$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8e2f72-f62d-3df4-8657-03a71ec2eeee.roa File: 2a8e2f72-f62d-3df4-8657-03a71ec2eeee.roa (raw, json) Hash identifier: mAyCsHUZx6t73cOHNOPn21+J+zvWqiNlnSI2Di5ULrA= Subject key identifier: 3B:2F:21:60:1D:F7:9A:62:10:D0:31:53:0E:2F:41:17:C3:3E:78:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A8C292EA59596CD436E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8e2f72-f62d-3df4-8657-03a71ec2eeee.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.189.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:8c:29:2e:a5:95:96:cd:43:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=0307e016-7679-424b-8922-93e7fdb6c311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:41:6b:00:7f:7d:64:d6:f4:f8:1a:ab:c5: 6b:11:6a:1f:7a:eb:7e:6c:19:c6:42:81:7c:ec:65: 02:ec:dd:60:ba:ea:05:3a:37:bb:d8:2d:b3:85:c0: 40:7c:5e:90:71:06:af:9e:96:5d:c7:26:5f:d3:99: ba:66:79:8a:40:ba:e4:4b:74:6b:5a:b2:c1:a0:8e: 0d:e1:3a:c3:6c:db:4e:0e:94:4b:d8:e9:95:c7:43: ca:b1:79:2e:4c:3b:ce:2c:6c:12:03:56:b0:7f:4b: 32:c3:0c:c8:aa:ab:8b:f6:47:b4:0d:3e:0d:7c:4a: fc:7c:dd:f9:f2:c0:87:1a:46:28:c0:44:7d:11:26: 4e:60:90:6c:76:bf:5a:9d:b0:2b:00:57:ad:03:3d: cc:38:e8:14:c4:b3:33:b7:84:ef:3e:1b:c2:7d:cc: 1a:e8:ef:36:32:dc:45:78:50:b1:30:13:d3:7f:c9: 29:a2:75:3a:44:9d:03:58:24:43:20:95:34:66:77: ce:c0:1e:00:21:4d:fa:c7:8a:13:30:5e:5f:aa:82: 9c:28:ae:40:53:3c:6e:e9:b4:eb:7f:a6:b5:6c:46: e3:aa:87:a8:62:ca:ff:07:65:37:7e:47:4c:7f:3f: 3a:1d:68:9c:6b:33:91:b5:61:53:b9:1b:f7:b3:25: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2F:21:60:1D:F7:9A:62:10:D0:31:53:0E:2F:41:17:C3:3E:78:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8e2f72-f62d-3df4-8657-03a71ec2eeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:38:ad:13:c4:a3:03:4c:80:bd:ea:fc:a8:65:b6:4b:ed:f5: 2c:78:6a:a8:7d:c1:59:fb:04:d1:21:53:25:bb:ec:de:31:89: a8:e7:7a:ea:e7:12:d7:a3:e7:eb:f6:3f:a7:64:df:57:fe:6f: 85:83:ae:c7:c4:dc:f0:92:c9:3e:af:1b:26:d0:b5:ad:07:1d: c1:75:d1:3d:19:b3:27:0b:18:98:a4:a4:c7:21:a5:5f:18:ae: 83:73:35:ff:16:16:bc:a4:3b:30:b1:7c:27:00:7c:aa:d2:a9: 29:9b:aa:7e:5d:b8:88:69:33:0c:a7:6d:77:25:e6:37:2a:f2: 36:78:ad:82:d6:df:a2:40:00:38:9d:3a:08:43:f6:0a:9d:34: bd:10:82:50:f8:f6:67:3a:7e:81:32:2a:33:7f:8d:1f:b0:ad: f1:bd:df:6c:63:71:25:f7:ad:9e:86:e1:34:ef:e1:61:53:9d: ad:9f:15:da:cb:23:ca:02:33:a6:89:87:f2:0a:bd:5e:7d:89: a1:99:40:04:e9:d8:64:65:df:6e:6d:bd:f6:77:b5:3f:22:71: dd:97:7f:d9:d7:3e:13:0e:53:6b:81:60:5a:38:d5:ba:08:d6: 2a:e6:55:20:85:09:41:de:5e:4e:f9:d4:d9:70:36:ab:55:ce: 64:65:04:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heowpLqWVls1DbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk MDMwN2UwMTYtNzY3OS00MjRiLTg5MjItOTNlN2ZkYjZjMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMdBawB/fWTW9Pgaq8VrEWofeut+bBnGQoF8 7GUC7N1guuoFOje72C2zhcBAfF6QcQavnpZdxyZf05m6ZnmKQLrkS3RrWrLBoI4N 4TrDbNtODpRL2OmVx0PKsXkuTDvOLGwSA1awf0sywwzIqquL9ke0DT4NfEr8fN35 8sCHGkYowER9ESZOYJBsdr9anbArAFetAz3MOOgUxLMzt4TvPhvCfcwa6O82MtxF eFCxMBPTf8kponU6RJ0DWCRDIJU0ZnfOwB4AIU36x4oTMF5fqoKcKK5AUzxu6bTr f6a1bEbjqoeoYsr/B2U3fkdMfz86HWicazORtWFTuRv3syWoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsvIWAd95piENAxUw4vQRfDPnhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmE4ZTJmNzItZjYyZC0z ZGY0LTg2NTctMDNhNzFlYzJlZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU4rRPEowNMgL3q/Khltkvt9Sx4aqh9wVn7BNEhUyW77N4xiajneurn Etej5+v2P6dk31f+b4WDrsfE3PCSyT6vGybQta0HHcF10T0ZsycLGJikpMchpV8Y roNzNf8WFrykOzCxfCcAfKrSqSmbqn5duIhpMwynbXcl5jcq8jZ4rYLW36JAADid OghD9gqdNL0QglD49mc6foEyKjN/jR+wrfG932xjcSX3rZ6G4TTv4WFTna2fFdrL I8oCM6aJh/IKvV59iaGZQATp2GRl325tvfZ3tT8icd2Xf9nXPhMOU2uBYFo41boI 1irmVSCFCUHeXk751NlwNqtVzmRlBFw= -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:16 2026 by rpki-client