$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa File: 23777efa-a298-3c7e-a51e-d0679fa4e63d.roa (raw, json) Hash identifier: yMhBPprjPA/uB8lDmgflXEQvP7Npl1Zj1cB6Si+rcBs= Subject key identifier: E9:C1:45:7D:5A:E7:06:57:67:10:CF:FE:5E:41:FE:B8:1A:67:ED:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0151A431052FCCC0E69D8E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 70.190.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:1a:43:10:52:fc:cc:0e:69:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=21b9b271-0c95-48e4-a8b8-9f3efbbcb0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:14:5f:26:57:11:19:8c:cf:8a:68:4b:90:88: 5a:35:c4:cf:99:50:e9:4c:4c:c1:15:83:75:a8:6c: b6:91:98:4a:6e:2f:84:9d:58:67:76:94:5f:9d:58: f5:d5:20:dc:4e:a3:b4:5e:36:17:79:71:4a:68:7e: c6:91:cb:27:6d:fa:0e:3a:02:d4:31:8c:b4:30:d1: 5f:b1:7c:5c:4f:36:dc:80:38:2c:e8:c2:07:55:fc: a5:c0:34:89:6f:27:5a:7b:86:5b:ec:df:2b:fb:ad: 65:e7:e6:14:90:0b:4f:c7:70:5c:e7:48:06:98:93: f9:3f:a4:6b:14:3d:71:97:93:e5:9e:31:70:2a:61: 25:45:a8:f5:9e:c4:96:d2:46:36:4b:6c:c6:5a:68: d3:aa:aa:40:d1:ec:85:06:e4:32:3f:57:2e:98:41: 5f:bf:b3:24:67:e6:b6:65:0f:a8:90:44:7a:b8:c9: 1e:9c:f9:fb:45:93:56:a7:94:50:58:cb:17:7c:95: 30:6e:a5:38:e2:bc:08:59:6e:27:96:6e:7e:9d:95: 80:01:fa:26:3b:7f:71:e7:df:45:05:85:9c:85:94: ce:a8:70:6f:2f:5c:02:c4:26:8a:b0:55:91:6f:8e: a5:08:7c:35:e7:76:7b:47:13:85:d5:d8:bc:c7:dc: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:45:7D:5A:E7:06:57:67:10:CF:FE:5E:41:FE:B8:1A:67:ED:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0c:7c:29:37:1c:00:11:f4:f1:e1:88:18:81:f9:1a:a0:c9: 50:1f:a4:62:53:64:3a:d0:2c:98:20:1a:c1:45:2c:0a:22:dc: 92:71:2a:0f:53:e9:6f:1a:4f:73:dc:5a:92:57:de:80:58:3e: 50:4d:19:d9:b5:d2:de:e1:6b:92:76:0a:4d:73:a6:05:7f:21: 0a:91:3c:95:86:b1:89:95:40:a0:0d:0a:c5:78:fb:97:fb:c1: 83:cc:3d:cf:1a:ff:dc:18:eb:ba:6e:81:d5:82:9f:47:94:ed: c7:7c:97:d9:47:c2:f9:ae:f3:a0:ae:0e:24:5a:cb:3a:64:5e: 09:7a:54:3a:e7:80:e0:52:d4:40:32:09:e6:a9:c7:4f:e6:b4: af:37:1d:62:9c:1f:5d:96:19:dc:9d:a9:7a:ee:8c:a1:4b:c7: a1:72:84:16:5e:48:c2:fe:01:17:a9:49:ff:bd:80:d8:4f:4b: 49:cc:c9:f6:c8:3e:47:49:25:a6:c8:16:5e:16:a0:5a:9c:4e: f2:b9:2f:08:55:12:5d:41:90:3e:04:ec:4c:97:36:aa:11:90: 0c:68:f6:51:87:ab:c4:4b:79:ef:ef:71:65:bb:e8:25:bd:43: 56:f8:45:cf:c5:2f:40:e5:d2:76:32:63:ec:b9:dc:2b:16:13: 15:50:0e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFRpDEFL8zA5p2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MjFiOWIyNzEtMGM5NS00OGU0LWE4YjgtOWYzZWZiYmNiMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBRfJlcRGYzPimhLkIhaNcTPmVDpTEzBFYN1 qGy2kZhKbi+EnVhndpRfnVj11SDcTqO0XjYXeXFKaH7GkcsnbfoOOgLUMYy0MNFf sXxcTzbcgDgs6MIHVfylwDSJbydae4Zb7N8r+61l5+YUkAtPx3Bc50gGmJP5P6Rr FD1xl5PlnjFwKmElRaj1nsSW0kY2S2zGWmjTqqpA0eyFBuQyP1cumEFfv7MkZ+a2 ZQ+okER6uMkenPn7RZNWp5RQWMsXfJUwbqU44rwIWW4nlm5+nZWAAfomO39x599F BYWchZTOqHBvL1wCxCaKsFWRb46lCHw153Z7RxOF1di8x9wOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnBRX1a5wZXZxDP/l5B/rgaZ+2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjM3NzdlZmEtYTI5OC0z YzdlLWE1MWUtZDA2NzlmYTRlNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgMfCk3HAAR9PHhiBiB+RqgyVAfpGJTZDrQLJggGsFFLAoi3JJxKg9T 6W8aT3PcWpJX3oBYPlBNGdm10t7ha5J2Ck1zpgV/IQqRPJWGsYmVQKANCsV4+5f7 wYPMPc8a/9wY67pugdWCn0eU7cd8l9lHwvmu86CuDiRayzpkXgl6VDrngOBS1EAy Ceapx0/mtK83HWKcH12WGdydqXrujKFLx6FyhBZeSML+ARepSf+9gNhPS0nMyfbI PkdJJabIFl4WoFqcTvK5LwhVEl1BkD4E7EyXNqoRkAxo9lGHq8RLee/vcWW76CW9 Q1b4Rc/FL0Dl0nYyY+y53CsWExVQDqM= -----END CERTIFICATE-----Generated at Tue Jul 28 21:37:14 2026 by rpki-client