$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa File: 0cd4101d-7440-3066-bdaa-b77071b5318e.roa (raw, json) Hash identifier: 3tl9e5Id5ujqZ+RKAxBOVTieyxfAde3xgILyDr7hR3o= Subject key identifier: 76:07:2A:94:6B:C2:25:5C:AB:9F:91:B0:42:EC:8D:CD:BD:2D:66:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A1F994ECB60E333AD6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a1:f9:94:ec:b6:0e:33:3a:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=99fc00b2-f7f9-42ef-8248-abd10b9ceede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:55:7a:96:13:39:1c:10:94:91:0b:f7:99: 95:6c:a3:97:11:47:0c:79:a5:53:7a:09:0f:09:ab: 4d:7b:3b:b4:c5:30:af:93:dd:d1:9e:e1:83:18:cd: f3:41:0c:b2:12:b3:b8:03:df:e4:1f:9d:09:71:8c: 4b:7f:02:7b:16:a7:96:ce:cf:a0:02:c4:86:eb:43: 78:ab:fd:f8:91:21:09:70:0b:49:99:ad:af:4f:54: d2:2d:b4:be:e3:33:57:18:ed:2a:f7:0e:05:59:0e: 8a:c9:ff:8b:6f:01:12:d9:8e:6b:06:9d:3e:cf:b8: 4a:8e:72:9b:18:cc:42:68:0b:21:2b:5a:f4:24:31: dc:70:6b:df:1f:e3:95:fc:3c:f7:f5:1a:88:32:29: b8:99:fb:5b:d6:a8:19:87:da:77:0d:70:b6:26:03: 89:d8:c6:02:67:6a:7c:15:56:87:eb:6d:ef:09:14: 12:28:e7:5f:84:e9:e3:b2:12:b4:0f:56:80:67:2f: 38:d0:33:32:e0:0c:52:fb:00:c5:59:5a:f6:b6:45: 58:5c:b4:c7:4d:6d:96:81:91:c0:0d:40:f3:14:95: e7:b8:5a:96:dc:34:83:3d:62:9a:35:20:77:8a:02: dd:ab:94:bb:ad:aa:1d:93:0d:90:05:c4:bd:34:8d: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:2A:94:6B:C2:25:5C:AB:9F:91:B0:42:EC:8D:CD:BD:2D:66:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b5:c9:3d:c2:5f:ad:a3:3a:ad:3b:3b:99:df:e9:ce:6e:a9: 07:28:c8:ba:55:56:7e:95:8e:8d:8b:2e:50:3d:d5:d9:62:b5: 13:cc:00:dd:f0:c8:9a:f0:c7:7d:cb:ff:97:8f:a4:e1:8e:e1: 1a:cb:a0:00:a4:3b:7e:a9:c0:ab:cf:fe:7c:9d:0f:af:cd:d8: ca:30:5d:9a:71:8b:11:1f:e5:36:8f:b1:d5:19:5b:bd:c1:c1: dd:a5:fa:0c:f2:10:d6:70:f6:d1:e0:f0:68:2e:ff:66:4f:73: 0f:93:f7:17:9f:dd:c2:ba:56:8a:67:0d:2f:fd:1f:23:75:3d: 88:d4:d0:27:fe:f9:31:40:1d:5c:e0:af:8a:b8:87:ad:c1:55: 52:86:34:f9:a5:27:9b:d6:30:19:4e:52:60:31:42:73:64:5b: 03:50:23:64:db:4c:97:ca:4d:43:b7:b6:c6:d3:02:37:85:29: 08:ee:7f:ac:fd:5a:44:b4:0f:6c:6f:e4:78:49:e0:76:2a:46: 92:99:e9:01:7c:1a:b6:96:83:89:96:06:03:38:a7:a5:a3:c5: 0a:72:fe:6b:d9:e9:3d:68:63:4d:dd:db:ed:50:13:78:d6:e0: 1d:d3:f8:58:cc:a9:28:33:d3:56:be:26:e7:0f:74:6c:04:0d: 04:a8:69:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqH5lOy2DjM61sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTlmYzAwYjItZjdmOS00MmVmLTgyNDgtYWJkMTBiOWNlZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHtVepYTORwQlJEL95mVbKOXEUcMeaVTegkP CatNezu0xTCvk93RnuGDGM3zQQyyErO4A9/kH50JcYxLfwJ7FqeWzs+gAsSG60N4 q/34kSEJcAtJma2vT1TSLbS+4zNXGO0q9w4FWQ6Kyf+LbwES2Y5rBp0+z7hKjnKb GMxCaAshK1r0JDHccGvfH+OV/Dz39RqIMim4mftb1qgZh9p3DXC2JgOJ2MYCZ2p8 FVaH623vCRQSKOdfhOnjshK0D1aAZy840DMy4AxS+wDFWVr2tkVYXLTHTW2WgZHA DUDzFJXnuFqW3DSDPWKaNSB3igLdq5S7raodkw2QBcS9NI0DxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYHKpRrwiVcq5+RsELsjc29LWYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNkNDEwMWQtNzQ0MC0z MDY2LWJkYWEtYjc3MDcxYjUzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF61yT3CX62jOq07O5nf6c5uqQcoyLpVVn6Vjo2LLlA91dlitRPMAN3w yJrwx33L/5ePpOGO4RrLoACkO36pwKvP/nydD6/N2MowXZpxixEf5TaPsdUZW73B wd2l+gzyENZw9tHg8Ggu/2ZPcw+T9xef3cK6VopnDS/9HyN1PYjU0Cf++TFAHVzg r4q4h63BVVKGNPmlJ5vWMBlOUmAxQnNkWwNQI2TbTJfKTUO3tsbTAjeFKQjuf6z9 WkS0D2xv5HhJ4HYqRpKZ6QF8GraWg4mWBgM4p6WjxQpy/mvZ6T1oY03d2+1QE3jW 4B3T+FjMqSgz01a+JucPdGwEDQSoaTo= -----END CERTIFICATE-----Generated at Wed Sep 23 20:33:36 2026 by rpki-client