$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32796383-ef78-31ff-a3fe-ab4aff2007a2.roa File: 32796383-ef78-31ff-a3fe-ab4aff2007a2.roa (raw, json) Hash identifier: vJNEupg6Hh6ziaOVsTeNtRGltorkoiMvq2xRn9UGjNQ= Subject key identifier: 78:3B:90:D0:25:85:11:5D:FF:48:AF:7C:D6:E4:A4:C8:B0:F5:51:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD79A27C2AF09F4D060F30 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32796383-ef78-31ff-a3fe-ab4aff2007a2.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 24.253.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:79:a2:7c:2a:f0:9f:4d:06:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=ef3c66d0-372b-4944-a960-7c4fd7c8ea27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:d6:07:a6:aa:1a:fd:3e:3a:13:1a:9b:5e: 6e:83:b8:4c:f9:3f:e8:99:49:76:4d:0f:42:0a:3f: db:9e:3e:30:0d:f1:13:25:be:92:a0:c4:97:b9:72: 9c:66:a7:72:13:76:c4:95:c4:0c:80:8c:f3:7d:2e: 30:38:c1:9b:72:73:79:b2:fa:b2:cd:78:42:55:f5: 34:db:e9:9c:30:4d:07:0f:e8:14:86:59:30:08:25: c4:6b:ae:cb:0e:33:d7:7e:70:61:07:cf:f1:4f:19: 60:b4:b2:fd:12:30:95:d7:99:28:e3:17:1c:f1:18: 84:73:65:e4:af:bb:c6:db:7a:1f:7f:c5:d3:d8:f5: 6e:1f:bc:20:aa:12:eb:91:1b:6c:c2:4f:44:0f:5d: 13:9b:8a:75:d4:52:54:91:8e:98:67:b9:04:8a:7d: 20:2a:62:47:99:bf:0b:b3:b3:9f:1e:2d:9a:e0:48: a4:e2:98:f7:7e:69:14:7a:fc:fa:13:ef:7a:91:d5: 7d:38:7a:85:d4:6d:45:ba:8e:2a:28:20:20:a6:e9: a0:58:ee:2f:6d:08:3b:bd:95:de:d3:e9:c0:ae:ba: f2:e1:bf:5c:2b:33:55:87:78:70:d4:76:60:a2:74: a6:b7:40:aa:6e:37:e8:af:7e:dd:92:d7:cc:ca:e8: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3B:90:D0:25:85:11:5D:FF:48:AF:7C:D6:E4:A4:C8:B0:F5:51:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32796383-ef78-31ff-a3fe-ab4aff2007a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:08:b8:5b:08:86:95:ee:5c:d8:ae:c5:a7:f0:75:52:36:75: c2:e6:a4:22:c2:ec:c6:a5:44:6c:0d:a0:9d:e1:6b:5b:8d:87: a9:b3:ec:98:d6:6d:14:9d:79:ea:3d:3a:91:81:4a:09:24:22: 9e:24:42:2d:9d:13:fe:25:d8:3c:b2:e0:47:bd:0f:90:0e:b4: 3f:aa:ec:c8:2f:31:9f:f5:7b:85:5a:bc:28:01:a4:4a:95:1b: ee:a0:c5:2c:1e:23:39:ca:72:55:f5:42:d3:be:82:d8:8c:6d: 8c:94:07:c1:84:2a:df:46:62:21:eb:13:2f:8c:97:76:12:6c: 9a:fb:f9:dd:91:7a:ee:1a:36:43:ad:01:9d:d2:7b:53:05:3a: 61:00:60:2f:37:f8:f7:de:4e:8e:78:5b:46:03:10:7c:ac:ad: d0:82:a6:7d:a5:90:51:d8:c2:e4:76:24:64:26:d1:13:79:0d: 52:13:39:03:ab:36:db:a7:c8:44:07:42:83:e7:e6:3b:12:75: 8b:5f:f1:28:61:9a:84:58:47:7d:d6:9d:97:5f:96:c0:69:5b: fb:b2:c6:b6:3c:63:53:e1:c1:1f:47:44:3b:0f:3c:0a:25:d8: 6c:4b:44:02:2f:59:d5:b7:f6:7b:bc:81:5a:bb:20:62:77:2a: 60:e8:c2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3XmifCrwn00GDzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWYzYzY2ZDAtMzcyYi00OTQ0LWE5NjAtN2M0ZmQ3YzhlYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9LWB6aqGv0+OhMam15ug7hM+T/omUl2TQ9C Cj/bnj4wDfETJb6SoMSXuXKcZqdyE3bElcQMgIzzfS4wOMGbcnN5svqyzXhCVfU0 2+mcME0HD+gUhlkwCCXEa67LDjPXfnBhB8/xTxlgtLL9EjCV15ko4xcc8RiEc2Xk r7vG23off8XT2PVuH7wgqhLrkRtswk9ED10Tm4p11FJUkY6YZ7kEin0gKmJHmb8L s7OfHi2a4Eik4pj3fmkUevz6E+96kdV9OHqF1G1Fuo4qKCAgpumgWO4vbQg7vZXe 0+nArrry4b9cKzNVh3hw1HZgonSmt0Cqbjfor37dktfMyug4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg7kNAlhRFd/0ivfNbkpMiw9VHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI3OTYzODMtZWY3OC0z MWZmLWEzZmUtYWI0YWZmMjAwN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEIuFsIhpXuXNiuxafwdVI2dcLmpCLC7MalRGwNoJ3ha1uNh6mz7JjW bRSdeeo9OpGBSgkkIp4kQi2dE/4l2Dyy4Ee9D5AOtD+q7MgvMZ/1e4VavCgBpEqV G+6gxSweIznKclX1QtO+gtiMbYyUB8GEKt9GYiHrEy+Ml3YSbJr7+d2Reu4aNkOt AZ3Se1MFOmEAYC83+PfeTo54W0YDEHysrdCCpn2lkFHYwuR2JGQm0RN5DVITOQOr NtunyEQHQoPn5jsSdYtf8ShhmoRYR33WnZdflsBpW/uyxrY8Y1PhwR9HRDsPPAol 2GxLRAIvWdW39nu8gVq7IGJ3KmDowos= -----END CERTIFICATE-----Generated at Thu Sep 24 12:29:57 2026 by rpki-client