$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff333e2c-dd23-385c-937c-fb3f1b89edea.roa File: ff333e2c-dd23-385c-937c-fb3f1b89edea.roa (raw, json) Hash identifier: E54bqJnaG4c/dHjM64oyb1W+p2PDAxPlBOhpdo5pPVE= Subject key identifier: 85:EA:6D:DF:BC:CB:97:81:97:AC:E9:15:FE:BC:F2:63:17:4A:DC:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F973BD5D954A0602CFC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff333e2c-dd23-385c-937c-fb3f1b89edea.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 64521 IP address blocks: 24.252.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:97:3b:d5:d9:54:a0:60:2c:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=e30fd6a2-ee8b-456e-88a5-77ee946a7a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:88:74:7c:c1:f4:86:e0:ed:c9:5d:40:04: a4:d8:29:fe:b1:57:c3:50:9b:6d:af:90:f1:55:41: 3f:6c:da:17:f4:da:30:b1:ac:72:62:b1:e3:89:b4: b9:a4:d3:a9:05:f7:07:fe:85:a3:5b:f1:87:13:40: 87:8e:02:ea:eb:cb:68:24:0a:0f:14:39:5b:cb:be: 52:a2:8e:30:61:3e:1e:25:fb:3b:20:75:92:71:10: f3:ff:47:ff:3c:a6:9b:9d:8b:15:10:b3:db:32:f7: 0c:41:09:1a:7f:2d:91:8d:fd:cc:0a:1c:ed:eb:54: 0a:2d:f7:0f:69:bd:5e:6f:54:77:e6:b9:0f:33:b4: d5:3f:0b:b7:00:bc:06:64:17:1b:d1:8a:ad:8e:2d: 86:0c:70:14:15:af:c5:e5:ab:da:e1:c0:26:cb:b4: c8:25:b7:cf:ce:75:dc:1d:72:ad:4e:08:8b:b3:4d: 9a:3c:c6:62:c5:ae:77:d7:78:d8:24:83:4e:7d:89: 95:57:a6:ae:24:0c:fa:66:e6:9d:bd:a5:80:67:dd: 25:ac:5f:5d:eb:00:41:fc:56:e6:5b:ef:f3:c9:9f: ed:02:10:09:2a:24:1b:67:35:ea:bf:98:7e:34:70: 73:83:e0:71:cd:d4:98:43:98:57:dc:ec:27:6b:45: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:6D:DF:BC:CB:97:81:97:AC:E9:15:FE:BC:F2:63:17:4A:DC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff333e2c-dd23-385c-937c-fb3f1b89edea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.252.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:89:38:05:5c:aa:cb:e4:fe:21:55:24:39:b4:3f:e4:79:0b: 7e:67:67:1f:fc:f5:6e:0f:31:48:e2:22:af:e0:1f:d4:95:9d: d1:59:64:1c:67:b5:95:35:70:dd:2b:30:61:d1:4c:dc:9a:c3: af:4f:7e:b0:0b:a4:db:f5:35:bc:a7:4e:cd:23:e7:43:b1:c7: ea:b6:b7:a0:7c:ae:fb:d4:d1:29:75:ef:94:97:be:1f:16:ee: e3:27:1a:2a:a8:65:f3:37:66:f0:f2:ce:e1:ad:2a:48:87:db: 6a:00:7a:36:13:80:19:f7:7b:4d:d4:60:82:23:ba:63:95:53: 36:ad:64:2a:3d:9e:e0:df:56:f4:8c:47:fd:cb:89:e7:7e:92: 0a:a4:4b:4d:a7:20:86:77:68:38:38:f2:c1:81:02:26:17:5a: 6a:20:6c:4e:d7:ed:30:fe:6b:82:09:01:b4:2a:04:95:b4:a1: 0a:16:8b:d9:04:10:33:f4:c3:78:45:c4:18:08:99:3f:eb:6e: f1:2d:c2:1a:21:50:e6:c0:24:6e:1c:56:e0:fd:b4:1a:5d:68: 2c:bb:20:92:01:df:ab:29:ed:6e:05:a8:08:a9:ac:07:a3:c0: 63:1a:b9:41:d1:9b:b1:24:4b:c4:69:00:8c:f0:bc:6d:37:ae: 20:54:db:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5c71dlUoGAs/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZTMwZmQ2YTItZWU4Yi00NTZlLTg4YTUtNzdlZTk0NmE3YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiOIdHzB9Ibg7cldQASk2Cn+sVfDUJttr5Dx VUE/bNoX9NowsaxyYrHjibS5pNOpBfcH/oWjW/GHE0CHjgLq68toJAoPFDlby75S oo4wYT4eJfs7IHWScRDz/0f/PKabnYsVELPbMvcMQQkafy2Rjf3MChzt61QKLfcP ab1eb1R35rkPM7TVPwu3ALwGZBcb0Yqtji2GDHAUFa/F5ava4cAmy7TIJbfPznXc HXKtTgiLs02aPMZixa5313jYJINOfYmVV6auJAz6ZuadvaWAZ90lrF9d6wBB/Fbm W+/zyZ/tAhAJKiQbZzXqv5h+NHBzg+BxzdSYQ5hX3Owna0XeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXqbd+8y5eBl6zpFf688mMXStzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYzMzNlMmMtZGQyMy0z ODVjLTkzN2MtZmIzZjFiODllZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuJOAVcqsvk/iFVJDm0P+R5C35nZx/89W4PMUjiIq/gH9SVndFZZBxn tZU1cN0rMGHRTNyaw69PfrALpNv1NbynTs0j50Oxx+q2t6B8rvvU0Sl175SXvh8W 7uMnGiqoZfM3ZvDyzuGtKkiH22oAejYTgBn3e03UYIIjumOVUzatZCo9nuDfVvSM R/3Lied+kgqkS02nIIZ3aDg48sGBAiYXWmogbE7X7TD+a4IJAbQqBJW0oQoWi9kE EDP0w3hFxBgImT/rbvEtwhohUObAJG4cVuD9tBpdaCy7IJIB36sp7W4FqAiprAej wGMauUHRm7EkS8RpAIzwvG03riBU2yE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:18 2026 by rpki-client