$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bccd81-9812-345f-9a67-943d2f1edbe5.roa File: 16bccd81-9812-345f-9a67-943d2f1edbe5.roa (raw, json) Hash identifier: XqW8PLCtJi8eQIRSSDPcwrBtwt29lixsSPGy6GGaV3c= Subject key identifier: D5:FF:37:E2:B3:94:F2:81:E5:54:15:0E:5A:50:69:4E:75:8B:AA:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6499CB0B1DE9E30B9D78 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bccd81-9812-345f-9a67-943d2f1edbe5.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.173.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:64:99:cb:0b:1d:e9:e3:0b:9d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=d6983d4c-7c6e-424c-9ef8-2be330c415bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:76:e0:3f:4b:53:40:e8:9a:81:c4:7c:5b: 61:6e:75:57:59:2b:bf:f6:f4:44:46:e5:2a:0f:5d: 47:99:5d:34:a3:41:d7:1c:2b:9d:c1:3d:05:5e:08: 57:32:8c:c5:e8:54:cf:f4:96:92:84:9a:b7:29:09: 78:16:06:2b:36:f8:7c:17:64:5f:44:f0:fc:24:e0: 1f:96:ef:d4:cc:18:fd:01:ce:04:97:52:f1:67:7c: df:f6:48:0b:c0:7b:30:02:da:94:67:46:79:7e:b9: 65:d8:4a:b4:59:e8:1e:b5:60:f7:e2:94:e7:cd:6b: 38:92:23:a1:e5:35:8c:f5:d4:c1:53:ef:94:e0:41: 42:76:8d:8d:1c:30:ad:34:f7:d5:60:02:c7:ce:01: 5a:d8:f1:b9:51:4a:5c:7e:98:92:f1:61:1c:17:0b: 16:76:1c:45:15:0b:8f:73:11:60:8b:ca:5c:76:d3: a8:a1:b4:44:36:0d:74:e4:79:fb:08:99:25:8c:12: 33:53:98:9c:aa:8c:b4:72:d6:c8:1a:59:c5:9a:07: ab:d8:f3:d3:58:ac:e9:58:ee:cd:97:c2:9c:90:b9: ad:a9:e8:44:cf:39:33:22:ef:d0:b4:64:bc:ed:f1: 29:ee:90:5d:de:da:1c:62:c0:82:11:78:0f:c5:65: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:37:E2:B3:94:F2:81:E5:54:15:0E:5A:50:69:4E:75:8B:AA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bccd81-9812-345f-9a67-943d2f1edbe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9c:4f:70:f3:18:a3:37:0a:50:aa:63:0c:1b:a5:7d:5c:0e: 51:6b:b1:25:ef:d8:c3:b9:c7:59:8e:d8:e1:07:0a:b1:b5:a6: 92:e8:54:01:02:da:10:54:d3:d4:63:ba:45:9f:5c:8d:38:b9: 52:13:4d:00:ec:27:84:b7:d6:4a:0b:3b:7d:6a:c7:b4:10:21: 24:14:54:b7:ea:9c:a0:35:d0:3b:27:55:67:96:36:90:ce:1d: b0:93:e3:f8:21:43:f6:6a:26:56:71:cc:af:9b:d5:57:0b:3d: e3:9f:17:73:76:1b:96:c9:dc:e3:1c:be:09:b8:c1:71:e3:f2: 85:73:d2:68:4e:fe:50:95:0d:38:49:1c:1a:76:66:fd:39:3f: f1:1c:f6:26:d1:77:d4:5e:a5:7b:33:30:a1:57:72:d6:ee:3b: 8b:99:20:ee:14:26:46:6c:58:6c:fc:ce:ac:c2:e3:b9:46:ab: 9c:97:55:3a:35:6f:25:13:30:0d:2f:34:49:1f:e2:8f:33:6f: e3:3f:9e:e4:83:44:43:56:ab:36:30:15:53:52:ad:da:66:a6: 7a:f1:79:6b:0e:8e:af:0b:67:65:85:24:fb:01:c6:9c:20:a8: 11:df:14:88:da:af:3f:22:35:25:72:f9:a7:53:a0:75:7e:82: 38:ce:5d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WSZywsd6eMLnXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDY5ODNkNGMtN2M2ZS00MjRjLTllZjgtMmJlMzMwYzQxNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqR24D9LU0DomoHEfFthbnVXWSu/9vRERuUq D11HmV00o0HXHCudwT0FXghXMozF6FTP9JaShJq3KQl4FgYrNvh8F2RfRPD8JOAf lu/UzBj9Ac4El1LxZ3zf9kgLwHswAtqUZ0Z5frll2Eq0WegetWD34pTnzWs4kiOh 5TWM9dTBU++U4EFCdo2NHDCtNPfVYALHzgFa2PG5UUpcfpiS8WEcFwsWdhxFFQuP cxFgi8pcdtOoobRENg105Hn7CJkljBIzU5icqoy0ctbIGlnFmger2PPTWKzpWO7N l8KckLmtqehEzzkzIu/QtGS87fEp7pBd3tocYsCCEXgPxWUbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX/N+KzlPKB5VQVDlpQaU51i6pLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTZiY2NkODEtOTgxMi0z NDVmLTlhNjctOTQzZDJmMWVkYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAucT3DzGKM3ClCqYwwbpX1cDlFrsSXv2MO5x1mO2OEHCrG1ppLoVAEC 2hBU09RjukWfXI04uVITTQDsJ4S31koLO31qx7QQISQUVLfqnKA10DsnVWeWNpDO HbCT4/ghQ/ZqJlZxzK+b1VcLPeOfF3N2G5bJ3OMcvgm4wXHj8oVz0mhO/lCVDThJ HBp2Zv05P/Ec9ibRd9RepXszMKFXctbuO4uZIO4UJkZsWGz8zqzC47lGq5yXVTo1 byUTMA0vNEkf4o8zb+M/nuSDRENWqzYwFVNSrdpmpnrxeWsOjq8LZ2WFJPsBxpwg qBHfFIjarz8iNSVy+adToHV+gjjOXeg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:41:33 2026 by rpki-client