$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa File: 2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa (raw, json) Hash identifier: onf6oND5dEqKf/b/bW3yyVhdiy9eAYe0XqFfc2+pPQk= Subject key identifier: 15:7F:E4:15:6F:60:91:35:7F:62:E5:9D:66:92:18:A5:04:9A:08:B4 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584E428F2AED91C1118058FE0840 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa Signing time: Mon 22 Jun 2026 21:00:12 +0000 ROA not before: Mon 22 Jun 2026 21:00:12 +0000 ROA not after: Sun 20 Sep 2026 21:00:12 +0000 asID: 30399 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8f:2a:ed:91:c1:11:80:58:fe:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Jun 22 21:00:12 2026 GMT Not After : Sep 20 21:00:12 2026 GMT Subject: CN=43029033-ed0b-415b-8e5d-6db0d102a89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:67:27:a4:97:c1:b9:7e:c6:aa:12:bb:ed: dc:94:10:d0:e7:d9:0d:0b:3d:53:06:e1:67:da:d8: 34:1b:a1:8e:36:6e:8a:f3:e6:e4:c7:d7:92:1b:ec: 08:ce:2b:94:95:af:84:28:4b:25:89:0b:7f:e4:8a: f2:83:4b:e6:fa:8b:a6:9f:f5:d8:cf:0b:1e:c9:11: c6:e1:3b:a8:f4:e2:07:b9:e0:b5:b9:fa:97:5f:41: 32:a3:fa:3d:73:3d:be:a2:fc:8a:40:df:ae:08:9c: 78:b0:e3:3b:54:95:4a:06:c7:12:b2:ae:53:83:ac: b3:14:ca:a1:1e:d1:27:00:00:3c:97:cd:de:8d:f1: 50:a8:be:d0:06:b1:a2:b3:f5:42:c4:75:37:eb:08: 20:ee:d9:c3:27:fb:1f:4a:8e:b2:c3:49:f9:ef:01: 5e:f3:4f:ce:78:f7:43:09:20:05:02:42:f6:f2:66: 9d:a4:f9:4f:0c:40:da:6d:e5:63:e5:85:0a:07:69: 61:d8:91:f1:92:ba:9c:b6:76:0f:da:a1:76:e4:e8: 91:73:9e:95:34:7f:df:d0:1e:3b:47:9e:ac:be:3e: bf:77:05:c3:88:f3:dd:8b:b0:5c:75:f6:5b:d4:a6: 69:9b:34:22:48:0b:83:6b:ce:db:57:85:a0:50:e0: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7F:E4:15:6F:60:91:35:7F:62:E5:9D:66:92:18:A5:04:9A:08:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:67:6d:20:ff:61:da:96:8e:10:fa:53:3e:d9:d5:d1:0a:64: 5e:0d:6b:46:d2:45:1e:0b:32:2f:29:5f:91:13:f2:b9:ab:5f: 1f:a6:bf:4e:92:5b:f4:12:84:19:7e:3c:89:7f:a3:56:ae:fc: 3e:03:d0:be:28:76:63:ed:75:68:b0:ae:75:e7:69:e2:58:f4: 30:02:31:35:d1:74:27:6a:f4:80:4b:9c:31:1a:96:90:c5:ea: 96:d4:09:4a:97:e0:db:1d:a1:9d:b1:88:22:30:9a:15:65:71: a4:3d:06:ce:62:e6:96:69:bf:e0:9d:83:aa:fd:6c:f7:b0:22: 48:39:16:ee:47:96:5a:41:b2:e8:23:a2:d4:97:e3:f2:94:6d: e7:fc:12:6b:7d:1d:06:45:88:a7:b9:2e:9a:63:e4:18:cb:c5: 32:e1:4d:c4:2e:53:90:8b:f6:57:d1:50:f0:49:8f:b6:4d:61: e8:35:90:d5:f9:4b:fa:23:1f:d8:60:8e:0f:23:d4:9d:76:da: 96:90:f5:8c:f9:1f:69:d6:cf:c7:97:42:4a:5e:d3:b6:d2:f1: 8f:8d:8c:52:70:44:52:1a:70:fa:90:ed:d9:7a:26:e6:a1:25: 2d:61:09:05:71:12:20:4e:71:a7:7f:b8:ee:94:d4:c7:06:d2: c8:96:29:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CjyrtkcERgFj+CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk NDMwMjkwMzMtZWQwYi00MTViLThlNWQtNmRiMGQxMDJhODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcBnJ6SXwbl+xqoSu+3clBDQ59kNCz1TBuFn 2tg0G6GONm6K8+bkx9eSG+wIziuUla+EKEsliQt/5Iryg0vm+oumn/XYzwseyRHG 4Tuo9OIHueC1ufqXX0Eyo/o9cz2+ovyKQN+uCJx4sOM7VJVKBscSsq5Tg6yzFMqh HtEnAAA8l83ejfFQqL7QBrGis/VCxHU36wgg7tnDJ/sfSo6yw0n57wFe80/OePdD CSAFAkL28madpPlPDEDabeVj5YUKB2lh2JHxkrqctnYP2qF25OiRc56VNH/f0B47 R56svj6/dwXDiPPdi7BcdfZb1KZpmzQiSAuDa87bV4WgUODpTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV/5BVvYJE1f2LlnWaSGKUEmgi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMmNhNGExZGEtMmNlOC0z MjBmLTk1MGItZmY1MDA3NGQ1NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpnbSD/YdqWjhD6Uz7Z1dEKZF4Na0bSRR4LMi8pX5ET8rmrXx+mv06S W/QShBl+PIl/o1au/D4D0L4odmPtdWiwrnXnaeJY9DACMTXRdCdq9IBLnDEalpDF 6pbUCUqX4NsdoZ2xiCIwmhVlcaQ9Bs5i5pZpv+Cdg6r9bPewIkg5Fu5HllpBsugj otSX4/KUbef8Emt9HQZFiKe5Lppj5BjLxTLhTcQuU5CL9lfRUPBJj7ZNYeg1kNX5 S/ojH9hgjg8j1J122paQ9Yz5H2nWz8eXQkpe07bS8Y+NjFJwRFIacPqQ7dl6Juah JS1hCQVxEiBOcad/uO6U1McG0siWKSM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:22 2026 by rpki-client