$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42103e93-072c-3f5d-998e-e1ddf544692c.roa File: 42103e93-072c-3f5d-998e-e1ddf544692c.roa (raw, json) Hash identifier: 3kaohneLv4uA6VDsWttNAZ6hZUQtu0YpxjYh+BpMVxo= Subject key identifier: 03:80:6E:73:A7:CB:06:09:D9:6E:E9:0D:EB:71:1D:CC:D8:64:C8:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3335C82BE873247099C380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42103e93-072c-3f5d-998e-e1ddf544692c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.188.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:35:c8:2b:e8:73:24:70:99:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3f7f64fb-3502-445c-8515-42cca85380ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:4b:f0:80:20:8d:d9:a2:5f:5f:24:25:59: 57:d3:3a:96:e4:4a:30:a7:84:bb:4f:09:ad:f2:c5: 63:09:0c:1f:93:a0:32:5e:10:4c:52:12:44:40:92: 1a:88:67:f2:8d:c5:18:1d:24:c7:d3:59:7b:90:cf: e7:c4:e3:80:e5:5b:94:2e:b5:03:8b:4f:b0:2c:81: 8d:aa:90:e7:a6:f8:39:51:09:d9:d1:ff:15:2c:1a: 5d:8e:91:b0:eb:c7:17:ab:c7:1c:fd:dd:8c:66:30: 87:74:97:9d:9e:3c:30:99:4e:13:ae:1b:1f:77:2b: bb:17:0e:b8:e0:24:3d:32:9d:08:c2:9a:33:a3:f0: 8d:33:6b:a0:74:d2:f8:47:39:c7:a7:3b:e9:0f:b0: 11:1e:01:a4:56:98:25:f0:7d:04:eb:4e:59:6f:28: c0:ca:76:80:75:29:08:33:be:46:ff:4e:ba:33:e3: 09:c4:c4:f1:33:ff:47:ec:82:76:0c:4e:54:1a:56: 0c:d7:02:20:4d:7f:e2:e2:ae:42:a5:96:db:f2:6e: 60:3c:a1:ad:76:0b:a2:86:8a:7c:d1:a9:05:14:c1: da:35:ea:83:b4:9b:fa:63:de:ea:58:4a:25:c4:a7: ce:f0:e2:39:68:3a:8b:f5:79:e4:e6:9d:42:ce:1b: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:80:6E:73:A7:CB:06:09:D9:6E:E9:0D:EB:71:1D:CC:D8:64:C8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42103e93-072c-3f5d-998e-e1ddf544692c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2a:7a:eb:86:84:13:23:2d:6b:ce:ae:c6:0f:22:af:1e:c9: 4a:31:00:85:09:57:45:c4:93:8d:de:27:fe:77:c4:c1:4c:db: 82:1b:1a:a3:d4:b4:9d:83:7a:e1:a6:fd:ca:44:05:15:a2:5e: a3:f1:01:ae:23:0c:2f:86:03:ba:2d:5a:3a:6d:37:2b:c0:7c: 89:59:01:ec:16:e9:81:2a:29:91:b2:5f:62:26:d4:41:84:93: 70:9d:b4:1d:c7:35:8b:04:fa:87:1f:50:f6:f6:8b:45:10:d9: 1c:1f:4b:92:60:49:04:2c:83:e9:9e:e9:6a:3b:da:99:2b:da: de:e6:9d:24:53:32:d9:e4:7b:44:94:58:be:06:bb:98:0e:aa: c3:eb:2d:21:cb:32:a1:b9:32:07:ae:4f:bc:27:de:dd:4d:15: 29:bb:33:b5:aa:2e:0a:58:6a:76:bf:f7:d2:f9:bb:0e:ea:f5: e3:b7:cc:66:c2:03:44:05:80:fb:9c:36:e4:6e:bc:c3:bd:21: 83:13:30:73:22:f7:28:52:02:18:fa:4c:c7:a3:e1:7e:8d:df: 22:e3:ee:32:0a:90:eb:1c:2c:4e:e2:31:15:b5:85:d4:0b:13: 66:59:b1:1a:a8:da:e5:d6:91:0d:63:24:cf:82:aa:13:74:08: ab:64:ca:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzXIK+hzJHCZw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y3ZjY0ZmItMzUwMi00NDVjLTg1MTUtNDJjY2E4NTM4MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvRL8IAgjdmiX18kJVlX0zqW5Eowp4S7Twmt 8sVjCQwfk6AyXhBMUhJEQJIaiGfyjcUYHSTH01l7kM/nxOOA5VuULrUDi0+wLIGN qpDnpvg5UQnZ0f8VLBpdjpGw68cXq8cc/d2MZjCHdJednjwwmU4Trhsfdyu7Fw64 4CQ9Mp0Iwpozo/CNM2ugdNL4RznHpzvpD7ARHgGkVpgl8H0E605ZbyjAynaAdSkI M75G/066M+MJxMTxM/9H7IJ2DE5UGlYM1wIgTX/i4q5CpZbb8m5gPKGtdguihop8 0akFFMHaNeqDtJv6Y97qWEolxKfO8OI5aDqL9Xnk5p1CzhtT/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOAbnOnywYJ2W7pDetxHczYZMi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDIxMDNlOTMtMDcyYy0z ZjVkLTk5OGUtZTFkZGY1NDQ2OTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRryAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8qeuuGhBMjLWvOrsYPIq8eyUoxAIUJV0XEk43eJ/53xMFM24IbGqPU tJ2DeuGm/cpEBRWiXqPxAa4jDC+GA7otWjptNyvAfIlZAewW6YEqKZGyX2Im1EGE k3CdtB3HNYsE+ocfUPb2i0UQ2RwfS5JgSQQsg+me6Wo72pkr2t7mnSRTMtnke0SU WL4Gu5gOqsPrLSHLMqG5MgeuT7wn3t1NFSm7M7WqLgpYana/99L5uw7q9eO3zGbC A0QFgPucNuRuvMO9IYMTMHMi9yhSAhj6TMej4X6N3yLj7jIKkOscLE7iMRW1hdQL E2ZZsRqo2uXWkQ1jJM+CqhN0CKtkykI= -----END CERTIFICATE-----Generated at Thu Nov 5 09:35:57 2026 by rpki-client