$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2303ec94-6667-3870-af49-4e7218b60bec.roa File: 2303ec94-6667-3870-af49-4e7218b60bec.roa (raw, json) Hash identifier: k7VIdm0n+JojgV56WJ2Vj7sQkHBKANAdyv0wq5rM0Po= Subject key identifier: 90:36:DB:FE:28:B9:00:9A:5A:B0:E6:4A:35:06:47:09:CE:62:21:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A67EA0C5A3281F045F8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2303ec94-6667-3870-af49-4e7218b60bec.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.170.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:67:ea:0c:5a:32:81:f0:45:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=eb71e396-8fd0-40d9-b1c8-a456617de37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:03:11:98:2f:cf:1c:47:52:51:90:e4:d1: 53:cf:63:79:de:e0:05:6d:48:45:3e:d7:a4:3c:c2: 5c:fa:8a:7a:9c:eb:29:fa:4b:91:ac:68:be:92:82: 08:de:6a:58:6d:8e:37:d8:00:9e:31:e5:0b:0e:a4: ef:f9:5f:b3:46:c9:5e:6e:a7:ac:27:3d:04:c5:8a: 23:c2:c8:2a:5b:ee:1f:16:e3:d4:f5:aa:9a:47:2b: 4c:c4:3d:ec:0d:c4:54:63:2c:c7:8e:ff:5c:5e:f2: d8:35:22:0f:04:c3:8b:2b:f7:f3:d7:4a:cf:70:ba: 86:33:1a:54:59:33:2b:e2:17:47:72:22:c1:5d:c3: 87:35:15:a6:d3:7e:17:1a:bd:a5:27:e0:c4:37:2d: b5:5a:a0:95:3d:d1:73:0e:4c:f0:82:f5:47:a2:bc: d9:55:a6:10:23:cb:e1:23:fb:aa:51:26:91:6f:43: e9:68:c2:35:80:e1:92:ed:9c:aa:1c:da:bf:86:a1: 36:4a:42:46:c9:22:01:5c:7e:e2:18:05:7a:e9:85: cf:0f:a8:fe:47:2b:1c:df:e5:61:c3:f3:48:24:0d: 56:45:a7:df:7a:36:56:c1:76:94:17:1f:29:d2:f9: 71:be:de:fc:97:7d:7f:dc:25:11:73:66:45:2e:72: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:36:DB:FE:28:B9:00:9A:5A:B0:E6:4A:35:06:47:09:CE:62:21:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2303ec94-6667-3870-af49-4e7218b60bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2d:57:30:4e:b3:5e:27:1e:51:7e:13:f8:e2:a9:fa:ec:a5: 39:70:ac:7e:e3:91:f6:9f:f2:6a:55:36:c2:ee:df:cb:7d:b9: 2b:c4:cb:ce:e8:84:2a:3e:42:02:55:de:84:ab:a7:8a:e6:e2: 65:54:de:ab:34:54:76:cb:f5:9b:e2:ef:6a:22:ac:0b:8b:97: 1a:ce:b9:99:2d:32:ac:04:87:a4:5e:b5:e8:98:88:3e:6f:ea: af:18:86:6c:24:04:01:ec:4e:0d:98:54:73:83:6e:19:73:b6: 83:00:e8:cc:7c:d2:cb:8f:4e:0f:ff:8a:41:da:50:3f:67:cf: 98:61:59:67:0a:62:94:51:17:17:b9:fd:ac:d9:55:36:41:15: 37:8a:22:0d:f5:d5:75:96:a7:38:ee:77:12:b8:d5:16:7d:0a: 7b:b0:6e:c4:61:a1:2b:df:06:c5:75:d4:30:60:82:2f:54:83: 82:c4:ea:09:c0:80:38:3d:7c:64:5c:6d:5c:77:f1:4c:a9:fb: 18:77:77:7c:6a:c4:75:2b:61:cd:bf:60:ab:9d:c8:0c:fd:1c: 00:c8:5f:e2:19:f0:e0:b6:f3:3c:c1:62:54:b3:8e:a1:76:4a: 70:ed:9e:39:e5:35:0e:05:3d:47:88:12:d4:eb:c3:25:9c:68: cb:19:3b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hemfqDFoygfBF+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZWI3MWUzOTYtOGZkMC00MGQ5LWIxYzgtYTQ1NjYxN2RlMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxADEZgvzxxHUlGQ5NFTz2N53uAFbUhFPtek PMJc+op6nOsp+kuRrGi+koII3mpYbY432ACeMeULDqTv+V+zRslebqesJz0ExYoj wsgqW+4fFuPU9aqaRytMxD3sDcRUYyzHjv9cXvLYNSIPBMOLK/fz10rPcLqGMxpU WTMr4hdHciLBXcOHNRWm034XGr2lJ+DENy21WqCVPdFzDkzwgvVHorzZVaYQI8vh I/uqUSaRb0PpaMI1gOGS7ZyqHNq/hqE2SkJGySIBXH7iGAV66YXPD6j+Rysc3+Vh w/NIJA1WRaffejZWwXaUFx8p0vlxvt78l31/3CURc2ZFLnK2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA22/4ouQCaWrDmSjUGRwnOYiFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMwM2VjOTQtNjY2Ny0z ODcwLWFmNDktNGU3MjE4YjYwYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwtVzBOs14nHlF+E/jiqfrspTlwrH7jkfaf8mpVNsLu38t9uSvEy87o hCo+QgJV3oSrp4rm4mVU3qs0VHbL9Zvi72oirAuLlxrOuZktMqwEh6ReteiYiD5v 6q8YhmwkBAHsTg2YVHODbhlztoMA6Mx80suPTg//ikHaUD9nz5hhWWcKYpRRFxe5 /azZVTZBFTeKIg311XWWpzjudxK41RZ9CnuwbsRhoSvfBsV11DBggi9Ug4LE6gnA gDg9fGRcbVx38Uyp+xh3d3xqxHUrYc2/YKudyAz9HADIX+IZ8OC28zzBYlSzjqF2 SnDtnjnlNQ4FPUeIEtTrwyWcaMsZO9A= -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:14 2026 by rpki-client