$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6875905a-9aa4-31a8-a9be-e9aceda58f9b.roa File: 6875905a-9aa4-31a8-a9be-e9aceda58f9b.roa (raw, json) Hash identifier: P5OpoAClUDUxxb+aMMSdn1BvLZAEEl2IfzxexTlFNeM= Subject key identifier: 49:29:20:FB:8F:13:C8:89:73:15:6F:17:58:01:C9:FB:8E:7E:E9:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A8A307EDDEF2A363D600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6875905a-9aa4-31a8-a9be-e9aceda58f9b.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.171.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a8:a3:07:ed:de:f2:a3:63:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4a41dbf1-d7eb-49d4-b22a-1d083d4f156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:f3:e4:6b:0a:7c:64:73:6d:c5:5d:2a:6d: 01:2e:e5:dc:f8:81:71:18:48:c8:65:9c:f7:56:28: 9d:eb:11:16:3a:72:09:9a:46:ff:f1:de:4e:3b:e6: ad:c2:34:f2:59:25:07:62:e3:ed:24:18:99:e8:d2: a1:e5:d3:4d:e2:60:e7:e8:99:9f:46:e7:4a:45:84: 57:45:17:f9:e5:03:d3:c6:9e:0d:ed:95:bf:b4:fb: fd:2c:17:c0:6d:94:28:6b:a1:b5:64:64:3a:82:af: 4d:58:53:b4:af:d3:50:a6:69:aa:c4:4b:5c:fe:92: f5:7c:75:59:ba:44:be:15:05:d3:d7:2e:9d:e8:a9: 92:f9:a3:2f:b5:e0:aa:94:4e:24:41:c9:c9:95:9e: e2:03:82:1f:95:c6:c5:a8:c1:0e:b4:ee:95:2d:54: 00:39:06:d7:ce:c4:fe:d5:bc:f5:5c:72:d2:a1:60: 8b:2a:f9:bb:31:f0:b9:f1:75:41:8a:29:a7:aa:0a: a2:ee:7b:e1:9b:77:b1:92:51:90:c9:82:fb:bd:2a: 87:c8:2f:a5:23:0e:08:bf:3d:eb:22:fa:41:ad:af: c4:09:46:7d:36:a6:1b:2b:5b:ab:89:a9:82:3a:7f: 77:d1:f4:7e:0b:20:bd:dc:86:b1:75:21:35:e2:09: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:20:FB:8F:13:C8:89:73:15:6F:17:58:01:C9:FB:8E:7E:E9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6875905a-9aa4-31a8-a9be-e9aceda58f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:90:a6:71:ac:35:1c:30:ec:a1:8a:99:30:be:9e:93:07:39: 79:de:66:4c:15:1b:74:04:c9:9d:6c:bd:6b:67:c0:09:ca:43: 84:e3:9f:5b:0a:3b:6d:ac:cf:00:40:9d:93:af:36:19:75:b2: cf:26:a1:6d:3b:b1:9a:fb:25:72:e4:b6:16:ea:5c:e1:3f:05: 58:e1:8a:8a:27:9e:1d:34:82:61:a2:38:92:fb:a5:12:63:22: ef:d6:f5:9f:1e:79:cb:8d:9b:33:88:a6:4a:eb:17:d7:8c:b6: 46:5c:3e:0f:8a:b4:5f:22:fe:61:2d:42:c8:7a:7c:df:79:92: 42:9d:14:29:51:e1:24:00:56:be:8d:7a:21:17:94:63:4d:05: ce:2e:4e:d5:28:8b:df:52:65:62:80:55:28:cf:6d:10:df:c5: 3c:0b:42:bd:ae:7a:42:9e:0d:a6:ac:72:ff:c2:d2:20:03:a3: d1:28:09:ca:1a:7f:ec:b5:60:8e:94:b1:bf:ed:46:10:fc:30: f2:b3:83:9d:e0:72:1a:b7:2d:0d:93:77:3d:aa:33:a4:9b:8d: 6e:b8:02:4b:5d:ed:56:04:65:a3:c3:ef:56:e4:d9:68:d9:b2: 3b:12:89:35:d4:4f:07:ff:d3:fb:69:ff:d6:78:33:69:b3:16: a9:99:eb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqijB+3e8qNj1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGE0MWRiZjEtZDdlYi00OWQ0LWIyMmEtMWQwODNkNGYxNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR7z5GsKfGRzbcVdKm0BLuXc+IFxGEjIZZz3 Viid6xEWOnIJmkb/8d5OO+atwjTyWSUHYuPtJBiZ6NKh5dNN4mDn6JmfRudKRYRX RRf55QPTxp4N7ZW/tPv9LBfAbZQoa6G1ZGQ6gq9NWFO0r9NQpmmqxEtc/pL1fHVZ ukS+FQXT1y6d6KmS+aMvteCqlE4kQcnJlZ7iA4IflcbFqMEOtO6VLVQAOQbXzsT+ 1bz1XHLSoWCLKvm7MfC58XVBiimnqgqi7nvhm3exklGQyYL7vSqHyC+lIw4Ivz3r IvpBra/ECUZ9NqYbK1uriamCOn930fR+CyC93IaxdSE14gmeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkpIPuPE8iJcxVvF1gByfuOfumlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjg3NTkwNWEtOWFhNC0z MWE4LWE5YmUtZTlhY2VkYTU4ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiQpnGsNRww7KGKmTC+npMHOXneZkwVG3QEyZ1svWtnwAnKQ4Tjn1sK O22szwBAnZOvNhl1ss8moW07sZr7JXLkthbqXOE/BVjhioonnh00gmGiOJL7pRJj Iu/W9Z8eecuNmzOIpkrrF9eMtkZcPg+KtF8i/mEtQsh6fN95kkKdFClR4SQAVr6N eiEXlGNNBc4uTtUoi99SZWKAVSjPbRDfxTwLQr2uekKeDaascv/C0iADo9EoCcoa f+y1YI6Usb/tRhD8MPKzg53gchq3LQ2Tdz2qM6SbjW64Aktd7VYEZaPD71bk2WjZ sjsSiTXUTwf/0/tp/9Z4M2mzFqmZ61A= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:25 2026 by rpki-client