$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee402ae-ddcf-33ae-bebe-b15d76a9cc26.roa File: 4ee402ae-ddcf-33ae-bebe-b15d76a9cc26.roa (raw, json) Hash identifier: Q/6xzkRdTOs7I4QvSB8fpN9gmgZIEFj9qQYt4DrHoLI= Subject key identifier: A6:40:6C:7A:81:72:41:E4:7B:C1:C8:AC:EA:E0:F3:44:B8:68:05:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E16A86225B8028266100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee402ae-ddcf-33ae-bebe-b15d76a9cc26.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 70.188.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e1:6a:86:22:5b:80:28:26:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=312e55e2-89b3-475e-9aed-c62418a4a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:52:83:aa:51:dd:ca:44:5d:05:dd:95:bd: 71:c4:c6:4f:9f:2a:6c:9f:75:b4:fc:ef:86:f2:af: 8e:34:e6:97:9b:17:e9:eb:04:1e:e5:6f:35:d2:77: be:d0:62:69:6b:42:d1:1d:16:89:ce:74:80:c0:02: 22:44:a9:fb:6d:e8:26:fb:41:99:8d:6e:0b:56:c2: 2e:1f:0a:c6:d6:7d:5b:b7:d3:e0:77:f4:4e:b7:5a: 50:d1:d9:dc:30:e3:81:fe:e4:97:0f:b8:81:97:42: 2e:e8:48:df:75:4d:a9:c6:f3:34:e8:c5:2a:f0:d8: 32:22:3f:5f:a4:a7:f1:e2:18:95:d4:fe:38:da:0c: 94:04:22:1a:3b:4e:8c:17:35:bb:4b:de:76:0f:06: 39:c0:48:a0:44:4f:6e:6a:33:9c:e2:48:48:f6:c3: 4c:95:c2:5b:9e:61:fd:5a:d9:e1:1a:26:c2:53:cc: d8:73:5c:b2:2c:b3:63:db:8a:11:db:58:6d:18:a7: 6b:49:f5:a5:f8:cb:d7:02:0f:78:be:03:9a:4c:61: 30:2f:70:dd:e6:ef:11:b8:fd:51:b5:10:90:4d:7b: 2e:50:56:cc:bc:49:46:c0:c9:41:5e:79:c0:5d:fe: 7f:7b:89:7a:2a:82:88:ea:05:5c:73:ac:54:d3:f6: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:6C:7A:81:72:41:E4:7B:C1:C8:AC:EA:E0:F3:44:B8:68:05:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee402ae-ddcf-33ae-bebe-b15d76a9cc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3e:c8:76:7b:e1:d9:50:bb:10:b3:25:3b:71:bd:f7:06:a1: 8f:2d:80:80:ab:d2:47:88:ce:1e:94:ea:20:49:67:2a:ae:2f: b6:d9:11:bc:23:cb:af:76:03:85:ed:36:45:ec:7b:66:22:c7: 85:3e:20:2a:36:83:2e:9a:77:bc:fe:cb:ae:6c:8e:f2:ee:1e: 89:60:1c:e8:e1:2e:67:37:69:94:28:68:18:a2:7d:14:15:e2: c6:91:db:6c:4e:07:f6:bb:7b:70:43:41:01:07:a3:b5:a8:95: 6c:b0:e4:81:72:07:86:49:78:c3:79:32:c7:42:fd:32:f1:ba: 04:de:40:9f:2f:94:7a:73:d7:b6:28:c6:79:eb:2f:50:cf:0e: 12:64:5e:08:2d:43:32:9e:95:43:99:79:98:e3:a5:09:e4:f9: a3:7b:33:7f:55:10:e8:30:fa:60:16:0e:89:f1:aa:3a:49:24: 8f:ba:eb:bc:5d:a2:e4:2f:8c:32:4f:e1:d8:05:33:5e:6d:65: 2a:92:f3:d1:d9:3b:7e:8b:a1:49:ee:7e:15:3d:1f:67:4e:b3: 40:61:f8:fb:1c:d9:91:67:a0:90:ad:d4:dc:cd:6a:c3:73:5a: c7:b5:4c:6b:fa:c3:d6:9d:d9:5e:57:42:e4:81:45:99:82:36: c0:5d:c9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+FqhiJbgCgmYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzEyZTU1ZTItODliMy00NzVlLTlhZWQtYzYyNDE4YTRhM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZSg6pR3cpEXQXdlb1xxMZPnypsn3W0/O+G 8q+ONOaXmxfp6wQe5W810ne+0GJpa0LRHRaJznSAwAIiRKn7begm+0GZjW4LVsIu HwrG1n1bt9Pgd/ROt1pQ0dncMOOB/uSXD7iBl0Iu6EjfdU2pxvM06MUq8NgyIj9f pKfx4hiV1P442gyUBCIaO06MFzW7S952DwY5wEigRE9uajOc4khI9sNMlcJbnmH9 WtnhGibCU8zYc1yyLLNj24oR21htGKdrSfWl+MvXAg94vgOaTGEwL3Dd5u8RuP1R tRCQTXsuUFbMvElGwMlBXnnAXf5/e4l6KoKI6gVcc6xU0/btkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZAbHqBckHke8HIrOrg80S4aAXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGVlNDAyYWUtZGRjZi0z M2FlLWJlYmUtYjE1ZDc2YTljYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ+yHZ74dlQuxCzJTtxvfcGoY8tgICr0keIzh6U6iBJZyquL7bZEbwj y692A4XtNkXse2Yix4U+ICo2gy6ad7z+y65sjvLuHolgHOjhLmc3aZQoaBiifRQV 4saR22xOB/a7e3BDQQEHo7WolWyw5IFyB4ZJeMN5MsdC/TLxugTeQJ8vlHpz17Yo xnnrL1DPDhJkXggtQzKelUOZeZjjpQnk+aN7M39VEOgw+mAWDonxqjpJJI+667xd ouQvjDJP4dgFM15tZSqS89HZO36LoUnufhU9H2dOs0Bh+Psc2ZFnoJCt1NzNasNz Wse1TGv6w9ad2V5XQuSBRZmCNsBdyWY= -----END CERTIFICATE-----Generated at Wed Sep 23 03:57:39 2026 by rpki-client