$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa File: 5bc2b1d0-bf78-346c-8496-5b14f638582c.roa (raw, json) Hash identifier: jESwE6Lhbyp1Htoscs9CDA8V/ELMeoAAoPykuAF5VDM= Subject key identifier: D2:08:4A:86:9A:70:86:F2:B9:4B:A5:4E:0D:72:79:A9:CC:5E:BD:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC139B307436AB86C5F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 24.253.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c1:39:b3:07:43:6a:b8:6c:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=332e678c-e672-46c4-bf05-f0fa8389591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:70:c1:e7:c7:71:a5:fc:a5:94:83:6f:89:09: 99:6a:f3:1b:1a:e0:a6:d2:29:17:4f:75:21:fa:0e: 0d:ea:51:57:62:16:32:e3:a5:36:0a:69:16:0c:1c: 98:57:6e:a3:e1:ae:a5:53:73:32:61:12:de:93:9e: 45:25:35:0b:fe:18:44:d6:df:2a:65:ff:46:d1:cc: 6c:61:42:e2:0b:09:e6:81:8a:55:54:7f:0f:bc:1e: d5:d5:cb:45:3f:ee:3b:c5:2c:85:10:1d:82:0c:c3: ff:55:84:de:62:a9:8e:95:e4:22:72:a8:b5:2d:d6: 83:86:3b:cb:3a:90:a9:31:dc:a3:73:92:df:84:88: a7:e6:31:5e:29:e2:20:c8:0f:90:33:11:79:3f:82: 73:b3:51:60:88:15:83:0a:6f:8b:3b:8e:03:0f:7e: 6e:45:c9:5a:5a:8d:72:a4:dd:06:9e:92:30:3a:a4: 47:c9:15:85:70:d3:63:95:10:6f:ce:f1:01:35:26: 95:0d:d6:72:8c:e3:6f:a3:1b:0a:de:77:7a:5a:50: 69:0f:70:4b:55:fa:24:a0:19:4d:67:b2:d8:02:a8: ce:67:c6:3f:5a:67:0b:2d:84:21:0c:71:9c:db:ed: d9:a6:89:42:88:2a:04:dc:10:db:ef:6d:c5:28:11: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:08:4A:86:9A:70:86:F2:B9:4B:A5:4E:0D:72:79:A9:CC:5E:BD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8e:41:fe:96:2b:3f:43:41:55:01:b7:62:e5:34:1a:7b:6c: 05:5a:a2:65:68:bc:54:97:34:77:ec:41:98:1c:e5:03:9f:e1: 0b:fa:b6:36:dd:b0:8d:61:87:53:d8:c1:2b:df:61:e9:40:48: b4:db:3e:d8:61:6b:cb:f7:49:51:5d:7d:48:0a:30:18:ab:d3: 78:f4:38:31:09:de:8a:97:91:6b:78:72:35:ec:55:a9:04:04: 09:eb:0a:16:e5:24:89:89:c8:09:3a:0b:6c:c1:0b:cd:72:09: 1c:41:62:38:98:c2:4a:22:59:67:6a:bb:19:8f:fc:b1:62:39: cc:b0:63:5b:75:a0:33:6f:10:05:b7:9b:24:99:9f:14:a9:2d: 44:e7:cf:8e:27:70:ea:68:c3:c6:ac:c7:26:f0:29:05:f1:62: 1d:b8:f1:0b:13:f2:53:da:94:1e:b5:9a:6f:dd:41:80:f7:8f: 59:8d:28:89:7f:23:3c:20:7b:83:21:78:f3:3d:d6:b3:e8:8e: 6f:f0:b7:44:68:67:91:a0:92:01:45:46:0d:f6:5a:92:28:d4: f5:5c:09:06:21:aa:d9:24:95:3e:be:c3:33:01:10:51:b7:33: 16:f3:c4:f0:47:0c:b2:1a:2f:a6:40:b9:07:40:d2:cc:1a:ec: 54:ea:36:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8E5swdDarhsXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MzMyZTY3OGMtZTY3Mi00NmM0LWJmMDUtZjBmYTgzODk1OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3DB58dxpfyllINviQmZavMbGuCm0ikXT3Uh +g4N6lFXYhYy46U2CmkWDByYV26j4a6lU3MyYRLek55FJTUL/hhE1t8qZf9G0cxs YULiCwnmgYpVVH8PvB7V1ctFP+47xSyFEB2CDMP/VYTeYqmOleQicqi1LdaDhjvL OpCpMdyjc5LfhIin5jFeKeIgyA+QMxF5P4Jzs1FgiBWDCm+LO44DD35uRclaWo1y pN0GnpIwOqRHyRWFcNNjlRBvzvEBNSaVDdZyjONvoxsK3nd6WlBpD3BLVfokoBlN Z7LYAqjOZ8Y/WmcLLYQhDHGc2+3ZpolCiCoE3BDb723FKBEXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIISoaacIbyuUulTg1yeanMXr3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJjMmIxZDAtYmY3OC0z NDZjLTg0OTYtNWIxNGY2Mzg1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiOQf6WKz9DQVUBt2LlNBp7bAVaomVovFSXNHfsQZgc5QOf4Qv6tjbd sI1hh1PYwSvfYelASLTbPthha8v3SVFdfUgKMBir03j0ODEJ3oqXkWt4cjXsVakE BAnrChblJImJyAk6C2zBC81yCRxBYjiYwkoiWWdquxmP/LFiOcywY1t1oDNvEAW3 mySZnxSpLUTnz44ncOpow8asxybwKQXxYh248QsT8lPalB61mm/dQYD3j1mNKIl/ Izwge4MhePM91rPojm/wt0RoZ5GgkgFFRg32WpIo1PVcCQYhqtkklT6+wzMBEFG3 MxbzxPBHDLIaL6ZAuQdA0swa7FTqNhA= -----END CERTIFICATE-----Generated at Sun Mar 22 07:00:27 2026 by rpki-client