$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa File: 10cd5b22-a764-3843-a802-62d0ac33e561.roa (raw, json) Hash identifier: wKyx2qGxvM3vgGbl0hfhV1x+El5wvVE5uh1Jfd5s2YI= Subject key identifier: 49:4B:04:CB:2A:D6:9A:48:7F:54:BB:73:A0:46:CB:AF:B9:5F:EE:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A7EF30309094AFFC04600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.173.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:7e:f3:03:09:09:4a:ff:c0:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=e61be521-1889-4edd-b6a4-0b60244f0156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:e8:84:25:23:42:de:a6:7a:39:39:96:a3: 21:b9:96:23:ec:93:5f:34:46:3a:62:1f:86:b4:76: 3a:26:75:49:70:ce:f1:4a:19:b5:4a:1c:b8:6f:68: 1d:89:ee:76:a9:73:03:6a:d4:f6:78:f4:3a:02:7a: 9a:90:7b:ec:d2:18:a7:5c:21:9e:f7:1c:d0:ad:c0: 44:43:16:c9:82:49:ce:2f:cc:c6:5d:a1:94:da:26: a0:6a:33:43:a8:a3:d3:fa:01:6f:81:30:db:bb:13: 21:c4:bd:55:e4:59:6c:55:bc:66:f1:80:f3:03:70: 2e:4c:f7:96:7c:1f:d5:3f:14:5b:68:a0:a6:b8:1c: e1:cc:15:2e:34:ae:fd:e1:e7:4c:c8:17:b7:dc:f5: 9b:b4:02:40:1e:d5:31:2b:e7:a1:29:fe:8b:d1:00: 53:54:22:a5:93:be:72:50:3d:82:59:17:ca:97:2a: 92:b9:11:aa:26:88:55:5e:62:11:fd:7e:ff:05:f5: a3:15:ea:cc:6a:8c:ae:a6:1b:fd:2a:d0:e0:bf:c7: c6:07:7a:ef:ff:ce:0a:aa:11:54:5c:9b:df:0b:8f: c7:1f:72:77:6d:fd:6e:fd:fd:de:41:69:58:a3:d8: 90:10:61:b8:21:d9:ba:b9:ae:68:88:34:fa:01:44: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:04:CB:2A:D6:9A:48:7F:54:BB:73:A0:46:CB:AF:B9:5F:EE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:53:d8:b1:42:3d:1d:c9:06:c4:1a:a3:94:ba:42:f8:ba:8b: 38:08:6a:20:81:02:34:69:4c:af:ac:06:66:3e:de:14:3c:30: 53:3d:ad:cc:b8:c9:60:e3:f0:63:15:0c:ea:ca:d2:1e:de:1d: b5:c3:3b:85:5e:a1:21:9e:6a:1d:ba:00:25:c9:27:3d:a1:6f: 2f:3b:41:b4:5d:7e:43:75:af:b9:e4:ae:fb:7d:7a:59:6d:77: e3:52:47:f5:cc:a9:09:df:5a:e0:47:66:65:09:ce:e7:11:7a: a6:2d:78:b3:db:99:48:a5:c8:95:54:dd:44:1a:80:bd:9c:40: 49:99:04:6e:2c:6d:5f:4e:ab:d4:2d:b3:95:04:78:90:ea:13: c5:16:97:72:fa:40:a0:21:81:c2:6b:72:4a:33:0b:a3:ef:ca: 50:c6:eb:95:9f:b0:df:8d:0c:a9:20:d0:b1:0c:9b:72:c0:b0: f9:08:fc:7f:01:33:4b:41:f9:d2:4a:d7:d4:48:64:0d:19:81: a5:f8:b6:5b:f2:2a:62:7f:ce:93:f2:60:26:12:dc:c9:64:a0: 1d:12:d4:15:f5:a3:91:3e:76:6c:8c:a5:ec:42:eb:ea:2f:1e: cc:57:27:c3:e6:4a:0a:e4:5b:6c:7a:b4:14:c3:00:e6:0e:6b: a9:99:d2:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hen7zAwkJSv/ARgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZTYxYmU1MjEtMTg4OS00ZWRkLWI2YTQtMGI2MDI0NGYwMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVTohCUjQt6mejk5lqMhuZYj7JNfNEY6Yh+G tHY6JnVJcM7xShm1Shy4b2gdie52qXMDatT2ePQ6AnqakHvs0hinXCGe9xzQrcBE QxbJgknOL8zGXaGU2iagajNDqKPT+gFvgTDbuxMhxL1V5FlsVbxm8YDzA3AuTPeW fB/VPxRbaKCmuBzhzBUuNK794edMyBe33PWbtAJAHtUxK+ehKf6L0QBTVCKlk75y UD2CWRfKlyqSuRGqJohVXmIR/X7/BfWjFerMaoyuphv9KtDgv8fGB3rv/84KqhFU XJvfC4/HH3J3bf1u/f3eQWlYo9iQEGG4Idm6ua5oiDT6AUTA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElLBMsq1ppIf1S7c6BGy6+5X+63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTBjZDViMjItYTc2NC0z ODQzLWE4MDItNjJkMGFjMzNlNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZT2LFCPR3JBsQao5S6Qvi6izgIaiCBAjRpTK+sBmY+3hQ8MFM9rcy4 yWDj8GMVDOrK0h7eHbXDO4VeoSGeah26ACXJJz2hby87QbRdfkN1r7nkrvt9ellt d+NSR/XMqQnfWuBHZmUJzucReqYteLPbmUilyJVU3UQagL2cQEmZBG4sbV9Oq9Qt s5UEeJDqE8UWl3L6QKAhgcJrckozC6PvylDG65WfsN+NDKkg0LEMm3LAsPkI/H8B M0tB+dJK19RIZA0ZgaX4tlvyKmJ/zpPyYCYS3MlkoB0S1BX1o5E+dmyMpexC6+ov HsxXJ8PmSgrkW2x6tBTDAOYOa6mZ0r0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:12 2026 by rpki-client