$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa File: 4084f464-2ceb-37d8-8e41-49511dffd9ab.roa (raw, json) Hash identifier: u9AxP5XQA5infDJ320uomI5QoeoOTjhqFwoxceCDSkw= Subject key identifier: 20:CA:53:23:ED:E6:EA:92:71:11:71:94:60:5C:10:FA:01:CC:4D:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A8145B64CA4070772EF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.189.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:81:45:b6:4c:a4:07:07:72:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=b944054c-bb06-46bc-8642-f8ad783db14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:7a:69:75:00:a6:05:3e:41:b6:61:5a:a6: a3:07:43:9b:e6:7e:e1:f6:82:ad:9e:12:5b:d7:4b: b6:d6:b0:fa:71:f9:ea:09:76:93:e0:b3:be:0f:3e: 0e:23:ca:8f:94:fe:23:42:db:7c:1c:2d:b3:ac:2c: c7:b0:e2:d0:85:13:d3:8e:65:59:75:92:54:d5:99: 72:37:b1:b7:33:fd:e8:52:d5:fc:dd:99:f3:63:e9: 41:49:70:5e:e2:08:ef:84:4b:1f:79:a7:35:43:41: 93:77:8b:35:ca:20:f9:12:9d:1a:58:a8:1d:0a:84: c8:52:fa:a4:55:2d:60:99:c1:8a:05:1b:91:48:7b: 08:0e:d3:3a:76:60:0b:76:e6:f7:2c:55:7d:cb:87: 41:ba:e7:8c:c0:fd:93:17:98:34:be:42:7a:2b:4b: d3:fb:0b:9c:a3:5b:87:5f:2c:ff:14:74:3f:b7:82: 01:3d:3c:3f:1d:bf:30:9c:34:af:ab:e4:36:8e:0d: d4:4b:c2:d1:20:38:b8:81:cd:75:b5:da:d9:bd:9e: 98:f9:3f:2b:6a:0e:23:92:a6:11:6b:9d:cd:64:ac: 8f:fa:e9:95:31:d6:4b:d2:9f:02:38:52:74:50:0f: d9:8d:ec:f0:f9:fe:60:36:c1:9a:50:d2:83:ed:20: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CA:53:23:ED:E6:EA:92:71:11:71:94:60:5C:10:FA:01:CC:4D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c1:26:78:c7:d1:63:75:67:b5:bc:2c:26:93:17:47:8a:0f: ef:3d:c4:1b:4d:e9:35:63:2b:d8:b9:74:bc:cd:b0:66:24:53: 56:70:8c:9e:db:56:0f:58:af:8b:9a:7c:b7:4f:07:f7:3d:b7: 9c:f3:dd:3a:ef:53:4c:60:9a:f5:a2:c6:30:f8:e9:a7:da:16: 06:df:8c:e6:b1:c0:8e:bd:29:f6:fc:5f:a9:60:a4:73:a5:4e: 4d:b2:4a:05:1a:8d:d0:2c:d5:51:f1:ce:3a:bd:a8:5f:ef:6a: 65:ec:16:ed:f7:d0:4b:de:91:af:79:e8:b4:aa:e6:fd:b5:12: 2a:bc:43:49:68:08:0e:bd:1a:4b:ff:35:fa:9a:35:57:74:72: ac:54:aa:fc:86:ca:d8:9e:97:09:02:5e:3a:d7:3a:2e:0b:22: fd:4e:cb:c8:ee:b2:f5:cf:2c:25:45:69:65:81:78:44:08:8a: c1:b2:86:cf:1c:22:06:c5:4f:6e:91:72:01:f4:ac:84:32:fe: 4b:7c:4d:b2:4e:3a:53:57:e2:81:29:a2:91:92:3c:4f:80:23: e0:e6:c4:9f:72:75:30:b8:b6:32:f2:2f:65:64:cd:87:e7:69: ac:5d:2a:b6:9b:84:44:72:c7:d9:31:e7:df:e1:10:1f:ff:95: 2b:ab:16:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heoFFtkykBwdy74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk Yjk0NDA1NGMtYmIwNi00NmJjLTg2NDItZjhhZDc4M2RiMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhox6aXUApgU+QbZhWqajB0Ob5n7h9oKtnhJb 10u21rD6cfnqCXaT4LO+Dz4OI8qPlP4jQtt8HC2zrCzHsOLQhRPTjmVZdZJU1Zly N7G3M/3oUtX83ZnzY+lBSXBe4gjvhEsfeac1Q0GTd4s1yiD5Ep0aWKgdCoTIUvqk VS1gmcGKBRuRSHsIDtM6dmALdub3LFV9y4dBuueMwP2TF5g0vkJ6K0vT+wuco1uH Xyz/FHQ/t4IBPTw/Hb8wnDSvq+Q2jg3US8LRIDi4gc11tdrZvZ6Y+T8rag4jkqYR a53NZKyP+umVMdZL0p8COFJ0UA/Zjezw+f5gNsGaUNKD7SC8JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDKUyPt5uqScRFxlGBcEPoBzE0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDA4NGY0NjQtMmNlYi0z N2Q4LThlNDEtNDk1MTFkZmZkOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbBJnjH0WN1Z7W8LCaTF0eKD+89xBtN6TVjK9i5dLzNsGYkU1ZwjJ7b Vg9Yr4uafLdPB/c9t5zz3TrvU0xgmvWixjD46afaFgbfjOaxwI69Kfb8X6lgpHOl Tk2ySgUajdAs1VHxzjq9qF/vamXsFu330Eveka956LSq5v21Eiq8Q0loCA69Gkv/ NfqaNVd0cqxUqvyGytielwkCXjrXOi4LIv1Oy8jusvXPLCVFaWWBeEQIisGyhs8c IgbFT26RcgH0rIQy/kt8TbJOOlNX4oEpopGSPE+AI+DmxJ9ydTC4tjLyL2VkzYfn aaxdKrabhERyx9kx59/hEB//lSurFp4= -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:19 2026 by rpki-client