$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa File: cfe9f42f-f924-3717-8008-67f7a3dad58c.roa (raw, json) Hash identifier: LU5sAFhHrvuDyC8nh9v/J9y5GVF25X5cA2pFTbXOkRQ= Subject key identifier: 4D:89:65:DD:8A:D0:C3:36:D9:89:C9:75:79:A1:81:85:B7:A4:24:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0977A73AB86DC1C194E4380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.170.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:7a:73:ab:86:dc:1c:19:4e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=ef8c33b8-c5c1-4490-8476-a5879324617d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:36:9b:62:79:d0:ef:1a:8b:24:5e:de:c1: 3f:d4:d7:b0:bb:9e:96:b6:cf:ba:94:99:a1:55:96: 92:27:53:99:11:93:c9:96:4b:ef:87:3d:3f:51:19: 14:84:29:93:08:ad:f6:3c:be:9b:a7:96:95:b8:51: 92:17:96:1a:9e:a9:bc:dd:17:86:2a:28:9e:70:ef: 1e:3c:5b:19:20:20:f5:52:67:19:d9:f8:ac:20:37: c6:79:4e:77:22:09:be:2d:83:88:56:52:0b:83:d3: 4d:b9:a7:c2:75:1d:d0:f8:a5:60:b2:c1:55:08:16: ad:ba:cf:ec:e9:c4:8a:53:80:7e:6a:51:76:92:e8: cc:cd:d0:36:fa:09:94:5f:53:b2:61:3a:db:c4:46: 88:84:f5:1a:30:9a:f4:b2:e9:32:b3:3e:cd:e7:44: b7:c6:27:eb:a5:d2:a6:e4:5e:50:c6:69:44:04:f3: 8c:ab:0c:78:10:8e:9b:0d:f2:32:97:72:cb:d0:f5: 7b:ec:b4:8b:b4:d3:e0:46:32:b3:da:25:88:a3:52: e7:85:da:d1:eb:4b:67:bb:90:d3:c5:ef:d1:19:ab: 44:10:a2:0b:62:26:64:77:af:6e:43:37:0c:52:79: 93:81:77:4b:27:95:02:f0:71:0b:00:40:f0:b1:73: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:65:DD:8A:D0:C3:36:D9:89:C9:75:79:A1:81:85:B7:A4:24:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d6:0d:a5:9b:52:dc:85:a4:0d:e7:ab:ab:95:59:1d:86:7e: 74:4a:a2:46:bc:52:60:e8:28:98:b4:6c:ff:82:7e:71:57:6a: f5:f9:85:6d:e1:c4:ba:b4:88:79:52:98:b2:4f:fb:7f:9b:d4: d1:58:0e:53:8f:5f:20:d8:63:15:70:33:03:0b:d6:23:5e:68: 9f:e1:39:59:31:07:76:c9:ce:00:8a:8d:46:02:f5:e3:97:55: 7c:f2:83:b4:73:b0:ec:3c:18:ad:19:46:3f:0e:e6:95:0b:5a: ee:e7:63:b8:ed:c9:f8:97:03:6e:22:0d:af:a1:23:89:8d:52: 3f:39:68:04:00:13:de:cf:e9:2f:f9:ca:4f:6f:b1:25:93:7e: 1d:4d:b7:50:0f:06:47:0e:8a:fa:f5:04:3f:f7:60:f3:fa:1c: d9:a3:a2:51:c5:ca:00:7a:3f:fb:44:7e:c2:66:87:c0:e3:56: 3a:17:94:74:e2:e2:e2:f6:62:ed:7b:b1:65:c4:42:5d:df:4f: 7a:2d:7e:94:e4:76:36:dd:be:ef:81:6e:14:9e:f9:0a:25:3c: 7c:fe:d4:df:d6:f9:b6:de:4e:d6:84:4f:e0:5a:ba:67:44:2e: ce:33:27:b9:12:c8:02:7b:94:ad:5c:19:8d:4e:30:87:79:44: d2:da:a1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3pzq4bcHBlOQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZWY4YzMzYjgtYzVjMS00NDkwLTg0NzYtYTU4NzkzMjQ2MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHQ2m2J50O8aiyRe3sE/1Newu56Wts+6lJmh VZaSJ1OZEZPJlkvvhz0/URkUhCmTCK32PL6bp5aVuFGSF5Yanqm83ReGKiiecO8e PFsZICD1UmcZ2fisIDfGeU53Igm+LYOIVlILg9NNuafCdR3Q+KVgssFVCBatus/s 6cSKU4B+alF2kujMzdA2+gmUX1OyYTrbxEaIhPUaMJr0sukysz7N50S3xifrpdKm 5F5QxmlEBPOMqwx4EI6bDfIyl3LL0PV77LSLtNPgRjKz2iWIo1LnhdrR60tnu5DT xe/RGatEEKILYiZkd69uQzcMUnmTgXdLJ5UC8HELAEDwsXOx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2JZd2K0MM22YnJdXmhgYW3pCScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZlOWY0MmYtZjkyNC0z NzE3LTgwMDgtNjdmN2EzZGFkNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTWDaWbUtyFpA3nq6uVWR2GfnRKoka8UmDoKJi0bP+CfnFXavX5hW3h xLq0iHlSmLJP+3+b1NFYDlOPXyDYYxVwMwML1iNeaJ/hOVkxB3bJzgCKjUYC9eOX VXzyg7RzsOw8GK0ZRj8O5pULWu7nY7jtyfiXA24iDa+hI4mNUj85aAQAE97P6S/5 yk9vsSWTfh1Nt1APBkcOivr1BD/3YPP6HNmjolHFygB6P/tEfsJmh8DjVjoXlHTi 4uL2Yu17sWXEQl3fT3otfpTkdjbdvu+BbhSe+QolPHz+1N/W+bbeTtaET+BaumdE Ls4zJ7kSyAJ7lK1cGY1OMId5RNLaoQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:47 2026 by rpki-client