$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa File: 221ee8af-67af-39f0-8880-44845100db4f.roa (raw, json) Hash identifier: 8wgS3DHyIP+kGZLWekkTK5m9M1E4O5N/wDD1AvYqqXQ= Subject key identifier: 5F:0C:7B:02:F4:59:DD:D0:71:A1:E8:CB:B9:5A:6B:E9:71:93:99:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32F2F03406C94D3BCB4400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f2:f0:34:06:c9:4d:3b:cb:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=cf66f8cb-1b80-48e1-89d0-6ba34dad3445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:7f:db:e3:f7:9b:0f:33:22:48:14:25:d7: f5:86:49:08:9e:e0:60:ef:6b:4f:44:fd:6f:39:e7: 3f:3a:21:2a:58:a0:69:4c:c5:74:cd:1e:26:d3:8b: 15:00:3e:91:d2:10:27:86:fc:bd:29:73:be:2c:e9: d4:99:f5:e2:88:47:0a:87:0a:c8:40:ec:88:49:f7: 70:cf:03:e8:2f:d8:b5:29:6f:20:f1:d2:75:df:07: 76:39:dd:95:10:ee:65:c4:eb:c2:09:ba:7f:25:9a: b9:d2:78:8b:f9:67:4e:83:49:cf:ef:97:6c:51:f0: 85:fc:8f:4c:37:89:d0:ba:8b:80:f2:8c:6b:db:55: cb:bb:e3:27:a8:7f:b6:d0:39:d6:fa:8e:28:77:f1: 61:6a:99:ef:42:63:9b:4f:15:e6:6e:4d:c8:0b:5b: dc:5e:9a:86:b4:65:f7:45:bb:7a:37:67:36:15:65: 11:3b:10:c6:87:23:ea:0d:52:b9:38:2f:6c:bd:95: 9f:3d:89:42:84:49:70:89:97:f6:3c:17:94:2b:ad: 6e:1d:0b:a9:33:93:88:a9:d8:81:9e:28:a2:4b:3c: b5:9e:bc:b8:50:c7:73:7c:50:9f:da:57:8b:c6:2a: a0:18:09:4b:0a:b2:04:9b:f9:d4:6d:bf:cd:bd:ff: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:7B:02:F4:59:DD:D0:71:A1:E8:CB:B9:5A:6B:E9:71:93:99:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:16:d7:4d:b3:34:b8:42:b5:e3:44:bb:af:d9:b7:1d:0f:18: 24:cd:ed:05:0f:2b:69:3e:c8:15:23:1c:ec:e5:a6:8b:e6:17: 5a:30:e5:d2:8e:56:b7:4c:d9:56:66:de:c4:3f:f6:fe:be:0f: da:87:42:1e:3c:cd:0d:a1:5c:26:68:59:ed:e3:02:3c:db:d3: d0:b9:e5:67:d6:1a:2d:08:a3:a6:cb:5f:d5:c8:a3:7d:37:80: 81:f5:7d:02:8a:04:f0:49:e3:73:8c:42:86:f4:94:62:f4:0d: 5d:44:4b:8a:41:a3:41:ff:91:cc:38:f0:a8:9e:1e:46:2e:ee: 37:36:fc:47:11:f8:4b:dc:48:64:81:5a:79:22:df:cd:33:a8: b4:1e:df:8f:ae:69:8e:02:9e:42:cc:66:1b:9d:d5:70:ef:44: 34:05:85:f4:c4:3d:08:a5:fe:a2:97:89:16:8e:0c:d6:1b:c7: bc:c2:55:d3:31:f0:53:b1:7a:b4:5d:5d:1e:75:2f:c8:bb:57: af:b7:c6:e0:35:14:01:4b:ce:ec:52:38:a3:ae:7a:dc:2d:c5: f7:b0:b1:fc:f9:be:4e:03:58:0c:57:c3:f4:20:d6:50:49:c9: 35:48:bc:c4:e5:9c:87:cb:af:7a:a2:ab:d4:f9:a3:fc:25:45: 33:fc:19:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvLwNAbJTTvLRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y2NmY4Y2ItMWI4MC00OGUxLTg5ZDAtNmJhMzRkYWQzNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uF/2+P3mw8zIkgUJdf1hkkInuBg72tPRP1v Oec/OiEqWKBpTMV0zR4m04sVAD6R0hAnhvy9KXO+LOnUmfXiiEcKhwrIQOyISfdw zwPoL9i1KW8g8dJ13wd2Od2VEO5lxOvCCbp/JZq50niL+WdOg0nP75dsUfCF/I9M N4nQuouA8oxr21XLu+MnqH+20DnW+o4od/FhapnvQmObTxXmbk3IC1vcXpqGtGX3 Rbt6N2c2FWUROxDGhyPqDVK5OC9svZWfPYlChElwiZf2PBeUK61uHQupM5OIqdiB niiiSzy1nry4UMdzfFCf2leLxiqgGAlLCrIEm/nUbb/Nvf+eHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8MewL0Wd3QcaHoy7laa+lxk5mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxZWU4YWYtNjdhZi0z OWYwLTg4ODAtNDQ4NDUxMDBkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkW102zNLhCteNEu6/Ztx0PGCTN7QUPK2k+yBUjHOzlpovmF1ow5dKO VrdM2VZm3sQ/9v6+D9qHQh48zQ2hXCZoWe3jAjzb09C55WfWGi0Io6bLX9XIo303 gIH1fQKKBPBJ43OMQob0lGL0DV1ES4pBo0H/kcw48KieHkYu7jc2/EcR+EvcSGSB Wnki380zqLQe34+uaY4CnkLMZhud1XDvRDQFhfTEPQil/qKXiRaODNYbx7zCVdMx 8FOxerRdXR51L8i7V6+3xuA1FAFLzuxSOKOuetwtxfewsfz5vk4DWAxXw/Qg1lBJ yTVIvMTlnIfLr3qiq9T5o/wlRTP8GTc= -----END CERTIFICATE-----Generated at Sat Oct 10 10:06:48 2026 by rpki-client