$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bb31fa7-1e17-3a7c-97f5-cef4d4d9c7f7.roa File: 4bb31fa7-1e17-3a7c-97f5-cef4d4d9c7f7.roa (raw, json) Hash identifier: SVsRRoT1c9JjRtXMpVYOU1zumDK4B3s0qkHXTI5YLfg= Subject key identifier: 33:B7:6F:51:73:0F:71:3E:7C:9A:BA:22:8C:B8:E0:46:63:AA:74:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD32004E6ADF961085EF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bb31fa7-1e17-3a7c-97f5-cef4d4d9c7f7.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 24.253.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:32:00:4e:6a:df:96:10:85:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=840788a1-8f0e-44f2-8457-b5487e11089d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:59:e5:d3:ca:5b:77:aa:af:22:e7:93:24: ce:d9:90:52:63:b8:bf:7d:3e:44:00:92:f3:2d:39: 16:03:84:cf:e3:1e:41:37:66:ca:13:5c:05:09:96: 2b:79:88:e4:ee:a9:02:c8:01:ef:c5:e2:97:24:81: 38:50:20:e7:5e:9e:b2:5c:e4:19:32:ab:ca:f9:4c: b1:af:6a:c0:61:cc:f5:35:a3:ff:40:0b:df:60:3f: 28:cf:e7:af:4b:94:20:f3:6d:96:d7:cd:a4:72:e9: 93:68:b6:15:2b:ca:56:0a:b0:16:84:b8:56:19:15: dc:f1:13:2f:bc:fb:70:d5:25:d8:45:ae:eb:bb:9d: a9:74:70:eb:96:ba:b2:f0:3a:54:e8:f9:4c:2e:34: 64:20:d1:db:7c:c3:89:78:34:1c:ef:e8:9e:ea:6e: ca:f7:f5:bb:a4:0e:4f:ea:13:5a:5b:ca:3a:c7:92: 14:2a:59:6d:d0:e6:56:a8:8a:cb:87:64:f8:d4:d7: b0:9c:b4:da:21:cc:ae:41:5d:57:72:ff:0a:83:0d: 58:62:23:7b:eb:b3:d8:5a:b4:65:44:3d:f2:72:76: 62:5f:84:f5:17:f9:5e:3c:43:0c:5d:53:db:c2:e3: 14:3c:dc:91:b6:f0:1a:1d:c9:ca:92:70:f4:be:74: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:6F:51:73:0F:71:3E:7C:9A:BA:22:8C:B8:E0:46:63:AA:74:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bb31fa7-1e17-3a7c-97f5-cef4d4d9c7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:69:38:11:89:26:84:c6:55:0f:ed:d3:58:6d:be:28:c1:38: 1d:24:2c:fb:d5:6f:96:42:3b:07:01:ea:12:d0:26:7b:7b:d1: 75:e1:05:bf:55:87:58:0a:fd:f8:3d:93:21:4e:84:ed:90:e0: 18:48:20:15:c7:0e:86:3e:dc:4b:a9:56:f9:35:7a:b5:33:51: 1a:c7:18:c7:54:33:b2:6b:3f:37:91:73:88:f1:9b:11:38:bf: 52:fe:a4:62:38:23:85:9b:65:c9:a7:fa:18:63:60:53:55:43: a5:41:6c:9e:7c:c4:c4:0b:e1:9b:3e:c2:10:3a:a5:28:29:d5: f7:75:cb:57:46:be:fb:35:42:cc:30:2b:bd:68:73:d0:03:57: 22:f4:a7:23:bf:f5:a8:56:a7:41:9b:2d:37:3e:8b:9e:51:d8: f5:34:c2:ef:12:ff:57:f6:34:95:84:b2:49:a7:1c:93:94:01: a3:5e:9e:22:28:6f:b2:3a:e5:18:1a:1c:e5:05:04:2e:18:a1: 9a:a3:71:50:bb:60:f0:3e:ec:7b:b1:21:5f:5a:99:df:4d:b8: 19:44:43:84:95:18:99:76:d7:b9:d2:a3:6f:aa:d9:aa:94:45: d0:36:17:83:dc:5e:04:30:ef:b3:3c:55:af:69:42:36:c3:de: d5:0d:1d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3TIATmrflhCF74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODQwNzg4YTEtOGYwZS00NGYyLTg0NTctYjU0ODdlMTEwODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdZ5dPKW3eqryLnkyTO2ZBSY7i/fT5EAJLz LTkWA4TP4x5BN2bKE1wFCZYreYjk7qkCyAHvxeKXJIE4UCDnXp6yXOQZMqvK+Uyx r2rAYcz1NaP/QAvfYD8oz+evS5Qg822W182kcumTaLYVK8pWCrAWhLhWGRXc8RMv vPtw1SXYRa7ru52pdHDrlrqy8DpU6PlMLjRkINHbfMOJeDQc7+ie6m7K9/W7pA5P 6hNaW8o6x5IUKllt0OZWqIrLh2T41NewnLTaIcyuQV1Xcv8Kgw1YYiN767PYWrRl RD3ycnZiX4T1F/lePEMMXVPbwuMUPNyRtvAaHcnKknD0vnSzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO3b1FzD3E+fJq6Ioy44EZjqnRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJiMzFmYTctMWUxNy0z YTdjLTk3ZjUtY2VmNGQ0ZDljN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlpOBGJJoTGVQ/t01htvijBOB0kLPvVb5ZCOwcB6hLQJnt70XXhBb9V h1gK/fg9kyFOhO2Q4BhIIBXHDoY+3EupVvk1erUzURrHGMdUM7JrPzeRc4jxmxE4 v1L+pGI4I4WbZcmn+hhjYFNVQ6VBbJ58xMQL4Zs+whA6pSgp1fd1y1dGvvs1Qsww K71oc9ADVyL0pyO/9ahWp0GbLTc+i55R2PU0wu8S/1f2NJWEskmnHJOUAaNeniIo b7I65RgaHOUFBC4YoZqjcVC7YPA+7HuxIV9amd9NuBlEQ4SVGJl217nSo2+q2aqU RdA2F4PcXgQw77M8Va9pQjbD3tUNHb0= -----END CERTIFICATE-----Generated at Sun Nov 15 19:23:37 2026 by rpki-client