$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa File: 4488f946-d47b-3acc-ad55-b008953f6642.roa (raw, json) Hash identifier: LK2Pa+KN/nu8FDO0y9zVBQoY+Bpls3JJzfopFT+6akU= Subject key identifier: 83:4B:41:01:A2:6E:9F:12:FB:E5:27:28:BF:EC:5D:06:F3:50:6A:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD48C3E5A10C8A1B02C040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 24.253.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:48:c3:e5:a1:0c:8a:1b:02:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=1a2e7e48-444c-45d7-a60e-9d19d765810c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:57:38:cf:a1:7c:ac:5d:42:d6:49:91:09: 36:34:6a:fa:b5:82:5b:60:bc:d8:e5:04:01:f4:07: d8:90:a6:28:04:a3:1d:4f:d6:81:38:d0:3e:ca:b5: bd:e4:66:f1:87:b7:61:f5:e9:7a:34:05:74:39:b7: e0:ce:9a:e7:db:94:b8:e5:96:ed:72:89:b5:23:16: 44:ae:7a:2f:3f:55:e0:3b:20:c6:fd:ed:d7:1f:3a: b6:87:ff:17:2f:fe:af:14:08:15:30:ba:c3:4b:e3: 40:6f:cc:cc:3c:64:1e:ec:4b:47:75:f7:9e:d1:b8: d3:e6:c4:75:7a:83:68:3b:86:10:64:eb:a2:60:2b: ed:5d:12:8d:78:d7:b0:33:15:d2:a9:3a:30:75:c9: 8d:f2:24:8a:9c:31:23:28:a6:d3:82:8c:e2:1b:56: d0:e9:23:3d:e8:51:3e:b5:e3:25:97:46:9b:06:2b: 97:18:37:1d:4d:db:91:5c:c9:4b:ea:01:97:fa:d9: 08:77:6a:ac:24:ab:16:ee:33:e0:13:6f:c8:33:23: 40:16:b5:1b:31:c0:4a:01:d7:fa:0e:b8:ea:9b:b9: 34:e7:3a:b3:d1:f6:aa:6a:76:56:b2:b9:2d:61:7a: 29:a9:c2:94:25:8d:c7:6f:92:ea:86:48:5f:ff:38: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4B:41:01:A2:6E:9F:12:FB:E5:27:28:BF:EC:5D:06:F3:50:6A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3a:27:49:dd:83:99:a6:80:1c:a7:fd:39:25:f4:2e:83:f3: 85:21:9a:e0:aa:c7:cb:e5:2a:77:91:6a:26:6a:43:82:2d:0d: 5d:7f:36:91:06:b1:85:44:ac:9e:92:ce:cc:f1:1f:06:20:91: 18:f2:43:30:0a:49:60:2c:e1:ee:5b:d0:26:ed:27:c0:9d:63: f5:83:c7:64:e3:2b:7a:b2:fd:69:0d:cd:ff:98:e7:b3:36:7d: 7b:e3:98:86:08:5e:10:d8:4d:87:42:42:b2:b6:22:bf:c0:79: eb:46:c4:7d:8e:95:cd:b2:13:e2:4a:49:ce:f1:fe:85:78:07: c6:38:b6:11:bd:95:b0:b5:f5:40:04:45:ef:21:b2:c9:26:6f: 48:dd:b9:83:08:bf:e5:7d:b8:2e:48:9a:41:27:be:8c:80:41: 84:23:e6:35:f0:82:8c:e9:f4:d8:0f:60:49:51:95:96:96:e3: f7:ec:10:c3:70:83:6d:7d:a4:7d:cd:bd:e5:57:fd:dd:89:0b: 65:a9:cd:b2:ec:f8:15:5b:e0:77:58:8e:45:20:d3:95:f7:5c: a5:aa:58:db:e2:9c:1e:88:2d:a7:e7:09:d9:a9:34:73:e8:dd: bf:08:78:c9:e0:62:db:92:cb:22:57:34:0c:db:ac:56:67:0e: 9f:8e:8e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UjD5aEMihsCwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MWEyZTdlNDgtNDQ0Yy00NWQ3LWE2MGUtOWQxOWQ3NjU4MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnspXOM+hfKxdQtZJkQk2NGr6tYJbYLzY5QQB 9AfYkKYoBKMdT9aBONA+yrW95Gbxh7dh9el6NAV0Obfgzprn25S45Zbtcom1IxZE rnovP1XgOyDG/e3XHzq2h/8XL/6vFAgVMLrDS+NAb8zMPGQe7EtHdfee0bjT5sR1 eoNoO4YQZOuiYCvtXRKNeNewMxXSqTowdcmN8iSKnDEjKKbTgoziG1bQ6SM96FE+ teMll0abBiuXGDcdTduRXMlL6gGX+tkId2qsJKsW7jPgE2/IMyNAFrUbMcBKAdf6 Drjqm7k05zqz0faqanZWsrktYXopqcKUJY3Hb5Lqhkhf/zjbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINLQQGibp8S++UnKL/sXQbzUGoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQ4OGY5NDYtZDQ3Yi0z YWNjLWFkNTUtYjAwODk1M2Y2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc6J0ndg5mmgByn/Tkl9C6D84UhmuCqx8vlKneRaiZqQ4ItDV1/NpEG sYVErJ6SzszxHwYgkRjyQzAKSWAs4e5b0CbtJ8CdY/WDx2TjK3qy/WkNzf+Y57M2 fXvjmIYIXhDYTYdCQrK2Ir/AeetGxH2Olc2yE+JKSc7x/oV4B8Y4thG9lbC19UAE Re8hsskmb0jduYMIv+V9uC5ImkEnvoyAQYQj5jXwgozp9NgPYElRlZaW4/fsEMNw g219pH3NveVX/d2JC2WpzbLs+BVb4HdYjkUg05X3XKWqWNvinB6ILafnCdmpNHPo 3b8IeMngYtuSyyJXNAzbrFZnDp+OjiQ= -----END CERTIFICATE-----Generated at Sun Oct 11 06:59:21 2026 by rpki-client