$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd7d5ce-1a74-3def-b29d-2b828aaec704.roa File: 4fd7d5ce-1a74-3def-b29d-2b828aaec704.roa (raw, json) Hash identifier: DHIgBJk51QcKb2LfFrbLH6JhjYydGl/o5sND3HuPd3I= Subject key identifier: 60:AC:42:37:C9:58:B3:78:4B:17:A0:09:D4:08:8C:6E:81:E2:4D:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD29E36E99F79D227D50A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd7d5ce-1a74-3def-b29d-2b828aaec704.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 24.251.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:29:e3:6e:99:f7:9d:22:7d:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=8e38f223-692b-45f8-bf90-c55b1d520ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:d7:54:ee:56:1d:3e:36:eb:38:42:d2:fc: 00:33:49:7d:3b:0c:86:05:45:ab:3b:9b:bb:7f:61: a6:11:d6:6c:cf:f2:0b:17:4a:41:66:29:8c:c9:23: 93:e9:e6:25:aa:56:46:f2:d8:c7:d0:87:60:8b:fb: 55:e7:d0:09:34:ea:d9:d0:cd:fd:56:43:e7:95:54: 90:27:68:34:8b:5d:d2:32:b4:97:08:ec:a5:f7:1f: bd:af:17:36:f4:99:b0:e4:c7:df:84:06:9b:bf:21: e9:6b:a2:46:80:5e:53:d3:f2:5c:67:07:64:15:e0: b8:df:5e:11:a6:27:72:29:c7:8b:23:72:d3:48:03: 8d:2d:31:25:df:87:fa:d0:db:41:97:87:88:dd:d2: 3a:90:f2:0e:7e:a5:71:ca:c0:27:9c:a5:90:79:9a: 12:6a:69:83:2a:2e:4d:88:b9:06:fa:22:b9:77:4c: 09:44:4e:92:ce:c0:01:7d:7d:ad:27:c9:36:97:9a: b1:0a:c3:b4:34:a6:91:61:5c:4d:da:e0:94:e4:e7: 05:9b:0d:2e:bc:49:a9:c6:f6:24:3e:45:18:52:81: 02:97:24:10:1f:d5:24:49:27:e7:da:f4:70:d0:24: b3:ff:c3:7f:49:6e:f9:ea:51:ee:a6:d4:95:37:3d: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AC:42:37:C9:58:B3:78:4B:17:A0:09:D4:08:8C:6E:81:E2:4D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fd7d5ce-1a74-3def-b29d-2b828aaec704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a2:3d:b7:76:d5:be:33:45:e2:57:b5:78:4e:67:ee:3b:f3: 9c:7f:ef:5e:97:19:23:2a:ae:43:e5:3c:dd:06:a4:25:73:3f: 7e:a7:ef:bc:0f:51:18:7d:13:62:11:0d:c8:33:3a:63:9d:87: 65:aa:67:f5:5d:61:da:0d:be:86:44:3f:63:49:fc:ad:e0:ba: 00:23:8c:87:2b:81:81:5c:33:53:92:b1:0d:8f:52:55:1b:b3: 36:98:a9:92:54:f6:95:a5:28:ca:78:d0:19:23:32:91:62:22: 1c:e6:ee:03:99:e4:26:28:2e:14:d0:fc:d3:26:74:53:51:fe: 6b:4c:d4:7b:f9:22:03:47:70:3a:d3:f7:15:74:26:75:2b:9b: dc:3f:87:ca:a3:9b:b1:3f:c2:f0:64:d4:20:49:b5:36:01:30: 25:92:2c:20:fe:9f:90:43:f7:80:20:cd:b8:78:3d:28:11:43: a8:78:3f:31:50:03:4d:b8:4d:1b:22:fd:3d:83:a2:65:be:99: 87:60:a6:c9:2a:e1:9e:11:6f:4f:ae:0f:27:26:60:9f:38:72: 13:fd:6a:fe:ec:a3:97:13:5a:36:d6:fa:d8:4c:08:1e:cf:64: 12:8b:ba:e8:b3:c2:14:c3:04:cb:a1:53:8d:44:d1:14:62:da: 53:ae:0f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSnjbpn3nSJ9UKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OGUzOGYyMjMtNjkyYi00NWY4LWJmOTAtYzU1YjFkNTIwZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDXXVO5WHT426zhC0vwAM0l9OwyGBUWrO5u7 f2GmEdZsz/ILF0pBZimMySOT6eYlqlZG8tjH0Idgi/tV59AJNOrZ0M39VkPnlVSQ J2g0i13SMrSXCOyl9x+9rxc29Jmw5MffhAabvyHpa6JGgF5T0/JcZwdkFeC4314R pidyKceLI3LTSAONLTEl34f60NtBl4eI3dI6kPIOfqVxysAnnKWQeZoSammDKi5N iLkG+iK5d0wJRE6SzsABfX2tJ8k2l5qxCsO0NKaRYVxN2uCU5OcFmw0uvEmpxvYk PkUYUoEClyQQH9UkSSfn2vRw0CSz/8N/SW756lHuptSVNz2AlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCsQjfJWLN4SxegCdQIjG6B4k2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZkN2Q1Y2UtMWE3NC0z ZGVmLWIyOWQtMmI4MjhhYWVjNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPvLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaiPbd21b4zReJXtXhOZ+4785x/716XGSMqrkPlPN0GpCVzP36n77wP URh9E2IRDcgzOmOdh2WqZ/VdYdoNvoZEP2NJ/K3gugAjjIcrgYFcM1OSsQ2PUlUb szaYqZJU9pWlKMp40BkjMpFiIhzm7gOZ5CYoLhTQ/NMmdFNR/mtM1Hv5IgNHcDrT 9xV0JnUrm9w/h8qjm7E/wvBk1CBJtTYBMCWSLCD+n5BD94Agzbh4PSgRQ6h4PzFQ A024TRsi/T2DomW+mYdgpskq4Z4Rb0+uDycmYJ84chP9av7so5cTWjbW+thMCB7P ZBKLuuizwhTDBMuhU41E0RRi2lOuD9k= -----END CERTIFICATE-----Generated at Wed Sep 23 07:37:51 2026 by rpki-client