$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120293e4-08fc-3afa-86a0-9b99cf0624b1.roa File: 120293e4-08fc-3afa-86a0-9b99cf0624b1.roa (raw, json) Hash identifier: 5P1FQzzKo6A/wmW6oufcmE0zOMSMsiRmDVLl0JFYeUA= Subject key identifier: 5B:28:CF:42:2B:41:F3:AC:67:36:C9:2A:87:8F:57:31:15:80:BF:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0155E382999CB68F0F05510 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120293e4-08fc-3afa-86a0-9b99cf0624b1.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 70.190.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:5e:38:29:99:cb:68:f0:f0:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=7618a6d9-9ce3-4659-9ce7-6c16e3fb990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:7a:d0:c4:69:67:e9:b4:6d:fc:2e:d1:e4: 69:d5:53:a4:8b:4e:30:7c:5c:99:8a:57:75:a8:92: eb:5c:3a:21:0e:3c:79:13:9d:73:af:1d:a1:42:18: 0e:35:c5:e0:78:31:ec:4e:74:f0:18:22:31:c0:84: ca:0a:b6:01:00:cb:91:59:f3:44:88:e3:86:32:c1: 59:3b:78:cf:bf:1b:c4:3e:e9:c7:28:82:67:b9:60: 82:af:68:25:8a:08:9e:8e:d7:20:68:4a:a1:ff:ff: 72:ea:f9:da:1f:af:49:85:11:c2:ae:9e:b2:fd:38: 75:5f:8e:8d:43:9e:38:09:56:5e:8c:b7:f8:97:30: 90:7c:f6:55:c5:61:e7:91:dc:24:f3:95:fd:97:de: e8:ef:6c:ba:de:43:ea:b6:b3:0c:05:17:3f:a2:9c: f7:6b:1a:4a:f0:60:04:63:0c:0e:1e:f8:84:eb:7b: a0:c5:87:e6:6a:89:d4:e1:01:07:e6:a1:4a:48:9e: 81:ab:b3:b4:c5:12:21:06:9f:ba:7c:86:df:17:33: 83:17:48:bf:3f:46:fe:23:6d:73:a2:a5:1a:b7:91: 6f:9e:de:2d:e0:46:3c:f2:08:8c:52:48:ba:c0:98: 4a:be:60:0c:c5:76:1e:bd:d0:ca:79:ce:26:bd:84: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:CF:42:2B:41:F3:AC:67:36:C9:2A:87:8F:57:31:15:80:BF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120293e4-08fc-3afa-86a0-9b99cf0624b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:06:78:db:e1:25:46:09:ef:42:80:7a:e1:07:7a:3e:b7:c1: bf:b6:45:fa:6c:13:57:f5:ac:3e:21:52:62:16:cc:2c:26:2e: c6:13:a9:dc:80:25:a3:b8:57:3d:ee:fe:4e:c1:f2:43:5e:9a: 41:2f:05:5b:1f:be:74:bd:b3:db:ad:67:87:e8:48:38:70:f6: d0:9c:4e:a8:96:f2:ef:71:01:03:27:2c:61:c6:ad:3a:4d:cb: 29:50:fb:c4:00:13:54:99:14:76:2d:0c:4b:f1:a7:28:09:e1: b1:4c:db:7b:74:33:db:cf:ef:87:98:50:ec:b7:36:60:ac:09: 81:f2:be:75:5a:41:ba:1e:bf:16:68:36:b5:27:bd:26:03:d0: 80:38:5c:f4:f1:46:98:71:af:7f:47:2f:0f:f4:e2:62:90:1a: cf:01:bb:f4:e4:54:1e:a9:11:6a:9d:4f:9e:4b:37:45:2f:d5: e8:34:b1:4f:0b:26:a6:68:da:9e:46:a5:d7:d6:54:6e:e5:ca: e4:c3:2c:58:80:dc:af:de:1c:6c:1f:fe:1f:b3:3c:b6:c9:39: ce:bd:3d:14:61:f4:1f:08:d8:97:46:2e:06:5f:2e:8b:f1:54: a8:a5:f9:81:8e:07:03:70:90:47:a3:aa:ad:04:cf:f5:71:9f: 2b:e4:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFV44KZnLaPDwVRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NzYxOGE2ZDktOWNlMy00NjU5LTljZTctNmMxNmUzZmI5OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpF60MRpZ+m0bfwu0eRp1VOki04wfFyZild1 qJLrXDohDjx5E51zrx2hQhgONcXgeDHsTnTwGCIxwITKCrYBAMuRWfNEiOOGMsFZ O3jPvxvEPunHKIJnuWCCr2gligiejtcgaEqh//9y6vnaH69JhRHCrp6y/Th1X46N Q544CVZejLf4lzCQfPZVxWHnkdwk85X9l97o72y63kPqtrMMBRc/opz3axpK8GAE YwwOHviE63ugxYfmaonU4QEH5qFKSJ6Bq7O0xRIhBp+6fIbfFzODF0i/P0b+I21z oqUat5Fvnt4t4EY88giMUki6wJhKvmAMxXYevdDKec4mvYRFywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsoz0IrQfOsZzbJKoePVzEVgL8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIwMjkzZTQtMDhmYy0z YWZhLTg2YTAtOWI5OWNmMDYyNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQGeNvhJUYJ70KAeuEHej63wb+2RfpsE1f1rD4hUmIWzCwmLsYTqdyA JaO4Vz3u/k7B8kNemkEvBVsfvnS9s9utZ4foSDhw9tCcTqiW8u9xAQMnLGHGrTpN yylQ+8QAE1SZFHYtDEvxpygJ4bFM23t0M9vP74eYUOy3NmCsCYHyvnVaQboevxZo NrUnvSYD0IA4XPTxRphxr39HLw/04mKQGs8Bu/TkVB6pEWqdT55LN0Uv1eg0sU8L JqZo2p5GpdfWVG7lyuTDLFiA3K/eHGwf/h+zPLbJOc69PRRh9B8I2JdGLgZfLovx VKil+YGOBwNwkEejqq0Ez/VxnyvkM4k= -----END CERTIFICATE-----Generated at Wed Jul 29 02:06:10 2026 by rpki-client