$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403552b4-6afb-31d1-be17-11f2885e4d92.roa File: 403552b4-6afb-31d1-be17-11f2885e4d92.roa (raw, json) Hash identifier: gUDFMbPEkIRGRqqnT7GATtaIRrvOsExdelzKd89XESM= Subject key identifier: 55:58:FA:E5:CD:FD:03:6C:DA:33:30:CF:3E:00:AE:1A:DB:CF:11:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F45886B2BB1D0F81ACA62BB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403552b4-6afb-31d1-be17-11f2885e4d92.roa Signing time: Wed 23 Sep 2026 15:21:06 +0000 ROA not before: Wed 23 Sep 2026 15:21:06 +0000 ROA not after: Tue 22 Dec 2026 16:21:06 +0000 asID: 22773 IP address blocks: 24.253.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:88:6b:2b:b1:d0:f8:1a:ca:62:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 15:21:06 2026 GMT Not After : Dec 22 16:21:06 2026 GMT Subject: CN=2a2e63aa-def2-4b3b-89e9-46184be753d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:39:51:ce:52:13:55:16:5a:ba:ba:8b:dc: ce:71:b1:7d:33:ea:ae:21:0e:80:02:59:0f:e0:2b: 84:25:b4:b4:80:97:a4:6f:fa:3e:5c:b2:66:08:cc: f6:eb:20:ef:c6:6e:8e:4a:98:11:49:85:5c:28:a3: 82:bd:64:f9:99:88:bb:fb:ef:dd:3d:a6:ce:77:0c: ad:19:54:55:4c:35:b5:ec:d8:c4:da:7f:75:97:d5: a8:b5:a6:db:3c:28:60:ba:e2:2c:7e:9b:ff:e7:1a: cf:15:b2:fb:76:67:51:04:57:f8:3a:37:69:aa:18: 4e:7b:ad:4f:06:6d:c6:0c:c6:dc:4e:4e:a4:20:48: f4:94:67:4b:1b:4e:dd:50:f3:8f:25:c4:f8:5b:4a: e5:33:42:3b:3b:80:53:3d:64:ea:18:42:11:d1:28: bb:d1:af:a6:1e:72:76:d3:1e:54:1d:78:14:b2:d8: b3:b4:c1:f5:a7:6b:4b:94:51:cf:61:49:71:58:39: 50:92:87:7e:93:90:8d:a0:5f:48:cf:ab:52:95:43: 94:b0:dd:1b:49:1c:93:ec:33:64:a6:1d:92:10:93: 9f:18:b9:98:b1:d1:46:6f:75:1d:ea:44:8f:3e:c9: 63:b0:a3:5a:69:e6:76:7e:6e:a9:ee:3b:6f:29:23: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:FA:E5:CD:FD:03:6C:DA:33:30:CF:3E:00:AE:1A:DB:CF:11:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403552b4-6afb-31d1-be17-11f2885e4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f0:7b:cc:7f:1f:23:82:7e:e4:54:10:48:bd:60:30:4a:69: f5:f3:5b:5a:37:64:63:48:4d:e9:82:17:7e:40:5f:19:2a:7d: fc:49:46:06:f3:ac:12:fb:bc:8d:ec:97:0f:37:22:58:60:08: 57:12:92:f6:1a:4b:9b:6a:8c:89:24:26:17:49:e0:07:9a:02: 35:79:7d:ec:58:3b:e4:08:e4:19:2a:a3:d2:8f:6c:15:8c:90: 17:8d:eb:cf:c0:cd:91:1c:5d:83:af:f8:cb:ab:e4:53:e0:1f: c4:5e:00:b3:03:e0:2b:d7:cb:ee:fe:94:69:c5:58:5c:2e:0d: aa:3c:04:6f:aa:70:69:15:c1:e1:22:36:c0:16:b6:9d:c8:1f: 9a:c8:6d:84:37:9b:ae:b7:28:58:b6:09:72:5c:55:13:78:35: 5f:29:50:d8:01:70:7d:f6:9f:51:4d:20:7c:4a:b5:91:53:7a: 24:ac:b9:9a:a9:4f:ac:8b:73:88:2f:2f:19:74:af:11:3c:63: e3:c1:18:e4:9d:10:06:c3:0a:a3:ba:58:8c:da:07:76:35:5a: f9:30:b5:d9:22:91:78:1d:82:f3:c0:b3:8d:49:5d:7a:5a:6b: b4:d5:6a:5a:25:13:57:36:44:ff:3f:ec:8f:fe:b0:1c:5f:9a: 5e:65:34:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FiGsrsdD4Gspiu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzE1MjEwNloXDTI2MTIyMjE2MjEwNlowLzEtMCsGA1UEAxMk MmEyZTYzYWEtZGVmMi00YjNiLTg5ZTktNDYxODRiZTc1M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTQ5Uc5SE1UWWrq6i9zOcbF9M+quIQ6AAlkP 4CuEJbS0gJekb/o+XLJmCMz26yDvxm6OSpgRSYVcKKOCvWT5mYi7++/dPabOdwyt GVRVTDW17NjE2n91l9WotabbPChguuIsfpv/5xrPFbL7dmdRBFf4OjdpqhhOe61P Bm3GDMbcTk6kIEj0lGdLG07dUPOPJcT4W0rlM0I7O4BTPWTqGEIR0Si70a+mHnJ2 0x5UHXgUstiztMH1p2tLlFHPYUlxWDlQkod+k5CNoF9Iz6tSlUOUsN0bSRyT7DNk ph2SEJOfGLmYsdFGb3Ud6kSPPsljsKNaaeZ2fm6p7jtvKSPljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVY+uXN/QNs2jMwzz4ArhrbzxH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAzNTUyYjQtNmFmYi0z MWQxLWJlMTctMTFmMjg4NWU0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfwe8x/HyOCfuRUEEi9YDBKafXzW1o3ZGNITemCF35AXxkqffxJRgbz rBL7vI3slw83IlhgCFcSkvYaS5tqjIkkJhdJ4AeaAjV5fexYO+QI5Bkqo9KPbBWM kBeN68/AzZEcXYOv+Mur5FPgH8ReALMD4CvXy+7+lGnFWFwuDao8BG+qcGkVweEi NsAWtp3IH5rIbYQ3m663KFi2CXJcVRN4NV8pUNgBcH32n1FNIHxKtZFTeiSsuZqp T6yLc4gvLxl0rxE8Y+PBGOSdEAbDCqO6WIzaB3Y1WvkwtdkikXgdgvPAs41JXXpa a7TValolE1c2RP8/7I/+sBxfml5lNOs= -----END CERTIFICATE-----Generated at Thu Sep 24 20:04:18 2026 by rpki-client