$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30195bb3-d110-337d-a1fd-206dd1a3201c.roa File: 30195bb3-d110-337d-a1fd-206dd1a3201c.roa (raw, json) Hash identifier: U/QIDgn6VVBaoOrhCuZ49HAa2T1n/lw9jSUWVf9H/0A= Subject key identifier: DD:AC:BA:21:B1:56:77:AA:55:E6:0D:01:E4:FA:37:42:95:98:67:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD3BE1C13E081C78011CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30195bb3-d110-337d-a1fd-206dd1a3201c.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 24.253.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:3b:e1:c1:3e:08:1c:78:01:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=bc634e5a-2070-4069-a5d3-4ecd237d08fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:77:43:c7:eb:ce:fa:47:39:00:95:c2:19: 43:95:19:15:e6:93:6a:48:fe:2f:41:c4:6c:58:40: e8:86:22:ab:57:65:63:aa:b2:f8:af:5c:aa:e9:af: 4e:11:37:9c:c6:96:cc:0f:e6:0c:95:00:1c:90:1d: f6:dc:d7:22:bf:6e:f2:7e:0e:31:e8:3c:b5:0e:da: 1c:01:7b:fe:5a:d6:37:0b:ee:96:cf:5a:88:eb:73: d2:10:bb:ad:ea:02:18:68:60:8c:e5:1d:94:7f:d2: 64:0d:0d:b1:ed:7b:bd:ab:a4:75:66:e5:d5:be:a1: 80:ff:8c:64:23:58:23:98:0c:c8:76:b8:c4:87:f6: a3:62:dc:d3:a1:8f:21:4a:a6:72:a0:a5:2a:1b:e7: 3b:f1:29:4e:60:ed:57:b8:62:03:4c:e6:6a:fd:00: 6d:01:a1:98:d7:55:dd:34:05:94:8a:13:72:08:ab: 01:54:41:69:31:77:e8:b9:fa:1b:6d:c4:99:6f:57: 5e:ca:5a:d0:78:cf:11:c2:72:c3:73:3c:57:5d:f1: 41:82:db:c6:2f:fa:f4:2c:78:dd:d5:40:3d:10:19: 11:d0:24:26:5a:df:69:80:cd:87:d4:94:43:b2:d6: 5c:a4:76:37:f8:52:75:72:1b:c7:ba:04:8c:1c:26: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:BA:21:B1:56:77:AA:55:E6:0D:01:E4:FA:37:42:95:98:67:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30195bb3-d110-337d-a1fd-206dd1a3201c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:25:da:e7:7f:6f:8c:03:bb:f3:89:6d:c3:ac:97:87:f7: b2:21:36:98:ca:fd:1a:12:3f:01:27:10:c3:36:65:01:14:9e: 10:d8:8b:27:50:9c:c1:00:8a:2d:19:72:60:b7:d0:a7:04:ce: 9a:21:69:2e:c7:f5:b0:f9:01:56:0f:71:b6:8c:b4:16:f5:32: 19:8f:1d:84:46:d3:83:92:44:52:22:55:5b:8d:4a:9a:68:94: 84:de:f9:9e:3c:47:b3:1f:27:bb:90:a1:87:84:06:2b:60:fc: 03:b5:b8:88:51:86:0c:ba:bb:54:02:49:6c:ec:d6:a4:df:20: 6f:c2:df:99:86:88:64:8a:99:05:f8:ec:46:8a:57:b9:43:6c: fb:c4:92:b2:7b:45:d8:12:8c:db:c4:fe:b8:1b:dd:90:64:ba: 71:34:c8:37:24:02:c3:63:89:85:34:e3:89:35:6b:d3:d9:f1: 00:3c:bf:33:5b:51:ba:31:5c:e0:bf:35:c3:c7:3f:69:95:49: 97:3d:17:4e:ac:7b:de:66:aa:e2:c5:f3:95:53:04:86:43:f3: 1c:38:c2:6d:26:24:76:6b:de:c4:25:03:cd:79:63:11:d7:df: 7b:48:11:bc:32:bc:83:22:3d:5a:47:9b:33:0f:33:e3:d8:14: 1c:20:f6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3TvhwT4IHHgBHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmM2MzRlNWEtMjA3MC00MDY5LWE1ZDMtNGVjZDIzN2QwOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqt3Q8frzvpHOQCVwhlDlRkV5pNqSP4vQcRs WEDohiKrV2VjqrL4r1yq6a9OETecxpbMD+YMlQAckB323Nciv27yfg4x6Dy1Dtoc AXv+WtY3C+6Wz1qI63PSELut6gIYaGCM5R2Uf9JkDQ2x7Xu9q6R1ZuXVvqGA/4xk I1gjmAzIdrjEh/ajYtzToY8hSqZyoKUqG+c78SlOYO1XuGIDTOZq/QBtAaGY11Xd NAWUihNyCKsBVEFpMXfoufobbcSZb1deylrQeM8RwnLDczxXXfFBgtvGL/r0LHjd 1UA9EBkR0CQmWt9pgM2H1JRDstZcpHY3+FJ1chvHugSMHCYZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2suiGxVneqVeYNAeT6N0KVmGcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzAxOTViYjMtZDExMC0z MzdkLWExZmQtMjA2ZGQxYTMyMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9xJdrnf2+MA7vziW3DrJeH97IhNpjK/RoSPwEnEMM2ZQEUnhDYiydQ nMEAii0ZcmC30KcEzpohaS7H9bD5AVYPcbaMtBb1MhmPHYRG04OSRFIiVVuNSppo lITe+Z48R7MfJ7uQoYeEBitg/AO1uIhRhgy6u1QCSWzs1qTfIG/C35mGiGSKmQX4 7EaKV7lDbPvEkrJ7RdgSjNvE/rgb3ZBkunE0yDckAsNjiYU044k1a9PZ8QA8vzNb UboxXOC/NcPHP2mVSZc9F06se95mquLF85VTBIZD8xw4wm0mJHZr3sQlA815YxHX 33tIEbwyvIMiPVpHmzMPM+PYFBwg9gM= -----END CERTIFICATE-----Generated at Thu Sep 24 01:01:34 2026 by rpki-client