$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa File: aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa (raw, json) Hash identifier: 5q0+HYHYyqejywN3/UCPI8VlTRHaekFGDj7w4EEC5uk= Subject key identifier: 38:41:CC:FA:7C:D1:CE:C6:CF:AD:42:E7:A7:21:7E:8A:2C:36:D9:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D67DFBF4382BBF9684605B980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 65001 IP address blocks: 24.249.215.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:bf:43:82:bb:f9:68:46:05:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=810ffbb4-7e73-4ebf-9ed8-84aa967e2634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:28:8a:c1:c3:8a:5e:92:c1:3a:9b:46:e2: 75:ac:a2:c1:72:85:7c:0e:e1:ec:38:b4:3d:bc:28: 3a:37:34:f7:00:a9:37:58:be:b6:df:5e:93:29:d1: be:49:a9:ea:d9:24:e5:64:43:8d:b2:53:b5:fa:97: 6a:cc:d6:cd:04:69:af:f5:50:f2:90:f7:cc:c8:9e: 52:78:d8:04:d3:a7:94:94:5b:ff:d8:16:b0:23:fa: c2:eb:56:ce:95:e6:26:bd:1b:07:48:dd:36:a1:1d: 32:bb:7a:a2:40:78:81:4d:32:c9:b1:f3:4a:8d:bd: 30:13:ad:f5:d4:95:39:74:3e:4a:d2:f9:9b:f0:44: 4d:6b:4d:fa:15:cc:75:dc:c6:86:74:fc:b6:e2:a7: 5b:27:54:50:71:e0:9c:33:ad:8e:be:a2:40:b2:ea: 0a:d5:b4:82:55:a6:96:34:24:da:2b:bc:9c:55:93: 28:8e:7d:64:a1:02:e4:03:d0:35:ad:2c:10:2c:42: cb:b7:8e:99:81:b1:10:14:c4:fa:f5:66:3a:b9:2a: ba:25:bf:ff:6b:c0:24:4b:e8:21:7a:57:42:b7:99: 98:ae:b7:7c:4f:43:37:cd:88:ac:51:e4:4f:42:cf: b4:3e:23:fe:21:9b:ef:66:3b:8f:b3:23:da:0b:b9: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:CC:FA:7C:D1:CE:C6:CF:AD:42:E7:A7:21:7E:8A:2C:36:D9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.215.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:57:cf:bf:e5:28:f6:aa:00:e0:3e:e9:59:1d:79:df:69:c7: f5:65:ff:f8:fb:87:b4:70:d0:d3:c5:2b:b4:51:45:75:68:05: 59:5e:8c:60:bf:ac:5b:74:75:14:50:c8:ab:f2:23:27:1d:44: 02:55:69:4c:16:ac:a3:14:b3:7e:86:b9:be:72:35:03:4f:0a: 08:ba:f1:df:b7:6c:89:e6:ee:4b:32:42:cf:8c:02:1a:79:6e: 74:12:e9:4d:b3:5a:7d:7d:67:04:6d:1d:4e:ba:cb:d7:9c:ab: d7:4b:3f:01:a9:08:e1:b1:98:a3:3e:a7:1b:24:7c:78:cc:68: e6:df:64:37:cc:05:65:81:ec:3c:ec:e8:dc:59:8d:ea:60:d3: 92:f2:0b:d4:8e:cb:23:05:fa:88:fa:39:79:85:a2:31:da:2d: 06:a3:d9:cd:88:47:54:96:3f:6a:bd:ac:5c:18:1f:57:4a:99: d7:4d:33:0e:25:be:7e:5a:75:80:28:39:21:cd:4a:38:ee:12: 5e:cb:df:d4:82:7f:68:a9:1b:91:c8:7c:46:d0:b9:4e:58:83: dc:73:59:ae:dc:3a:5e:e8:f5:fd:ff:5b:5e:ce:d5:2b:54:b8: 8d:3f:7a:92:f9:46:d0:f1:8f:dd:36:aa:7f:dc:3b:28:92:64: d8:f2:c2:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1n379Dgrv5aEYFuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ODEwZmZiYjQtN2U3My00ZWJmLTllZDgtODRhYTk2N2UyNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnooisHDil6SwTqbRuJ1rKLBcoV8DuHsOLQ9 vCg6NzT3AKk3WL62316TKdG+Sanq2STlZEONslO1+pdqzNbNBGmv9VDykPfMyJ5S eNgE06eUlFv/2BawI/rC61bOleYmvRsHSN02oR0yu3qiQHiBTTLJsfNKjb0wE631 1JU5dD5K0vmb8ERNa036Fcx13MaGdPy24qdbJ1RQceCcM62OvqJAsuoK1bSCVaaW NCTaK7ycVZMojn1koQLkA9A1rSwQLELLt46ZgbEQFMT69WY6uSq6Jb//a8AkS+gh eldCt5mYrrd8T0M3zYisUeRPQs+0PiP+IZvvZjuPsyPaC7nmSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDhBzPp80c7Gz61C56chfoosNtkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE2OTRjN2EtOGZlYS0z M2FjLWE1NjktZTZmMjJjZDZlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGGPnXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNV8+/5Sj2qgDgPulZHXnfacf1Zf/4+4e0cNDTxSu0UUV1aAVZXoxg v6xbdHUUUMir8iMnHUQCVWlMFqyjFLN+hrm+cjUDTwoIuvHft2yJ5u5LMkLPjAIa eW50EulNs1p9fWcEbR1OusvXnKvXSz8BqQjhsZijPqcbJHx4zGjm32Q3zAVlgew8 7OjcWY3qYNOS8gvUjssjBfqI+jl5haIx2i0Go9nNiEdUlj9qvaxcGB9XSpnXTTMO Jb5+WnWAKDkhzUo47hJey9/Ugn9oqRuRyHxG0LlOWIPcc1mu3Dpe6PX9/1teztUr VLiNP3qS+UbQ8Y/dNqp/3DsokmTY8sJx -----END CERTIFICATE-----Generated at Sat Apr 11 12:27:46 2026 by rpki-client