5e:b9:12:99:fb:6d:77:70:32:b8:fe: b8:5b:3d:4e:66:0f:42:15:13:5c:41:25:ef:a9:80: 41:28:f3:ef:1e:3b:8c:d5:7f:dd:46:f4:c0:89:2b: 70:76:d3:a0:86:3e:8c:ca:b9:3e:72:32:91:4f:65: 8f:07:ad:98:69:55:a4:d6:e7:05:7f:cc:bc:5b:d0: c8:da:a3:f1:6b:5e:f7:62:29:26:2d:9a:c5:6a:b5: 4e:28:18:3e:88:d3:4a:49:e9:ec:37:3e:76:f0:c4: 48:38:e7:06:22:54:fa:17:98:5d:86:bb:d5:07:47: ef:56:d1:31:4c:86:05:8d:4e:16:0d:36:c6:3d:ff: a2:8c:65:03:9d:3c:d2:e8:04:23:1b:58:26:3e:ab: 9b:30:0e:ae:2e:54:63:ec:d3:69:ec:1c:a8:ed:45: 7a:0b:8a:d4:6e:3c:0d:1d:92:a8:25:ae:93:71:54: 7f:3d:32:70:42:8e:f6:6f:02:5e:18:89:ec:14:2e: 59:97:d3:dd:8f:b3:c4:40:77:f8:ed:c2:bb:e1:76: ac:85:26:ca:53:ce:f6:2b:38:8f:df:7c:98:9a:52: 26:e0:69:92:55:36:67:cf:42:a2:41:b8:e7:c6:f7: d0:df:98:43:8a:f5:98:9d:27:43:5b:46:06:12:d7: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:AC:93:9F:02:0B:E2:85:4D:71:B8:4C:31:8D:98:46:31:64:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce8f912-cb27-3e80-bc4d-7daae7ca51f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.120.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b3:8f:88:a5:f2:7b:ee:08:cd:8f:bf:0c:d1:33:15:3d:d2: ea:39:24:30:6f:96:e4:0d:b1:7c:bd:fe:4d:dc:0e:80:ae:82: 41:39:f2:ae:e5:ec:9d:87:f8:d7:5f:15:af:55:07:89:bf:db: 9a:f3:91:07:3d:83:04:bf:0b:a2:ad:12:c7:42:f6:3f:61:56: 23:69:5d:86:6c:bc:18:78:5f:25:42:f1:15:20:e0:c0:c4:7a: 31:0e:5f:84:55:66:10:07:5f:57:4c:ff:09:02:4e:8c:5b:3a: ca:48:f3:f3:a2:40:fc:da:42:a0:65:9a:b2:26:54:2e:69:df: 08:ef:83:7f:bd:1c:7c:c5:a9:d2:f0:56:ae:2e:d9:9e:83:82: b2:ff:77:68:4c:70:c1:f9:32:c8:f2:90:3a:9c:b3:a7:05:5b: b1:47:25:4c:29:97:30:d5:c9:1e:da:8c:78:94:1a:2e:6c:0b: 03:27:7d:55:3a:94:3b:39:7f:e6:bb:6d:5c:3c:d8:2d:73:52: bb:2c:7c:b3:a3:79:f0:2f:15:b6:b4:0f:c9:00:b6:0e:68:5c: 7c:29:b0:f5:2e:88:97:c1:a2:2e:86:78:2c:11:1b:18:7b:88: 47:75:66:94:03:26:6c:c2:e1:e9:6a:4d:e6:b3:c2:49:1b:ea: cf:b6:71:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnckTKMYloQtf10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUyOFoXDTI2MTIyNzE3MjUyOFowLzEtMCsGA1UEAxMk MGYxMTcwZWEtNWIyNC00YjZmLWI5OTktNDY3NGQzYzQ4ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3axyXrkSmfttd3AyuP64Wz1OZg9CFRNcQSXv qYBBKPPvHjuM1X/dRvTAiStwdtOghj6Myrk+cjKRT2WPB62YaVWk1ucFf8y8W9DI 2qPxa173YikmLZrFarVOKBg+iNNKSensNz528MRIOOcGIlT6F5hdhrvVB0fvVtEx TIYFjU4WDTbGPf+ijGUDnTzS6AQjG1gmPqubMA6uLlRj7NNp7Byo7UV6C4rUbjwN HZKoJa6TcVR/PTJwQo72bwJeGInsFC5Zl9Pdj7PEQHf47cK74XashSbKU872KziP 33yYmlIm4GmSVTZnz0KiQbjnxvfQ35hDivWYnSdDW0YGEtcp7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTirJOfAgvihU1xuEwxjZhGMWS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NlOGY5MTItY2IyNy0z ZTgwLWJjNGQtN2RhYWU3Y2E1MWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuzj4il8nvuCM2PvwzRMxU90uo5JDBvluQNsXy9/k3cDoCugkE58q7l 7J2H+NdfFa9VB4m/25rzkQc9gwS/C6KtEsdC9j9hViNpXYZsvBh4XyVC8RUg4MDE ejEOX4RVZhAHX1dM/wkCToxbOspI8/OiQPzaQqBlmrImVC5p3wjvg3+9HHzFqdLw Vq4u2Z6DgrL/d2hMcMH5MsjykDqcs6cFW7FHJUwplzDVyR7ajHiUGi5sCwMnfVU6 lDs5f+a7bVw82C1zUrssfLOjefAvFba0D8kAtg5oXHwpsPUuiJfBoi6GeCwRGxh7 iEd1ZpQDJmzC4elqTeazwkkb6s+2cfo= -----END CERTIFICATE-----Generated at Tue Sep 29 19:38:53 2026 by rpki-client