$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa File: ed20b243-4972-3ae5-a8f3-20c72bd40770.roa (raw, json) Hash identifier: bAaK+UrzjgCD4eRSCs1Wkm5aNZopA4K8dwH9BR/K4Cg= Subject key identifier: C7:F5:81:15:39:EB:A3:09:97:39:B7:31:D1:EC:C1:01:57:5F:BF:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979B193620BAE12345E180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.189.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:9b:19:36:20:ba:e1:23:45:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=de9a1bb1-e8e2-4324-890f-0f661504aa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:cc:bc:9f:c3:56:22:ca:bd:2b:4e:cb:1f: 6a:2d:a8:4e:d1:8d:4b:85:8f:63:e1:0a:27:3e:08: e4:7b:1a:ed:2b:7c:3f:1f:d9:16:b0:4c:4f:a7:12: ee:7e:85:b9:98:4e:59:df:24:4f:80:3e:10:9f:6f: 2a:14:89:38:7a:b6:3c:88:1e:ab:ab:06:d9:0a:6a: 45:71:88:68:09:66:56:a3:74:81:20:56:ae:9e:4d: 35:f9:e7:34:a2:d2:85:70:20:7e:67:cd:42:e0:ff: c4:02:ab:d5:f6:27:11:0a:91:bd:53:7b:27:3e:b6: 76:6a:59:6e:84:fe:8a:38:5a:d0:4b:11:8a:73:f7: be:f8:bc:1b:33:e7:77:46:8a:b5:75:6c:99:6b:f2: fb:00:32:e2:00:29:f2:57:fa:df:8e:3f:f9:3d:b0: 16:63:0b:32:30:be:01:6f:1c:12:fe:48:29:8f:f1: 36:f7:91:8c:b2:89:fa:d9:5c:ac:7b:54:25:f5:3f: 65:62:3e:cb:34:82:80:46:7c:eb:61:3d:32:71:1e: 3c:42:dd:14:25:b3:d9:81:ac:eb:2a:bb:e8:c0:58: 11:c6:c8:11:a2:41:ad:cf:b5:7d:3e:46:97:88:6c: e9:30:77:2a:98:fa:8a:06:cf:bc:4b:c0:22:0c:ca: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F5:81:15:39:EB:A3:09:97:39:B7:31:D1:EC:C1:01:57:5F:BF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed20b243-4972-3ae5-a8f3-20c72bd40770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4c:35:ec:de:94:71:77:96:e7:fd:81:a1:e9:fd:5e:a3:e7: 80:b6:8f:3a:18:7b:e3:5f:d5:f7:23:ee:ea:94:55:59:a6:67: d6:7f:13:0c:5f:75:88:e5:ab:b5:6f:61:8e:d9:6c:3d:78:34: 1b:fa:fa:1a:0e:de:75:20:a4:fa:bc:04:35:29:6b:2c:ae:d2: 97:20:5c:07:e3:6a:aa:37:1f:d0:05:93:67:08:c8:f9:54:9b: 92:d0:8e:89:a1:62:66:63:97:61:af:98:ab:3c:bf:71:90:fc: 54:95:8e:a9:62:02:08:35:32:b4:30:fb:f1:58:83:08:93:52: e6:d9:1f:b3:2c:57:cf:fc:b6:09:a7:5c:5b:82:1b:88:77:b9: fe:74:b3:38:4b:af:a3:a9:6c:d9:c8:f8:76:22:1c:92:2a:1f: fc:78:fa:47:79:d9:01:0b:02:16:d9:d9:8d:48:46:5b:7c:54: 3e:09:08:ad:b1:cf:f3:38:a9:6f:6e:5d:15:c6:50:25:28:27: b9:84:a3:be:d0:11:c6:4c:c6:19:c9:a1:b6:09:95:e2:a0:89: 1e:b1:19:d1:1d:1c:27:5b:31:8c:8f:4d:03:83:ce:95:ca:5e: a5:1d:b9:0f:a6:0a:93:3d:2d:91:4f:86:77:45:3f:29:e6:5d: 2e:5d:46:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5sZNiC64SNF4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGU5YTFiYjEtZThlMi00MzI0LTg5MGYtMGY2NjE1MDRhYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEXMvJ/DViLKvStOyx9qLahO0Y1LhY9j4Qon PgjkexrtK3w/H9kWsExPpxLufoW5mE5Z3yRPgD4Qn28qFIk4erY8iB6rqwbZCmpF cYhoCWZWo3SBIFaunk01+ec0otKFcCB+Z81C4P/EAqvV9icRCpG9U3snPrZ2allu hP6KOFrQSxGKc/e++LwbM+d3Roq1dWyZa/L7ADLiACnyV/rfjj/5PbAWYwsyML4B bxwS/kgpj/E295GMson62Vyse1Ql9T9lYj7LNIKARnzrYT0ycR48Qt0UJbPZgazr KrvowFgRxsgRokGtz7V9PkaXiGzpMHcqmPqKBs+8S8AiDMpGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf1gRU566MJlzm3MdHswQFXX78pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQyMGIyNDMtNDk3Mi0z YWU1LWE4ZjMtMjBjNzJiZDQwNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpMNezelHF3luf9gaHp/V6j54C2jzoYe+Nf1fcj7uqUVVmmZ9Z/Ewxf dYjlq7VvYY7ZbD14NBv6+hoO3nUgpPq8BDUpayyu0pcgXAfjaqo3H9AFk2cIyPlU m5LQjomhYmZjl2GvmKs8v3GQ/FSVjqliAgg1MrQw+/FYgwiTUubZH7MsV8/8tgmn XFuCG4h3uf50szhLr6OpbNnI+HYiHJIqH/x4+kd52QELAhbZ2Y1IRlt8VD4JCK2x z/M4qW9uXRXGUCUoJ7mEo77QEcZMxhnJobYJleKgiR6xGdEdHCdbMYyPTQODzpXK XqUduQ+mCpM9LZFPhndFPynmXS5dRqE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:01:35 2026 by rpki-client