$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa File: 2aa97c3d-3754-3e18-ad66-0856ce43a922.roa (raw, json) Hash identifier: BQdTqkAB4d72791/l2QeMOfa3VwWAbzLlzH1p0h1lv8= Subject key identifier: D7:8F:AC:63:69:A9:C5:8F:95:0C:AB:D7:52:37:EF:48:20:83:B2:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A785E312841C2F598F680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.189.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:78:5e:31:28:41:c2:f5:98:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=d3a16b9f-ae05-4e01-85bb-1590330d04c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e4:da:19:15:76:eb:0d:6f:b9:61:ba:13:55: 5f:26:06:4d:a2:9e:75:5f:3d:1e:a3:88:de:a4:c4: c2:51:4e:01:20:b6:25:69:14:e4:db:ec:19:61:89: 74:3f:63:54:18:fe:24:51:8d:66:f0:51:47:6f:7e: 8c:26:52:83:09:af:43:2d:6a:78:12:93:ea:52:47: ab:f8:2b:29:b3:bf:1a:a4:e5:96:b4:ce:ce:28:4f: 25:e0:4f:00:b5:67:cd:2f:74:1b:9f:36:c5:f0:15: bd:21:00:80:2e:be:ff:03:b8:cc:4d:49:30:dd:f0: 71:8d:4e:4c:85:67:9e:4a:57:df:93:f3:a6:07:04: 26:de:28:3e:42:bc:f5:d2:b5:5c:51:68:31:29:8b: 19:6d:14:81:f1:52:26:4e:e5:d0:85:a7:83:2c:1c: 99:68:77:a5:40:42:ca:07:25:f5:15:63:7b:cb:57: ff:28:bd:31:bf:0c:fb:67:0a:b5:28:28:1a:a0:37: 8a:dc:09:41:e2:bf:4b:c0:a0:87:a0:ce:f5:02:47: 17:e2:32:8f:e6:a0:63:a1:fa:d3:21:b8:61:6a:7c: c4:1c:4e:df:6f:65:ca:39:9d:dc:b2:50:77:a4:0b: 38:58:ce:ee:63:c2:67:75:eb:0d:8d:84:ae:bd:0f: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8F:AC:63:69:A9:C5:8F:95:0C:AB:D7:52:37:EF:48:20:83:B2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fa:8f:77:fe:e1:d9:04:5b:9a:1c:e1:a8:8c:11:75:9e:98: bf:c3:36:30:7e:08:c9:62:c1:fc:ed:ce:e2:46:79:52:6d:da: b1:78:52:c3:28:83:23:41:17:ba:63:40:cb:96:4b:06:56:46: bf:73:6e:68:03:c3:fd:31:62:4b:d6:b6:b4:71:54:87:cd:5e: 5b:a5:5b:66:4b:ef:de:72:04:60:78:84:50:0b:7b:b3:c8:b9: 13:d5:b9:64:1f:a0:08:b2:08:c9:b6:3c:5a:42:0d:31:6c:15: 5c:c3:47:8c:f9:f1:27:44:01:c5:e2:5e:7d:63:0d:1a:a0:ce: c3:48:97:0a:d1:a1:85:0b:1a:aa:a8:ec:1a:7d:85:40:99:4c: b7:d4:0e:99:be:71:6a:9f:2a:04:25:af:e9:9f:4b:c1:4b:d3: 90:0b:8a:94:bc:c8:26:59:aa:50:c5:1e:3e:87:b6:4a:3b:ff: 9a:17:99:7a:d8:aa:d5:da:53:38:99:ee:a2:5b:b3:ec:e5:91: f7:01:2f:c6:bf:12:df:1f:49:6e:26:e6:74:9a:60:55:bd:59: 36:62:62:95:1c:c4:5a:ad:ea:34:62:72:ae:78:eb:60:4e:cf: d9:b1:65:fd:95:05:15:7b:74:4f:a4:45:2f:b1:c2:34:1d:8a: f1:a6:4e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6henheMShBwvWY9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZDNhMTZiOWYtYWUwNS00ZTAxLTg1YmItMTU5MDMzMGQwNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOTaGRV26w1vuWG6E1VfJgZNop51Xz0eo4je pMTCUU4BILYlaRTk2+wZYYl0P2NUGP4kUY1m8FFHb36MJlKDCa9DLWp4EpPqUker +Csps78apOWWtM7OKE8l4E8AtWfNL3QbnzbF8BW9IQCALr7/A7jMTUkw3fBxjU5M hWeeSlffk/OmBwQm3ig+Qrz10rVcUWgxKYsZbRSB8VImTuXQhaeDLByZaHelQELK ByX1FWN7y1f/KL0xvwz7Zwq1KCgaoDeK3AlB4r9LwKCHoM71AkcX4jKP5qBjofrT IbhhanzEHE7fb2XKOZ3cslB3pAs4WM7uY8JndesNjYSuvQ8G2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNePrGNpqcWPlQyr11I370ggg7IRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhOTdjM2QtMzc1NC0z ZTE4LWFkNjYtMDg1NmNlNDNhOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD6j3f+4dkEW5oc4aiMEXWemL/DNjB+CMliwfztzuJGeVJt2rF4UsMo gyNBF7pjQMuWSwZWRr9zbmgDw/0xYkvWtrRxVIfNXlulW2ZL795yBGB4hFALe7PI uRPVuWQfoAiyCMm2PFpCDTFsFVzDR4z58SdEAcXiXn1jDRqgzsNIlwrRoYULGqqo 7Bp9hUCZTLfUDpm+cWqfKgQlr+mfS8FL05ALipS8yCZZqlDFHj6Htko7/5oXmXrY qtXaUziZ7qJbs+zlkfcBL8a/Et8fSW4m5nSaYFW9WTZiYpUcxFqt6jRicq5462BO z9mxZf2VBRV7dE+kRS+xwjQdivGmToY= -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:46 2026 by rpki-client