$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d42b404-4a6b-3c3f-a954-7863d03a53e7.roa File: 2d42b404-4a6b-3c3f-a954-7863d03a53e7.roa (raw, json) Hash identifier: 9d4hyPGo1E3gczzpM5WId84AcNE+MaSQzOhkaVFAISo= Subject key identifier: F8:F8:B3:6F:00:97:67:93:88:4A:C0:61:7F:CB:87:50:64:83:61:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A917EBDF753E4471A6000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d42b404-4a6b-3c3f-a954-7863d03a53e7.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.173.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:91:7e:bd:f7:53:e4:47:1a:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=9f5c714f-2419-418a-a141-aa076e6c6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:06:85:b6:9a:64:68:6c:b1:72:11:c2:87:d9: b9:0c:82:b9:be:e1:e3:e2:5f:a2:d3:5e:eb:9f:9a: 7d:20:25:fa:8f:45:04:dd:82:4d:a5:eb:50:3d:4b: 18:f1:99:a8:cc:37:ad:d1:01:90:49:4d:72:33:bb: 9f:41:a1:14:06:66:0f:c6:7e:60:c3:fc:42:dc:24: 4e:77:63:e4:db:bd:77:28:23:e9:61:83:1f:a8:90: 91:10:ea:f6:88:5a:3a:a6:d8:a4:b3:f8:78:cc:88: 3a:80:2c:1d:2f:a9:77:91:7e:3b:78:98:07:d4:5a: 5a:17:71:b2:56:65:3d:2b:51:08:d3:68:17:d6:99: 5a:69:32:61:53:e5:83:7e:e0:48:35:47:27:44:51: 7d:2b:c4:b7:60:47:ac:ca:3e:e0:61:7b:68:d3:a9: 5a:60:bb:c7:7e:55:cf:96:b7:d6:8c:7c:da:05:5d: 28:c0:a8:72:dd:c2:46:f8:7a:49:a1:a9:6e:04:01: 27:02:13:41:76:70:1b:e6:0d:04:5f:cf:66:ff:8f: 33:2e:dd:13:71:44:bf:e9:6f:78:9f:1b:67:79:51: 73:30:67:a9:1d:2c:42:e1:4c:fe:27:b5:6b:6c:3d: f2:5a:30:c8:c9:57:61:fc:85:da:56:c2:ad:89:d7: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:B3:6F:00:97:67:93:88:4A:C0:61:7F:CB:87:50:64:83:61:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d42b404-4a6b-3c3f-a954-7863d03a53e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:83:3b:fb:db:69:75:7b:e7:65:a0:8e:ea:b8:0c:0b:4d:8d: b5:a3:ab:c3:c2:59:2a:66:4a:5f:78:3a:95:07:75:fc:1b:a2: 33:54:b3:46:da:13:66:09:55:33:25:84:94:a7:4f:89:0a:85: 07:da:2e:2d:a3:f2:29:05:67:53:03:3b:cb:95:e4:27:86:01: 7f:87:40:3f:8a:f7:95:a1:ea:c7:bc:08:e7:4a:7f:ec:2c:34: 36:50:cb:aa:16:39:bc:f2:ed:49:5b:18:2d:32:69:43:90:b6: 21:e0:e5:ca:8d:8c:6d:39:3f:71:00:d3:de:74:fd:48:f8:af: f2:0b:6c:21:1a:38:21:ed:31:ea:0d:51:f9:73:47:ae:b2:20: c8:2e:5f:8a:00:92:29:16:ba:50:53:4e:a0:26:3d:42:91:ca: 12:81:78:b0:5b:c5:78:46:2c:17:62:41:37:3c:47:f4:62:d5: b9:64:06:f0:51:da:01:cb:39:00:71:fb:f6:20:90:27:c0:29: 86:46:dd:de:50:0c:a6:62:a8:5f:68:7b:16:81:00:63:4a:6f: 91:5b:4b:32:9e:d1:b0:e6:83:3b:cc:39:d3:f8:0d:68:d1:7c: f5:3e:d3:7a:31:7e:37:29:65:2f:3a:78:af:e9:c8:52:37:72: f1:f0:c9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hepF+vfdT5EcaYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk OWY1YzcxNGYtMjQxOS00MThhLWExNDEtYWEwNzZlNmM2MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAaFtppkaGyxchHCh9m5DIK5vuHj4l+i017r n5p9ICX6j0UE3YJNpetQPUsY8ZmozDet0QGQSU1yM7ufQaEUBmYPxn5gw/xC3CRO d2Pk2713KCPpYYMfqJCREOr2iFo6ptiks/h4zIg6gCwdL6l3kX47eJgH1FpaF3Gy VmU9K1EI02gX1plaaTJhU+WDfuBINUcnRFF9K8S3YEesyj7gYXto06laYLvHflXP lrfWjHzaBV0owKhy3cJG+HpJoaluBAEnAhNBdnAb5g0EX89m/48zLt0TcUS/6W94 nxtneVFzMGepHSxC4Uz+J7VrbD3yWjDIyVdh/IXaVsKtidfK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj4s28Al2eTiErAYX/Lh1Bkg2FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ0MmI0MDQtNGE2Yi0z YzNmLWE5NTQtNzg2M2QwM2E1M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq2XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6DO/vbaXV752Wgjuq4DAtNjbWjq8PCWSpmSl94OpUHdfwbojNUs0ba E2YJVTMlhJSnT4kKhQfaLi2j8ikFZ1MDO8uV5CeGAX+HQD+K95Wh6se8COdKf+ws NDZQy6oWObzy7UlbGC0yaUOQtiHg5cqNjG05P3EA0950/Uj4r/ILbCEaOCHtMeoN UflzR66yIMguX4oAkikWulBTTqAmPUKRyhKBeLBbxXhGLBdiQTc8R/Ri1blkBvBR 2gHLOQBx+/YgkCfAKYZG3d5QDKZiqF9oexaBAGNKb5FbSzKe0bDmgzvMOdP4DWjR fPU+03oxfjcpZS86eK/pyFI3cvHwyeM= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:56 2026 by rpki-client