$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa File: 2c289e55-f642-3025-b60e-b5d58f65be69.roa (raw, json) Hash identifier: PQBq6xZtQmW8UqtsRR+BkOeyPhU1wIBwGfFS+adQvlY= Subject key identifier: AF:D6:4F:71:A5:0C:22:5A:49:D7:9E:D5:89:B0:C2:CC:48:B0:9E:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A1D4BC17918DB4349F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.176.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a1:d4:bc:17:91:8d:b4:34:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=5004916c-716b-4ff9-9438-69f885901c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:52:b6:85:e6:65:6b:cc:f4:5d:1a:d8:78: db:72:5e:bc:7b:fd:41:c4:cf:3e:5b:cc:3a:d5:69: ff:44:4c:34:8d:02:84:1d:a7:29:82:13:3f:2d:4f: 5e:83:54:ff:cd:61:30:07:df:c6:64:f7:0a:68:1b: 5d:c2:46:0b:91:62:ca:b5:bb:a2:fd:db:7c:14:d6: 82:b4:12:82:b9:8f:0d:f7:80:1d:f3:f8:78:92:55: b2:2f:ae:e4:79:47:b2:23:97:fb:2a:9a:3b:15:70: f4:78:30:40:a0:22:48:65:85:74:17:01:bd:0a:dc: d6:cc:e9:66:37:9a:62:5b:4a:36:20:aa:77:b9:b8: 1b:73:e5:05:62:27:7c:b8:15:54:37:4a:c7:f0:97: fb:04:a0:70:59:65:68:9f:ce:91:27:15:99:79:1b: 5e:f9:c0:c2:26:13:d1:f4:26:55:00:59:65:28:7c: 3e:dc:bc:a1:98:39:3e:9d:a0:9a:ca:16:24:1c:3a: 3c:0d:02:6c:80:5e:cd:30:26:90:f2:f2:47:6a:45: 80:64:f9:fe:26:1b:ac:91:a8:74:c5:72:72:b7:bc: 92:ca:bd:11:d5:b5:f7:50:ec:31:6a:09:fc:a0:b3: a1:89:50:3f:59:8c:99:63:ce:c3:07:ce:2c:58:63: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D6:4F:71:A5:0C:22:5A:49:D7:9E:D5:89:B0:C2:CC:48:B0:9E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4b:6e:b1:ac:e8:bd:c3:97:5d:8c:c4:40:1b:ea:6c:0e:f9: 5d:c8:3d:96:14:7f:35:4b:35:af:5e:d5:0c:75:cd:96:fc:ac: f4:2e:37:e1:f5:b6:64:a6:93:04:84:05:20:9f:da:34:ae:a7: 64:ea:0e:7a:f8:ad:8f:ec:cd:dc:d2:17:5c:42:27:47:30:ef: 85:2e:4f:fb:aa:ea:a1:e9:9b:05:cf:d1:d9:a3:6d:aa:20:ff: ce:f4:2c:b5:6f:1e:03:03:5c:dc:d6:5f:03:53:43:f4:6e:25: 98:4d:af:0b:6b:ee:89:37:61:df:4d:98:19:e1:24:33:b3:9c: b4:bb:b1:f2:97:99:34:7b:54:0a:0d:ef:60:3a:3f:b4:20:f2: d5:e4:0f:37:25:8f:27:ff:38:59:2d:64:3f:d3:47:c8:95:04: f0:27:00:5f:1b:b5:72:b9:21:a7:b4:75:c0:e4:94:29:fb:25: 3d:3d:e1:e3:64:fd:58:9b:14:1a:0d:0f:99:ba:7b:36:10:1b: e1:1e:49:fa:1b:c5:f7:9d:9e:9f:77:dd:ca:8e:aa:94:30:0c: c9:b2:c9:fd:aa:9a:97:c1:1d:af:83:c8:62:2e:13:97:f8:52: 88:ba:94:be:3d:85:34:0d:89:33:64:7d:a8:b8:33:3f:28:2e: 9b:1b:50:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqHUvBeRjbQ0nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTAwNDkxNmMtNzE2Yi00ZmY5LTk0MzgtNjlmODg1OTAxYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tlStoXmZWvM9F0a2Hjbcl68e/1BxM8+W8w6 1Wn/REw0jQKEHacpghM/LU9eg1T/zWEwB9/GZPcKaBtdwkYLkWLKtbui/dt8FNaC tBKCuY8N94Ad8/h4klWyL67keUeyI5f7Kpo7FXD0eDBAoCJIZYV0FwG9CtzWzOlm N5piW0o2IKp3ubgbc+UFYid8uBVUN0rH8Jf7BKBwWWVon86RJxWZeRte+cDCJhPR 9CZVAFllKHw+3LyhmDk+naCayhYkHDo8DQJsgF7NMCaQ8vJHakWAZPn+Jhuskah0 xXJyt7ySyr0R1bX3UOwxagn8oLOhiVA/WYyZY87DB84sWGPxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/WT3GlDCJaSdee1YmwwsxIsJ6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmMyODllNTUtZjY0Mi0z MDI1LWI2MGUtYjVkNThmNjViZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVLbrGs6L3Dl12MxEAb6mwO+V3IPZYUfzVLNa9e1Qx1zZb8rPQuN+H1 tmSmkwSEBSCf2jSup2TqDnr4rY/szdzSF1xCJ0cw74UuT/uq6qHpmwXP0dmjbaog /870LLVvHgMDXNzWXwNTQ/RuJZhNrwtr7ok3Yd9NmBnhJDOznLS7sfKXmTR7VAoN 72A6P7Qg8tXkDzcljyf/OFktZD/TR8iVBPAnAF8btXK5Iae0dcDklCn7JT094eNk /VibFBoND5m6ezYQG+EeSfobxfednp933cqOqpQwDMmyyf2qmpfBHa+DyGIuE5f4 Uoi6lL49hTQNiTNkfai4Mz8oLpsbUP4= -----END CERTIFICATE-----Generated at Mon Sep 28 11:07:34 2026 by rpki-client