$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa File: 1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa (raw, json) Hash identifier: 8LuQZfu/grIZMqrj3Ht17uv+8FKGfkdU7V+sSZWVfSc= Subject key identifier: 6F:6C:B7:5E:D3:0C:39:31:73:65:16:A8:46:19:02:96:13:D0:53:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09772D8FDE018B7B730CF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.170.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:72:d8:fd:e0:18:b7:b7:30:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=71649c20-b661-41ef-846b-86a8f3aabb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:11:c6:d4:76:9a:16:fd:83:17:71:75:3d: 4c:f3:2f:b4:88:9b:6d:1e:25:c0:44:90:7d:64:7d: 3d:ea:d0:56:ba:b7:4d:90:d7:42:77:6e:e8:e9:36: 50:c2:cb:fe:3f:dd:d1:f1:4b:07:78:06:8e:a5:89: c8:f8:f7:6f:1b:ca:ed:2d:8b:fa:a9:a1:62:5b:ef: a5:98:8a:b8:46:9b:e0:67:54:22:11:2a:ad:6c:b5: c0:f4:b2:6c:aa:95:80:b3:56:4e:47:54:db:58:bc: 7b:d8:30:f8:70:9a:99:cb:c7:d5:d9:b2:44:32:96: 34:e0:dc:d0:b8:c7:1a:39:3b:c4:42:b9:0c:73:21: 9f:70:72:1e:23:44:43:42:8a:8b:32:bf:a4:65:7b: e2:0b:6f:b8:85:47:8c:f4:dd:2c:50:39:ef:6c:53: 56:c4:74:07:a0:0f:21:22:67:2b:ee:a2:8c:c7:f3: 23:e9:6f:bb:e6:46:71:43:e0:df:35:a5:29:a3:5c: 27:6e:28:6e:0c:b8:01:8f:17:57:97:f7:76:c7:c6: a2:da:fb:69:30:a4:05:f1:40:da:9e:9e:c2:78:e4: ea:2a:9d:0a:24:62:b9:ff:cc:0f:9b:f5:46:78:a9: a8:54:7d:5b:af:d5:a2:39:e2:2c:e4:79:58:21:8d: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:B7:5E:D3:0C:39:31:73:65:16:A8:46:19:02:96:13:D0:53:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:04:85:46:48:58:b0:03:b3:49:26:67:c0:d2:20:9b:b6:fd: 77:4e:75:1f:c2:38:28:76:ea:c1:c9:ba:53:84:07:93:e2:c0: 8f:f3:17:82:79:a3:ba:23:80:aa:78:f0:3d:b8:bf:37:c3:d6: e7:00:67:04:2a:d8:0a:a2:88:d1:5c:4b:e7:bf:4d:24:73:e0: a1:e4:40:53:5d:da:7f:8f:e1:7b:f6:a6:2c:8d:19:98:a7:82: a2:81:9f:eb:b2:6e:2e:a2:40:2c:bf:68:4d:cd:ed:78:f6:3f: 5b:cb:a5:8a:af:23:07:fd:4b:65:70:07:37:31:04:69:f2:2f: cd:02:c1:9f:b2:2f:e2:35:24:07:f7:d3:71:b3:8e:86:f0:81: 46:3f:84:b4:99:30:ec:4e:b9:9f:b3:08:c2:50:f0:52:a0:0c: 87:34:49:08:16:64:73:dd:c5:e8:28:4d:f2:d8:f3:cf:39:01: a2:f2:68:11:3e:a4:77:fb:23:fd:f9:2b:4b:2a:b1:99:bd:d3: b9:5a:18:47:07:f9:bb:e9:63:74:60:38:d9:50:a3:2f:37:52: 1a:54:86:41:27:da:40:01:98:c8:70:82:f4:15:8b:a4:ad:30: 4a:c4:60:97:f4:7b:82:32:3b:eb:90:a4:e1:78:57:c8:ee:db: 14:0c:e9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3LY/eAYt7cwz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NzE2NDljMjAtYjY2MS00MWVmLTg0NmItODZhOGYzYWFiYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl8RxtR2mhb9gxdxdT1M8y+0iJttHiXARJB9 ZH096tBWurdNkNdCd27o6TZQwsv+P93R8UsHeAaOpYnI+PdvG8rtLYv6qaFiW++l mIq4RpvgZ1QiESqtbLXA9LJsqpWAs1ZOR1TbWLx72DD4cJqZy8fV2bJEMpY04NzQ uMcaOTvEQrkMcyGfcHIeI0RDQoqLMr+kZXviC2+4hUeM9N0sUDnvbFNWxHQHoA8h Imcr7qKMx/Mj6W+75kZxQ+DfNaUpo1wnbihuDLgBjxdXl/d2x8ai2vtpMKQF8UDa np7CeOTqKp0KJGK5/8wPm/VGeKmoVH1br9WiOeIs5HlYIY2uYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9st17TDDkxc2UWqEYZApYT0FPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWE5ZDA5YWMtNWFlYS0z OTkwLWE0MzgtYmRiMmIyZTNkNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwEhUZIWLADs0kmZ8DSIJu2/XdOdR/COCh26sHJulOEB5PiwI/zF4J5 o7ojgKp48D24vzfD1ucAZwQq2AqiiNFcS+e/TSRz4KHkQFNd2n+P4Xv2piyNGZin gqKBn+uybi6iQCy/aE3N7Xj2P1vLpYqvIwf9S2VwBzcxBGnyL80CwZ+yL+I1JAf3 03GzjobwgUY/hLSZMOxOuZ+zCMJQ8FKgDIc0SQgWZHPdxegoTfLY8885AaLyaBE+ pHf7I/35K0sqsZm907laGEcH+bvpY3RgONlQoy83UhpUhkEn2kABmMhwgvQVi6St MErEYJf0e4IyO+uQpOF4V8ju2xQM6fA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:39 2026 by rpki-client