$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e87084f-d485-3ec0-94e9-0b251ca7df2e.roa File: 5e87084f-d485-3ec0-94e9-0b251ca7df2e.roa (raw, json) Hash identifier: Uk1HBGzkrYXN9f0AfPyMec0ilh0u08xiWDe6Iqq2U2U= Subject key identifier: 11:DB:8D:20:31:8D:E6:1A:04:4E:6B:4C:2B:49:DF:C4:2C:AC:46:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112B01142D6F230C76D4F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e87084f-d485-3ec0-94e9-0b251ca7df2e.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b0:11:42:d6:f2:30:c7:6d:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=6b172a0b-67ef-4b6c-9b4e-200b32c0b006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:49:5d:60:d1:74:b6:14:c0:8c:bf:29:cd:67: c1:5e:28:f4:20:ab:f3:c9:6e:dd:7d:d6:03:18:f0: 91:3d:09:ac:18:85:a7:60:40:84:29:cb:9c:b9:2b: 84:70:03:ba:df:8f:27:23:94:a2:57:9c:d5:18:4b: a1:53:a2:ca:19:d6:d5:ca:c0:b3:6b:4a:2d:28:bd: 0d:f1:5a:f9:31:bf:b8:19:c9:e2:ba:fa:9f:ae:bd: 55:c4:06:5e:a4:45:a5:c7:47:a4:c1:00:65:b7:c3: e6:5c:4a:f5:99:a5:da:a0:c8:e4:09:d7:7f:27:79: 16:1f:65:e7:3e:a3:57:0c:5d:82:e7:78:7d:76:78: d0:48:6f:ce:d9:52:5c:54:c4:29:e9:b9:3a:d6:c8: f7:0e:72:a0:03:58:7a:ff:af:d8:9d:49:68:b4:f6: b3:1d:14:aa:3b:f8:bf:f2:92:0d:76:e1:28:5b:ab: bd:4c:71:2b:2e:a1:b3:4a:ea:b1:b2:a3:d2:77:e4: 7a:d9:9a:3f:ab:62:66:d1:a6:be:c9:8d:b9:af:ac: d2:10:1b:7c:cf:e9:8a:99:ad:d5:0b:71:20:10:eb: ce:75:ec:53:9d:66:fc:79:4f:0d:c4:b3:37:13:d0: ce:a9:b0:26:f1:4e:e5:8e:d8:aa:59:8e:f6:5e:0f: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:8D:20:31:8D:E6:1A:04:4E:6B:4C:2B:49:DF:C4:2C:AC:46:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e87084f-d485-3ec0-94e9-0b251ca7df2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:05:7c:f9:a2:7b:e6:ee:81:eb:33:0c:fe:7a:c7:3a:4e:8d: c1:d1:27:5d:a4:aa:b1:06:e5:09:3c:46:b3:23:79:da:ca:c4: 3b:a0:80:1e:bd:97:19:1c:98:ea:58:f0:db:e4:2d:e4:3c:6f: fc:65:31:11:6b:bf:b8:ba:6f:4a:75:e1:6e:08:f1:b6:c3:eb: d0:34:a6:25:96:89:c6:f7:81:b4:c6:36:e8:90:c3:94:d9:f8: 23:9a:59:ac:78:ad:67:23:25:5d:11:9f:76:87:ab:8a:8a:1c: ed:68:93:fa:e7:8f:ba:6b:20:e2:75:df:61:ef:72:4f:fb:74: b4:b0:07:54:d8:79:3c:3e:16:68:00:d7:1c:47:97:28:2e:d1: 7c:f3:c7:6e:28:98:1b:b5:b5:61:b5:15:79:d4:2f:23:85:1d: 7d:93:5c:78:43:8c:96:4b:7c:7c:75:60:b4:a0:0a:df:b2:78: cb:20:99:32:49:f6:e8:98:d6:30:9e:d5:f9:05:c4:89:8c:bf: ca:5e:8c:f8:d6:cc:6d:7a:51:fa:ed:15:c6:ba:44:f9:e9:d0: 69:83:0a:77:af:ee:cb:5f:88:7e:ec:3b:82:66:75:7b:9b:63: b1:5b:a5:17:b7:16:d3:fa:d2:6d:10:a8:f7:20:41:4b:9f:f4: f0:a7:49:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErARQtbyMMdtT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmIxNzJhMGItNjdlZi00YjZjLTliNGUtMjAwYjMyYzBiMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEldYNF0thTAjL8pzWfBXij0IKvzyW7dfdYD GPCRPQmsGIWnYECEKcucuSuEcAO6348nI5SiV5zVGEuhU6LKGdbVysCza0otKL0N 8Vr5Mb+4Gcniuvqfrr1VxAZepEWlx0ekwQBlt8PmXEr1maXaoMjkCdd/J3kWH2Xn PqNXDF2C53h9dnjQSG/O2VJcVMQp6bk61sj3DnKgA1h6/6/YnUlotPazHRSqO/i/ 8pINduEoW6u9THErLqGzSuqxsqPSd+R62Zo/q2Jm0aa+yY25r6zSEBt8z+mKma3V C3EgEOvOdexTnWb8eU8NxLM3E9DOqbAm8U7ljtiqWY72Xg+mtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHbjSAxjeYaBE5rTCtJ38QsrEaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWU4NzA4NGYtZDQ4NS0z ZWMwLTk0ZTktMGIyNTFjYTdkZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0FfPmie+bugeszDP56xzpOjcHRJ12kqrEG5Qk8RrMjedrKxDuggB69 lxkcmOpY8NvkLeQ8b/xlMRFrv7i6b0p14W4I8bbD69A0piWWicb3gbTGNuiQw5TZ +COaWax4rWcjJV0Rn3aHq4qKHO1ok/rnj7prIOJ132Hvck/7dLSwB1TYeTw+FmgA 1xxHlygu0Xzzx24omBu1tWG1FXnULyOFHX2TXHhDjJZLfHx1YLSgCt+yeMsgmTJJ 9uiY1jCe1fkFxImMv8pejPjWzG16UfrtFca6RPnp0GmDCnev7stfiH7sO4JmdXub Y7FbpRe3FtP60m0QqPcgQUuf9PCnSZ8= -----END CERTIFICATE-----Generated at Thu Nov 5 11:55:42 2026 by rpki-client