$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa File: 90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa (raw, json) Hash identifier: iyinynzzYcjomVTBwVv81b17W+nAJa29p6/SY8OHNjc= Subject key identifier: 72:B9:F9:22:88:E2:44:70:2B:4B:19:15:E3:1D:34:2E:8E:D9:85:79 Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584E9A7FD71BC590051505756B00 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 401233 IP address blocks: 23.140.152.0/24 maxlen: 24 130.51.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d7:1b:c5:90:05:15:05:75:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=dfd97e21-efb6-4b06-8853-6c895ae3a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:d5:7c:b7:86:5c:e1:86:b6:7e:47:40:3b: c0:54:cf:d9:92:66:6d:d9:04:3b:af:fc:9f:f8:28: 71:f4:bd:7c:a0:19:58:08:b4:58:26:8f:e1:ee:bf: cc:f6:db:91:c3:71:e0:2d:b1:8c:99:fd:13:fb:ef: 6b:6b:ff:65:55:7a:f4:1c:39:4c:fb:16:12:da:eb: 4b:b5:2c:83:08:3d:b6:93:5b:b8:19:2b:05:ff:e4: b2:4d:1c:a9:ce:6d:8b:e2:ec:d3:92:89:d5:c4:fe: 81:5d:40:b1:16:da:06:29:b1:f5:71:01:88:19:79: be:32:e0:4c:4a:81:a3:06:19:75:c3:b0:81:ca:92: b8:4e:ed:7a:b5:66:6f:07:2b:3f:67:12:be:61:76: 42:77:5c:8a:8c:a1:a7:0f:76:e2:ac:10:38:9a:b8: ff:bb:30:ea:2c:6d:bb:86:24:36:9e:48:f9:85:31: 0d:09:df:83:54:ac:23:4c:ae:4c:f1:ab:2d:d0:cc: 62:c4:a9:f0:44:89:f7:e0:00:dd:60:5e:43:cf:be: ad:14:7d:75:ad:04:13:1c:eb:f1:76:33:29:61:52: 5d:b4:9f:52:9c:51:86:aa:af:9a:e2:01:30:93:94: 17:53:3a:5d:1f:62:ee:75:09:59:4a:6e:a5:4c:28: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B9:F9:22:88:E2:44:70:2B:4B:19:15:E3:1D:34:2E:8E:D9:85:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: 23.140.152.0/24 130.51.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e8:0d:19:f4:a7:eb:d8:5f:1c:7c:76:84:e9:48:29:c5:5d: 2b:39:48:1c:f5:b1:79:de:aa:39:da:39:e5:25:0a:f1:cf:b8: c1:44:2d:4a:6c:a1:48:e7:84:c4:18:66:72:5f:b6:b1:a1:d1: 74:07:78:44:5c:8d:2b:62:46:b6:4f:86:7e:99:72:7b:a5:21: 6f:db:de:62:5c:0a:50:38:eb:42:93:e1:cc:75:3b:72:3a:8f: 9f:d4:6d:83:eb:b9:93:78:a6:31:ef:8b:f3:19:4a:29:84:93: 4d:cc:a5:4a:99:a2:f8:17:cb:bc:cf:3b:9d:82:0e:15:56:d2: db:1d:09:33:2c:26:ef:a3:a1:f7:da:08:d6:2f:6f:67:1f:c7: a4:27:65:06:72:d2:2b:a3:55:64:e8:39:fa:22:71:c7:4c:af: 32:05:0e:b3:08:23:45:87:53:74:0c:b6:11:58:12:82:01:23: e4:39:f8:8f:c8:73:f3:8a:c2:38:de:ca:21:be:bd:1b:16:e5: be:30:e1:17:41:6e:f0:2f:6a:93:7e:ce:44:21:ad:ca:b3:fa: 39:10:cd:ee:13:cb:05:e4:18:e4:a2:44:8f:02:49:ef:c7:9b: 1a:23:a2:82:57:43:05:8d:6a:0c:1e:8c:73:77:d7:f1:42:52: 93:c0:99:e9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6af9cbxZAFFQV1awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGZkOTdlMjEtZWZiNi00YjA2LTg4NTMtNmM4OTVhZTNhOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy/VfLeGXOGGtn5HQDvAVM/ZkmZt2QQ7r/yf +Chx9L18oBlYCLRYJo/h7r/M9tuRw3HgLbGMmf0T++9ra/9lVXr0HDlM+xYS2utL tSyDCD22k1u4GSsF/+SyTRypzm2L4uzTkonVxP6BXUCxFtoGKbH1cQGIGXm+MuBM SoGjBhl1w7CBypK4Tu16tWZvBys/ZxK+YXZCd1yKjKGnD3birBA4mrj/uzDqLG27 hiQ2nkj5hTENCd+DVKwjTK5M8ast0MxixKnwRIn34ADdYF5Dz76tFH11rQQTHOvx djMpYVJdtJ9SnFGGqq+a4gEwk5QXUzpdH2LudQlZSm6lTCjwiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHK5+SKI4kRwK0sZFeMdNC6O2YV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvOTBjOTBmZjAtN2U2Yi0z NTdiLWFiNWItMmFiNTRlMTVjNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI/oDRn0p+vYXxx8doTpSCnFXSs5SBz1sXneqjnaOeUlCvHP uMFELUpsoUjnhMQYZnJftrGh0XQHeERcjStiRrZPhn6ZcnulIW/b3mJcClA460KT 4cx1O3I6j5/UbYPruZN4pjHvi/MZSimEk03MpUqZovgXy7zPO52CDhVW0tsdCTMs Ju+joffaCNYvb2cfx6QnZQZy0iujVWToOfoiccdMrzIFDrMII0WHU3QMthFYEoIB I+Q5+I/Ic/OKwjjeyiG+vRsW5b4w4RdBbvAvapN+zkQhrcqz+jkQze4TywXkGOSi RI8CSe/HmxojooJXQwWNagwejHN31/FCUpPAmek= -----END CERTIFICATE-----Generated at Fri Jul 24 13:59:24 2026 by rpki-client