$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ffd432-0686-38e3-a1a6-8c472f769591.roa File: 28ffd432-0686-38e3-a1a6-8c472f769591.roa (raw, json) Hash identifier: TZjRWAf+RL7tnsl8u3FzQ3FKh5XUx13ezlOPLH2DrJw= Subject key identifier: 00:2F:A9:65:50:4A:05:03:3B:8B:42:EF:AA:AE:1E:20:F9:2A:8B:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA7870AB0DE95070F6BAE8500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ffd432-0686-38e3-a1a6-8c472f769591.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22773 IP address blocks: 70.160.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:0a:b0:de:95:07:0f:6b:ae:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a240f76-177c-4ec3-9ff1-841efd7a078d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:40:c2:71:4b:e5:c1:15:e4:fb:b1:6c:93: d4:b1:6c:d0:fa:e9:eb:7d:19:b8:73:2f:ef:92:9c: 21:c4:1c:a3:c4:93:a5:68:71:2d:bd:df:1d:13:4f: af:92:c6:eb:30:3e:40:59:9a:70:55:b9:77:d3:13: 5d:91:f8:4b:f4:6f:e9:ae:9f:84:18:bb:bf:b9:e8: 8e:dd:81:5d:e8:dd:7f:34:4c:b4:f8:54:53:b5:0a: 06:2b:b4:6d:ae:d7:33:70:10:b6:9a:5f:d4:cb:06: 42:ad:ef:1d:a5:1f:44:75:ad:84:32:1c:5e:e6:75: cc:37:c8:78:8f:5d:28:c0:3e:14:43:73:bd:cb:6f: 65:6d:81:6e:21:41:f3:81:0d:98:9d:ba:14:2d:8e: 0a:01:3a:c5:86:1d:8d:84:de:90:4b:d3:c6:39:80: d1:f8:aa:23:29:c0:5b:2f:71:ff:cb:21:1d:87:e6: 7b:89:b2:a6:52:f2:5a:10:a5:48:8e:65:e7:3a:b3: 24:30:70:2a:a1:e1:17:d2:3e:f5:94:f5:ef:77:c8: cd:6b:06:56:86:ca:f9:ec:1b:a3:e9:63:d0:11:c1: 6c:23:0e:ce:50:88:ea:22:e8:54:3a:4c:23:fc:09: a9:d9:0d:55:12:7e:0c:28:32:36:9a:5b:33:c0:98: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2F:A9:65:50:4A:05:03:3B:8B:42:EF:AA:AE:1E:20:F9:2A:8B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ffd432-0686-38e3-a1a6-8c472f769591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7c:21:1b:0c:c2:2d:df:03:4c:c6:68:a2:37:e9:5b:3a:ee: 11:2c:fe:f0:44:65:44:02:83:9f:ca:8c:46:16:ba:69:da:fc: 8e:c0:36:06:e7:de:97:1f:15:88:bd:cd:53:d5:d8:a8:f5:c5: 18:80:61:4c:ae:82:82:79:c9:a6:4d:3a:b2:e6:94:50:a2:7d: 56:aa:65:72:57:e0:cd:5c:f8:34:40:af:d6:73:3d:ed:18:1d: 4a:de:91:15:f8:94:f1:f7:d1:b9:be:6e:52:49:b7:da:6a:9e: ee:83:39:1e:98:6d:20:5f:5a:c8:3b:45:81:5f:14:13:e4:38: 55:43:df:ef:13:8e:1f:59:c8:84:07:da:0f:6e:c1:60:49:93: 91:9f:a2:da:33:25:81:b1:81:83:c0:34:a1:94:90:9a:3b:56: 4b:35:c7:c0:9a:ab:58:9d:f0:ac:4a:7d:00:fb:c4:6f:6c:53: bf:0d:4d:5d:be:dd:ca:0d:00:1c:32:8a:1d:c4:a0:2e:b2:11: 2c:f1:a2:0d:1b:c1:b5:a0:e5:aa:a8:78:ef:4c:0e:9a:38:2c: 11:65:15:25:ec:6b:94:23:14:fd:7f:65:72:88:83:2f:bf:9b: a8:77:81:40:08:1c:5e:62:c3:0a:9d:0b:da:17:6d:6a:5e:43: 9d:6b:88:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwqw3pUHD2uuhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGEyNDBmNzYtMTc3Yy00ZWMzLTlmZjEtODQxZWZkN2EwNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPxAwnFL5cEV5PuxbJPUsWzQ+unrfRm4cy/v kpwhxByjxJOlaHEtvd8dE0+vksbrMD5AWZpwVbl30xNdkfhL9G/prp+EGLu/ueiO 3YFd6N1/NEy0+FRTtQoGK7RtrtczcBC2ml/UywZCre8dpR9Eda2EMhxe5nXMN8h4 j10owD4UQ3O9y29lbYFuIUHzgQ2YnboULY4KATrFhh2NhN6QS9PGOYDR+KojKcBb L3H/yyEdh+Z7ibKmUvJaEKVIjmXnOrMkMHAqoeEX0j71lPXvd8jNawZWhsr57Buj 6WPQEcFsIw7OUIjqIuhUOkwj/Amp2Q1VEn4MKDI2mlszwJh3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAvqWVQSgUDO4tC76quHiD5Kot2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmZmQ0MzItMDY4Ni0z OGUzLWExYTYtOGM0NzJmNzY5NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqBSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN8IRsMwi3fA0zGaKI36Vs67hEs/vBEZUQCg5/KjEYWumna/I7ANgbn 3pcfFYi9zVPV2Kj1xRiAYUyugoJ5yaZNOrLmlFCifVaqZXJX4M1c+DRAr9ZzPe0Y HUrekRX4lPH30bm+blJJt9pqnu6DOR6YbSBfWsg7RYFfFBPkOFVD3+8Tjh9ZyIQH 2g9uwWBJk5GfotozJYGxgYPANKGUkJo7Vks1x8Caq1id8KxKfQD7xG9sU78NTV2+ 3coNABwyih3EoC6yESzxog0bwbWg5aqoeO9MDpo4LBFlFSXsa5QjFP1/ZXKIgy+/ m6h3gUAIHF5iwwqdC9oXbWpeQ51riPA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:58:32 2026 by rpki-client