$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05666e6a-75c3-36c5-a41d-544217e80473.roa File: 05666e6a-75c3-36c5-a41d-544217e80473.roa (raw, json) Hash identifier: OMRKOZBl4VODirre5hJGLfnxDWkpsvAzeZup5by0XVg= Subject key identifier: E5:C2:FA:F7:E2:47:45:C7:A3:C1:A0:F0:19:38:70:E9:70:94:B3:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32CC4711B7127CE687BF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05666e6a-75c3-36c5-a41d-544217e80473.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.161.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:cc:47:11:b7:12:7c:e6:87:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=164a1e70-443c-4a44-b51e-ce1ba2076077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:73:63:61:df:a3:0e:8e:cd:b6:ca:c7:78: 82:b8:3a:57:b2:bf:de:c4:51:6e:ba:57:4c:95:46: 94:98:31:72:a5:4f:1f:93:de:e3:0b:ff:7b:79:3b: 43:a0:72:5b:72:6e:ed:6c:6a:f2:d8:85:96:78:7e: 5a:8b:d5:14:f0:75:e0:d4:d7:19:e7:4f:f1:f8:54: 46:dc:13:df:49:d8:e5:77:56:50:9f:e1:8f:d7:63: d8:e4:1b:b2:f0:0d:5f:7b:bf:4a:60:ba:b9:11:3f: a3:fa:7a:ba:7d:82:4d:fa:53:53:b9:6b:1f:3d:4a: a2:e3:35:5e:ba:ef:f6:8f:8d:f1:37:13:37:29:11: 0c:25:4d:6c:c7:2a:20:21:f9:73:ef:9b:44:5a:aa: 70:b0:f3:e1:a5:c5:a7:4e:7b:db:92:2c:a7:db:70: 4c:4f:b7:34:20:f2:00:a3:60:61:83:2b:76:91:73: ed:92:2e:f7:36:22:00:e3:4f:6b:ca:ce:08:94:f7: bb:1d:53:01:63:15:ff:b7:b2:ae:45:f1:a6:00:f0: b1:1f:eb:19:96:00:0d:f2:14:d7:55:4d:52:3c:44: 18:cb:b3:4e:d8:26:1c:73:af:5a:5a:0b:13:49:0d: 53:3b:bd:3e:1f:0b:11:23:4e:ff:27:35:f9:5a:4a: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C2:FA:F7:E2:47:45:C7:A3:C1:A0:F0:19:38:70:E9:70:94:B3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05666e6a-75c3-36c5-a41d-544217e80473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1e:91:00:f0:dd:52:45:5c:04:d8:7c:50:6a:ed:5b:5f:72: e9:76:be:81:29:dd:05:fb:df:83:b0:36:18:37:0d:c9:cc:d7: cc:c5:59:e2:35:47:fe:ea:09:39:25:0a:33:d6:b4:56:3c:68: 43:84:0a:af:d1:e9:c6:2c:63:98:9e:ea:87:31:4d:7f:e5:80: 61:b4:b1:30:ba:c1:76:18:40:34:3a:ab:f9:fa:08:ae:51:31: 18:f1:b3:39:34:6d:dd:9a:16:a3:74:2d:9c:65:c7:1c:12:8a: 4a:cd:5e:30:f3:4b:b4:70:78:19:3e:bc:9a:6b:36:9c:60:9b: 71:5f:b8:37:ad:f0:5c:fc:fe:23:2a:9f:06:61:13:51:ca:01: dc:b5:f3:55:38:75:02:73:87:0d:1d:d8:a1:78:22:1c:7c:f3: 4c:af:4a:db:5e:99:78:d3:0b:4e:7d:99:85:13:4f:3b:88:3d: ba:5e:07:94:20:ca:57:4c:7b:08:b3:6a:29:fe:14:00:2d:e4: 70:bf:ff:fd:5f:3b:4d:f4:3e:4c:60:2b:79:85:5b:09:d4:a2: c9:ff:7e:e5:d3:21:cf:a2:98:d4:80:7e:8f:14:48:d4:23:ac: d0:96:e9:6e:53:82:ea:e3:8a:4f:6e:78:ce:60:15:bd:35:d6: 23:ba:47:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsxHEbcSfOaHv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MTY0YTFlNzAtNDQzYy00YTQ0LWI1MWUtY2UxYmEyMDc2MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtNzY2Hfow6OzbbKx3iCuDpXsr/exFFuuldM lUaUmDFypU8fk97jC/97eTtDoHJbcm7tbGry2IWWeH5ai9UU8HXg1NcZ50/x+FRG 3BPfSdjld1ZQn+GP12PY5Buy8A1fe79KYLq5ET+j+nq6fYJN+lNTuWsfPUqi4zVe uu/2j43xNxM3KREMJU1sxyogIflz75tEWqpwsPPhpcWnTnvbkiyn23BMT7c0IPIA o2Bhgyt2kXPtki73NiIA409rys4IlPe7HVMBYxX/t7KuRfGmAPCxH+sZlgAN8hTX VU1SPEQYy7NO2CYcc69aWgsTSQ1TO70+HwsRI07/JzX5WkrlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXC+vfiR0XHo8Gg8Bk4cOlwlLMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDU2NjZlNmEtNzVjMy0z NmM1LWE0MWQtNTQ0MjE3ZTgwNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4ekQDw3VJFXATYfFBq7Vtfcul2voEp3QX734OwNhg3DcnM18zFWeI1 R/7qCTklCjPWtFY8aEOECq/R6cYsY5ie6ocxTX/lgGG0sTC6wXYYQDQ6q/n6CK5R MRjxszk0bd2aFqN0LZxlxxwSikrNXjDzS7RweBk+vJprNpxgm3FfuDet8Fz8/iMq nwZhE1HKAdy181U4dQJzhw0d2KF4Ihx880yvSttemXjTC059mYUTTzuIPbpeB5Qg yldMewizain+FAAt5HC///1fO030PkxgK3mFWwnUosn/fuXTIc+imNSAfo8USNQj rNCW6W5Tgurjik9ueM5gFb011iO6R/Y= -----END CERTIFICATE-----Generated at Thu Oct 8 12:48:36 2026 by rpki-client