$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42295f74-87e8-3464-8294-6da7a62b75e4.roa File: 42295f74-87e8-3464-8294-6da7a62b75e4.roa (raw, json) Hash identifier: UgVZc8YGhCDfj5LnR2bF/6nQ3rRPUHHj6yIXVsB5rFw= Subject key identifier: 40:20:C5:FE:58:82:58:97:8F:55:87:33:F0:5E:67:98:D3:39:F3:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD263DF0B579E037CCBC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42295f74-87e8-3464-8294-6da7a62b75e4.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:26:3d:f0:b5:79:e0:37:cc:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=bc5e5c8e-d4cd-49ce-93bb-296fdaf3c374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:89:ae:42:fe:78:15:14:36:79:75:70:a6: f7:65:4b:5c:f6:f6:24:b2:7e:dc:c7:7d:09:7b:55: 13:93:28:7e:35:9e:d8:9d:71:03:18:05:5f:8f:57: 18:5c:f1:b3:b7:2d:40:65:a0:8a:4d:b5:f2:a3:50: 81:8e:e5:76:81:51:66:ee:74:62:35:6d:7f:17:e3: 33:07:59:2a:cf:1e:ad:4d:63:a5:df:49:31:53:33: 3c:ca:62:c5:93:13:c5:03:93:28:cc:6d:d8:f5:fd: 1c:b1:16:ff:ea:00:9a:d5:ad:a9:5d:45:be:c2:99: c8:d6:58:62:fb:8b:58:60:fd:cf:e2:e9:3e:05:10: ae:de:50:cf:f6:6c:a7:34:89:14:ef:a1:45:98:eb: 63:08:38:f8:08:63:46:cd:da:f0:a5:a9:89:d4:31: 1e:93:8d:5e:15:1e:9a:de:bb:5c:94:09:2d:89:b5: 36:bc:ca:c8:cd:56:c8:52:20:f8:20:ef:f6:60:ab: 7a:0b:cb:37:25:2c:3b:3f:1c:a3:e8:a9:7a:c2:55: e1:4a:9a:d1:a6:b1:9d:eb:fd:68:74:f8:ec:65:07: b2:80:c2:1a:8f:ea:83:80:d0:b2:a2:c9:de:16:ef: 90:26:68:1f:b2:89:8f:64:a5:4c:d4:83:fe:e3:35: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:C5:FE:58:82:58:97:8F:55:87:33:F0:5E:67:98:D3:39:F3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42295f74-87e8-3464-8294-6da7a62b75e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:66:de:19:2f:02:f1:08:04:45:ab:b5:8d:ae:56:1b:76: a3:21:c5:66:c1:34:f1:31:9d:b4:fd:84:c7:e5:7e:80:ff:a1: cc:a1:98:37:46:b7:d6:5d:5d:e5:e2:c2:27:7d:b0:4a:ee:97: fb:68:fc:05:de:5d:62:4f:5f:60:83:53:d9:7a:eb:97:50:9b: c9:d6:53:69:56:93:23:d7:6f:e9:d1:a4:db:b7:50:9c:c6:50: 60:4e:33:30:0f:ad:4a:8d:3e:ce:8c:a1:9e:2c:90:75:76:4d: 70:9b:3c:30:a1:07:08:71:b4:72:56:db:4e:44:7c:81:c4:bf: 84:66:5d:99:80:90:a3:b1:63:28:f8:af:71:4e:a7:2a:1e:82: 0a:87:b4:e3:7a:6d:a9:81:4b:22:4c:40:ac:08:18:3a:ed:ba: 64:81:2c:c1:2b:d7:85:8a:05:4e:be:d1:ea:20:be:43:ac:85: 40:80:a5:0c:bb:25:19:41:70:b2:4a:54:63:98:d1:61:b9:b6: fc:71:d6:a4:0c:a6:7b:26:c5:4a:5d:77:7f:6d:ad:41:22:97: a5:b7:29:b5:17:7d:4c:4d:d1:3f:80:39:ba:01:d2:e1:1a:68: 0b:cd:0c:84:bb:98:2e:3e:75:20:be:06:a8:8d:26:45:5e:4b: 7c:5b:37:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSY98LV54DfMvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YmM1ZTVjOGUtZDRjZC00OWNlLTkzYmItMjk2ZmRhZjNjMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+WJrkL+eBUUNnl1cKb3ZUtc9vYksn7cx30J e1UTkyh+NZ7YnXEDGAVfj1cYXPGzty1AZaCKTbXyo1CBjuV2gVFm7nRiNW1/F+Mz B1kqzx6tTWOl30kxUzM8ymLFkxPFA5MozG3Y9f0csRb/6gCa1a2pXUW+wpnI1lhi +4tYYP3P4uk+BRCu3lDP9mynNIkU76FFmOtjCDj4CGNGzdrwpamJ1DEek41eFR6a 3rtclAktibU2vMrIzVbIUiD4IO/2YKt6C8s3JSw7Pxyj6Kl6wlXhSprRprGd6/1o dPjsZQeygMIaj+qDgNCyosneFu+QJmgfsomPZKVM1IP+4zV+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAgxf5YgliXj1WHM/BeZ5jTOfMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDIyOTVmNzQtODdlOC0z NDY0LTgyOTQtNmRhN2E2MmI3NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF5Zt4ZLwLxCARFq7WNrlYbdqMhxWbBNPExnbT9hMflfoD/ocyhmDdG t9ZdXeXiwid9sErul/to/AXeXWJPX2CDU9l665dQm8nWU2lWkyPXb+nRpNu3UJzG UGBOMzAPrUqNPs6MoZ4skHV2TXCbPDChBwhxtHJW205EfIHEv4RmXZmAkKOxYyj4 r3FOpyoeggqHtON6bamBSyJMQKwIGDrtumSBLMEr14WKBU6+0eogvkOshUCApQy7 JRlBcLJKVGOY0WG5tvxx1qQMpnsmxUpdd39trUEil6W3KbUXfUxN0T+AOboB0uEa aAvNDIS7mC4+dSC+BqiNJkVeS3xbN8c= -----END CERTIFICATE-----Generated at Sat Sep 26 10:37:53 2026 by rpki-client