$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba45b60a-b3e2-3fa1-8ffb-36935de95532.roa File: ba45b60a-b3e2-3fa1-8ffb-36935de95532.roa (raw, json) Hash identifier: U0yx0hktWHIxL5krZfx+skiPWtWCjS6x8lp7pftjQms= Subject key identifier: 3A:79:88:C3:14:E0:FE:C4:3A:30:AA:53:78:77:0D:B1:1E:C4:AE:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FD2A0B1FB72096C725E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba45b60a-b3e2-3fa1-8ffb-36935de95532.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 24.250.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d2:a0:b1:fb:72:09:6c:72:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=42650a1e-23af-4378-959e-44a34dac1f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:fe:fd:08:92:5c:aa:8a:16:b1:bf:0c:13: 2e:67:65:16:01:c6:f1:b3:fe:6c:3c:22:27:ac:57: 97:3a:7b:77:ae:79:ff:7f:43:4b:f1:31:fc:75:40: e6:bb:6f:e5:c9:fe:63:c0:e1:81:6c:eb:26:a1:37: 0f:45:78:90:f3:b7:be:6b:d3:a6:b0:03:b9:39:df: 09:9b:4b:72:fe:22:0b:84:1d:20:23:24:07:33:14: b7:0f:82:2b:9c:95:82:64:dc:54:e0:19:ea:2d:f9: dd:a6:c2:64:54:6e:b6:89:13:53:c6:1a:f3:c4:48: 44:76:b0:5c:05:71:28:a3:ae:24:cb:2e:c3:12:e9: 65:7b:fc:7d:61:f6:31:7f:ad:37:c7:57:9a:64:a4: 10:0a:aa:ff:9b:b0:7a:ea:3e:43:4b:e9:db:50:fa: 48:64:a5:42:c7:27:f9:17:57:98:0a:8d:4f:fc:64: 27:a5:13:0d:6a:25:6d:5f:86:1b:76:79:0b:4e:06: 1f:25:36:09:77:3b:cc:ab:96:5f:fc:88:83:48:38: 6f:33:ef:9a:0f:8d:2b:e4:0c:20:e1:b8:39:57:5e: b2:0c:4b:98:81:6e:57:c1:f4:57:f3:6f:a3:cb:33: 4b:4c:e2:78:6f:8d:d7:b5:c5:0a:fa:bb:96:df:86: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:88:C3:14:E0:FE:C4:3A:30:AA:53:78:77:0D:B1:1E:C4:AE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba45b60a-b3e2-3fa1-8ffb-36935de95532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:78:3f:c0:d9:0a:48:85:69:b2:5e:b5:c2:6f:9d:a1:20:95: e6:71:f8:90:f1:86:a1:6f:13:f2:a5:dc:71:f6:ff:6e:a6:98: 96:33:a8:7c:44:57:2e:ba:6d:ce:f1:c9:79:10:76:4d:88:02: 63:d9:da:5c:f4:0e:6b:f5:d1:8a:2d:9e:1a:49:80:67:25:83: bc:de:9c:38:3a:d3:dd:16:72:70:47:ee:22:54:f6:4d:e7:95: 42:d4:10:a3:e1:2e:8d:41:c2:1d:10:85:87:c1:9e:aa:32:c8: 16:f0:e0:6e:a3:6d:2d:c2:01:49:d1:ce:79:44:22:b1:72:a7: c1:d4:d0:f8:95:aa:5c:c4:1e:00:d0:db:1f:f2:38:bc:5d:61: 03:ad:15:7b:2f:5b:f6:79:2b:b6:b9:5d:a8:77:13:2e:d6:0c: f4:17:b5:c9:bd:c0:63:8e:5c:ba:11:2c:92:dd:e4:a1:cd:24: 42:c9:47:1d:a6:0a:18:7e:64:8b:e2:d4:72:6a:de:48:d7:70: 99:0f:74:d2:18:ef:7e:73:dc:75:6e:6d:05:1d:07:2a:1d:ce: cd:e8:0a:11:f6:af:04:36:f1:87:d3:f6:d8:b5:34:ae:f6:28: 3f:c6:bc:77:33:40:6e:23:16:f0:82:13:7a:c2:29:ad:2d:f2: 17:b1:8d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9KgsftyCWxyXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDI2NTBhMWUtMjNhZi00Mzc4LTk1OWUtNDRhMzRkYWMxZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMX+/QiSXKqKFrG/DBMuZ2UWAcbxs/5sPCIn rFeXOnt3rnn/f0NL8TH8dUDmu2/lyf5jwOGBbOsmoTcPRXiQ87e+a9OmsAO5Od8J m0ty/iILhB0gIyQHMxS3D4IrnJWCZNxU4BnqLfndpsJkVG62iRNTxhrzxEhEdrBc BXEoo64kyy7DEulle/x9YfYxf603x1eaZKQQCqr/m7B66j5DS+nbUPpIZKVCxyf5 F1eYCo1P/GQnpRMNaiVtX4YbdnkLTgYfJTYJdzvMq5Zf/IiDSDhvM++aD40r5Awg 4bg5V16yDEuYgW5XwfRX82+jyzNLTOJ4b43XtcUK+ruW34bePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp5iMMU4P7EOjCqU3h3DbEexK7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE0NWI2MGEtYjNlMi0z ZmExLThmZmItMzY5MzVkZTk1NTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh4P8DZCkiFabJetcJvnaEgleZx+JDxhqFvE/Kl3HH2/26mmJYzqHxE Vy66bc7xyXkQdk2IAmPZ2lz0Dmv10YotnhpJgGclg7zenDg6090WcnBH7iJU9k3n lULUEKPhLo1Bwh0QhYfBnqoyyBbw4G6jbS3CAUnRznlEIrFyp8HU0PiVqlzEHgDQ 2x/yOLxdYQOtFXsvW/Z5K7a5Xah3Ey7WDPQXtcm9wGOOXLoRLJLd5KHNJELJRx2m Chh+ZIvi1HJq3kjXcJkPdNIY735z3HVubQUdByodzs3oChH2rwQ28YfT9ti1NK72 KD/GvHczQG4jFvCCE3rCKa0t8hexjWc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:36:13 2026 by rpki-client