$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447a0aa6-bc88-3711-bdec-678f9699e720.roa File: 447a0aa6-bc88-3711-bdec-678f9699e720.roa (raw, json) Hash identifier: XrsEA56WFeoJilFewXmFmpANHs5Ctgy2wq3mj0saWvU= Subject key identifier: 85:F4:6D:EA:AB:C3:0A:83:11:24:5F:9A:30:9E:52:ED:23:22:C4:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112E159902B173EC666580C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447a0aa6-bc88-3711-bdec-678f9699e720.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.163.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:e1:59:90:2b:17:3e:c6:66:58:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=bf22670e-11fe-4342-a220-611cf2d186d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:53:5f:2a:6b:0e:b5:e5:1e:a3:b5:58:c0: 22:60:94:30:98:06:12:d9:0d:e5:01:f6:2f:01:19: b5:ac:04:88:da:af:ac:18:33:e3:a7:45:be:c2:39: 21:90:0b:fa:80:91:26:19:16:71:b4:0e:60:a9:0b: b2:82:c6:ee:d4:af:1d:a6:9d:e3:04:23:ce:e2:f7: a8:a0:31:c4:85:38:e9:93:f1:2d:c0:27:e7:bf:69: b4:4a:32:55:64:a3:f3:e0:58:b1:31:46:77:47:74: dc:4d:05:87:ae:6b:03:72:21:54:1d:29:5f:e5:0e: 6d:da:9a:49:4c:75:e7:39:04:75:d8:cb:10:76:be: fe:cd:11:b5:cc:38:74:5c:af:83:59:af:c0:b5:ce: d8:35:da:bd:f0:78:37:87:8e:9b:0b:74:24:3a:08: c3:d6:ae:de:02:0a:f9:60:66:c2:be:d6:96:bc:92: 64:be:28:86:ee:95:b2:fe:da:8f:19:dd:89:7b:47: dd:8e:aa:a0:3e:47:49:7f:15:56:7c:8d:5d:71:11: d4:4a:b8:a8:2b:e2:35:b8:5f:cc:e1:7a:e3:75:23: 3d:a7:2a:6b:3b:c0:3b:cc:b3:21:17:b5:de:a0:d7: 6d:8a:5f:15:98:c8:5e:27:6e:36:a6:b4:14:05:22: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:6D:EA:AB:C3:0A:83:11:24:5F:9A:30:9E:52:ED:23:22:C4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447a0aa6-bc88-3711-bdec-678f9699e720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:df:af:c4:8a:91:c9:e5:47:f9:bb:2e:ee:28:2c:d2:53:9c: a7:34:9a:66:f1:bd:28:b3:8d:80:cd:06:91:c2:d2:19:54:ee: dd:4f:5f:84:2b:fc:d6:f6:bd:ac:99:e3:46:0b:41:29:5e:6f: e5:7c:f3:17:1e:b3:16:bd:20:78:2d:8a:3a:7e:2e:7b:f2:23: 81:4c:f0:a7:b4:75:5d:df:86:76:68:be:0c:14:61:99:79:1f: 86:9f:25:7e:b9:41:ca:46:ec:92:8d:19:ae:69:b5:8e:97:52: 05:e0:66:59:ba:b0:50:5d:1a:63:9a:90:de:7c:c2:95:53:d3: 43:71:e2:33:63:87:cc:49:ba:1c:57:92:d0:58:43:0f:11:8e: 2a:d2:db:3e:22:d9:aa:e6:80:aa:9e:73:c4:22:63:30:81:e0: ac:55:6a:85:48:65:03:34:57:02:e3:68:de:25:4b:a2:92:c5: b9:5c:90:1f:66:45:ae:f3:1f:1d:e0:b5:c8:6e:5d:2f:f8:a8: d9:34:70:af:7e:1c:77:22:65:2f:9d:8b:2d:83:56:43:a8:23: 17:1b:b0:ad:96:d8:39:bd:d8:ad:34:dc:a5:91:a0:b2:6b:0b: f9:da:ed:45:8f:80:36:af:32:ed:c3:75:76:33:6a:7f:a7:c9: 82:65:be:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEuFZkCsXPsZmWAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YmYyMjY3MGUtMTFmZS00MzQyLWEyMjAtNjExY2YyZDE4NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmRTXyprDrXlHqO1WMAiYJQwmAYS2Q3lAfYv ARm1rASI2q+sGDPjp0W+wjkhkAv6gJEmGRZxtA5gqQuygsbu1K8dpp3jBCPO4veo oDHEhTjpk/EtwCfnv2m0SjJVZKPz4FixMUZ3R3TcTQWHrmsDciFUHSlf5Q5t2ppJ THXnOQR12MsQdr7+zRG1zDh0XK+DWa/Atc7YNdq98Hg3h46bC3QkOgjD1q7eAgr5 YGbCvtaWvJJkviiG7pWy/tqPGd2Je0fdjqqgPkdJfxVWfI1dcRHUSrioK+I1uF/M 4XrjdSM9pyprO8A7zLMhF7XeoNdtil8VmMheJ242prQUBSJy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX0beqrwwqDESRfmjCeUu0jIsQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQ3YTBhYTYtYmM4OC0z NzExLWJkZWMtNjc4Zjk2OTllNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDfr8SKkcnlR/m7Lu4oLNJTnKc0mmbxvSizjYDNBpHC0hlU7t1PX4Qr /Nb2vayZ40YLQSleb+V88xcesxa9IHgtijp+LnvyI4FM8Ke0dV3fhnZovgwUYZl5 H4afJX65QcpG7JKNGa5ptY6XUgXgZlm6sFBdGmOakN58wpVT00Nx4jNjh8xJuhxX ktBYQw8RjirS2z4i2armgKqec8QiYzCB4KxVaoVIZQM0VwLjaN4lS6KSxblckB9m Ra7zHx3gtchuXS/4qNk0cK9+HHciZS+diy2DVkOoIxcbsK2W2Dm92K003KWRoLJr C/na7UWPgDavMu3DdXYzan+nyYJlviU= -----END CERTIFICATE-----Generated at Tue Sep 22 10:42:15 2026 by rpki-client