$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a171796-f141-3099-afc0-6080f6f5db01.roa File: 0a171796-f141-3099-afc0-6080f6f5db01.roa (raw, json) Hash identifier: JtzrexNJ0uTXyvuLMvbmjWoxv0gxpsnJ11tQVVXGKpQ= Subject key identifier: A7:85:48:12:4E:03:7D:B1:1E:DB:C5:DA:0D:77:77:95:BA:BE:C0:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42784AEF68EB341E68344DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a171796-f141-3099-afc0-6080f6f5db01.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 70.190.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:4a:ef:68:eb:34:1e:68:34:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7f8dc77f-a45c-4892-8788-e09919b4cdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:05:d7:52:91:d2:33:9e:04:15:bf:a5:50: ac:25:48:3f:63:04:12:2f:22:78:bd:f6:6b:c5:87: f1:b3:1b:f5:59:2b:9c:dc:a7:9c:fa:3f:06:75:bc: 1f:52:3c:98:13:44:fe:36:4e:61:d1:bb:9a:af:94: 9b:f9:39:37:57:2b:cb:ce:6f:36:e8:7b:b2:cb:7f: 7b:be:18:ea:a6:d3:f2:1f:e7:42:0b:c9:78:36:55: 0f:05:1f:26:18:12:b6:8c:c8:fe:6f:b1:e0:20:5c: fd:a4:ff:ce:a8:18:ef:db:43:5a:98:ea:d5:5f:64: f6:ad:1a:8e:64:8e:8e:d5:77:5c:71:b2:48:d7:aa: 9d:9a:a0:83:31:21:f3:f1:47:bd:9b:13:71:fb:a9: 65:7e:8a:a2:ee:7b:6e:6c:93:e3:f3:ff:c4:7a:27: 14:54:d0:d8:37:9b:6f:6c:8f:6c:e3:95:28:33:c9: d4:be:3b:32:9b:cc:27:8e:b0:18:da:44:42:f1:1e: c5:95:41:cf:ae:e2:5c:c7:33:76:f6:8f:85:36:90: d8:9c:27:c9:2d:f9:67:59:17:c1:39:1c:a1:1a:1b: 52:c9:33:ce:cc:ea:ec:93:68:8c:ea:14:f4:c3:5e: ab:e5:78:1a:e2:b3:93:17:d2:19:97:0b:7f:b5:fa: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:85:48:12:4E:03:7D:B1:1E:DB:C5:DA:0D:77:77:95:BA:BE:C0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a171796-f141-3099-afc0-6080f6f5db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a3:24:b0:46:88:54:a1:d8:6b:9c:50:ca:a7:ad:01:6e:b1: e3:92:21:3e:68:22:11:05:c6:dc:49:10:fa:eb:23:6f:62:ed: ed:a9:2d:7e:ee:80:3b:9d:b8:0f:b0:b9:70:13:81:75:1c:62: d9:b7:7b:ae:7e:db:75:e1:0f:24:70:3f:4d:04:d9:76:cd:ec: 2c:68:e2:09:7b:34:d8:55:c7:e6:2d:6a:d4:65:18:24:14:84: 73:be:d5:a1:a3:9f:2f:50:e1:8f:4b:e9:af:24:ed:3b:d7:f7: bf:a6:f0:56:af:8f:5b:0e:c2:0d:c7:c5:6e:e1:57:6c:a4:cb: d1:a4:4d:89:df:0e:ce:c6:b7:c0:e2:4c:30:fb:bd:59:6b:4a: ba:a6:a2:a9:97:01:b0:e7:db:f1:cf:d3:dd:ab:e1:f9:e2:09: 6c:69:b9:27:f3:c3:ee:4b:18:52:de:35:0e:10:75:f9:58:ff: 7b:93:4c:9d:1a:ec:70:7f:97:58:8c:dc:04:71:73:0c:94:43: 54:0d:62:a5:fa:cb:81:ba:2e:d9:56:3e:fa:ae:a0:5d:6f:00: 21:b8:a3:48:ad:e3:78:af:64:57:89:c7:79:85:f6:88:9e:67: 5e:a2:06:f0:54:42:ae:dd:74:5f:3e:65:a1:e9:d5:65:38:bc: f1:98:82:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeErvaOs0Hmg0TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2Y4ZGM3N2YtYTQ1Yy00ODkyLTg3ODgtZTA5OTE5YjRjZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwYF11KR0jOeBBW/pVCsJUg/YwQSLyJ4vfZr xYfxsxv1WSuc3Kec+j8GdbwfUjyYE0T+Nk5h0buar5Sb+Tk3VyvLzm826Huyy397 vhjqptPyH+dCC8l4NlUPBR8mGBK2jMj+b7HgIFz9pP/OqBjv20NamOrVX2T2rRqO ZI6O1XdccbJI16qdmqCDMSHz8Ue9mxNx+6llfoqi7ntubJPj8//EeicUVNDYN5tv bI9s45UoM8nUvjsym8wnjrAY2kRC8R7FlUHPruJcxzN29o+FNpDYnCfJLflnWRfB ORyhGhtSyTPOzOrsk2iM6hT0w16r5Xga4rOTF9IZlwt/tfrDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeFSBJOA32xHtvF2g13d5W6vsBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGExNzE3OTYtZjE0MS0z MDk5LWFmYzAtNjA4MGY2ZjVkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGujJLBGiFSh2GucUMqnrQFuseOSIT5oIhEFxtxJEPrrI29i7e2pLX7u gDuduA+wuXATgXUcYtm3e65+23XhDyRwP00E2XbN7Cxo4gl7NNhVx+YtatRlGCQU hHO+1aGjny9Q4Y9L6a8k7TvX97+m8Favj1sOwg3HxW7hV2yky9GkTYnfDs7Gt8Di TDD7vVlrSrqmoqmXAbDn2/HP092r4fniCWxpuSfzw+5LGFLeNQ4QdflY/3uTTJ0a 7HB/l1iM3ARxcwyUQ1QNYqX6y4G6LtlWPvquoF1vACG4o0it43ivZFeJx3mF9oie Z16iBvBUQq7ddF8+ZaHp1WU4vPGYgp8= -----END CERTIFICATE-----Generated at Sun Oct 4 22:52:24 2026 by rpki-client