$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa File: 7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa (raw, json) Hash identifier: 8lYYjHop2out4BOu4spDliFZWWE2ymIWHgH/qZEjRVs= Subject key identifier: C6:4B:F7:A8:24:4D:22:3E:22:39:14:86:11:3B:33:BB:D6:A7:69:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD418703212DBD9EE2DD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.189.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:41:87:03:21:2d:bd:9e:e2:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=41ae30f0-61fe-4836-ac0e-ef9b09bb7af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:84:59:29:7e:6c:61:93:e6:92:24:13:96: eb:de:d7:55:22:f8:ed:a4:bc:5b:95:1c:4c:1e:99: c1:53:e2:e7:ef:f1:23:a4:a4:2d:ec:a5:87:b4:ba: af:c7:56:e3:1e:e2:af:71:6d:83:96:e0:09:48:1a: c4:01:1f:9f:46:7b:26:db:b4:5b:7c:9b:dc:d7:a1: c9:74:1a:6c:a8:22:0c:d5:b2:e1:e1:cf:1b:e7:40: 13:46:46:1b:0d:5b:a1:36:60:89:39:da:56:58:8b: 2c:bc:4f:c8:81:1e:e9:60:a0:f3:14:dd:66:07:74: 50:bd:13:c4:29:40:bf:8b:3c:c3:d2:7b:4d:1f:df: ab:8a:40:10:06:0e:1f:3c:76:7f:bb:62:e1:a3:b0: 93:34:b7:d1:0b:85:3e:38:00:af:15:5d:05:2c:17: bc:78:31:0c:2b:1a:a9:84:68:9e:c3:28:12:86:1c: 3a:26:66:9f:17:4f:6f:74:74:67:b6:30:18:5c:5c: 60:6d:b8:73:69:99:6a:39:10:d4:2a:da:bb:76:99: 13:26:5f:bd:89:2a:6c:d5:25:c5:8d:0f:be:c9:5a: 7b:97:bb:52:cb:ea:b8:de:70:ef:0e:2f:ef:c6:75: 8f:4d:77:96:4f:a9:f1:79:3b:c2:d0:78:33:d3:7b: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:F7:A8:24:4D:22:3E:22:39:14:86:11:3B:33:BB:D6:A7:69:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:6d:f4:0a:b6:55:41:a8:d7:d9:fc:59:ab:80:4b:a8:c7: a5:e3:e4:95:42:08:df:c5:33:82:01:84:7e:64:c8:7e:3a:48: db:fd:61:86:5a:13:31:ed:3c:c4:e1:82:e6:15:b6:be:7e:8f: 87:aa:e4:cb:de:33:80:98:41:ca:35:b4:e7:2d:1a:aa:81:27: 69:ff:d7:c9:27:8b:5c:73:d5:84:5e:a9:e2:b1:e4:f4:ab:26: c5:10:ce:0f:5f:fc:41:40:9e:d3:d7:c5:91:a6:f3:b2:c0:8d: 0b:e7:c6:91:2d:55:fb:6b:c1:d8:2d:a7:b0:c5:f0:a2:12:5f: 16:e1:77:aa:49:6a:f3:0c:49:42:33:f9:4b:65:1a:73:64:7b: 79:a1:9f:12:35:f8:bb:60:b1:dd:f8:71:5e:16:89:9b:00:b4: f0:99:d0:ab:5c:9f:9e:5f:3f:f2:b7:0e:09:63:0d:48:62:1a: 22:93:f1:a9:e3:11:23:75:0e:bc:3d:00:61:05:e2:09:24:70: 6c:bd:44:31:00:26:b0:d2:78:5a:a4:3c:b9:f9:26:2c:e7:f5: 66:e4:f5:53:c4:e7:24:7d:a4:c9:26:ff:f7:cd:c8:37:c2:0b: 9a:7b:82:0c:7d:01:e0:15:96:56:d1:3e:34:16:ec:5c:6a:42: cf:5c:80:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UGHAyEtvZ7i3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NDFhZTMwZjAtNjFmZS00ODM2LWFjMGUtZWY5YjA5YmI3YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7OEWSl+bGGT5pIkE5br3tdVIvjtpLxblRxM HpnBU+Ln7/EjpKQt7KWHtLqvx1bjHuKvcW2DluAJSBrEAR+fRnsm27RbfJvc16HJ dBpsqCIM1bLh4c8b50ATRkYbDVuhNmCJOdpWWIssvE/IgR7pYKDzFN1mB3RQvRPE KUC/izzD0ntNH9+rikAQBg4fPHZ/u2Lho7CTNLfRC4U+OACvFV0FLBe8eDEMKxqp hGiewygShhw6JmafF09vdHRntjAYXFxgbbhzaZlqORDUKtq7dpkTJl+9iSps1SXF jQ++yVp7l7tSy+q43nDvDi/vxnWPTXeWT6nxeTvC0Hgz03umJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZL96gkTSI+IjkUhhE7M7vWp2l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2NkMGY2ZjctNzM3Yi0z NmRlLWFjMjAtYThlMmE2Y2ZmZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTfbfQKtlVBqNfZ/FmrgEuox6Xj5JVCCN/FM4IBhH5kyH46SNv9YYZa EzHtPMThguYVtr5+j4eq5MveM4CYQco1tOctGqqBJ2n/18kni1xz1YReqeKx5PSr JsUQzg9f/EFAntPXxZGm87LAjQvnxpEtVftrwdgtp7DF8KISXxbhd6pJavMMSUIz +UtlGnNke3mhnxI1+Ltgsd34cV4WiZsAtPCZ0Ktcn55fP/K3DgljDUhiGiKT8anj ESN1Drw9AGEF4gkkcGy9RDEAJrDSeFqkPLn5Jizn9Wbk9VPE5yR9pMkm//fNyDfC C5p7ggx9AeAVllbRPjQW7FxqQs9cgOE= -----END CERTIFICATE-----Generated at Thu Nov 5 18:58:29 2026 by rpki-client