$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa File: f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa (raw, json) Hash identifier: 1KligLe0ycXf8v0/dmkMKxU0iYGaEXZa30PVDrnJZmM= Subject key identifier: 73:30:A9:00:3D:8A:54:6A:D6:12:9B:47:F9:CE:18:B5:2B:99:E7:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979972F1998F0472C65800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.170.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:99:72:f1:99:8f:04:72:c6:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=89549a20-fbac-4d3c-9808-7b0d6c6dcf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:5d:aa:23:a9:e3:a5:e1:9e:f8:a8:fc:52: b9:9e:c6:96:6a:92:38:3b:13:c0:88:93:ef:52:94: 2c:27:dc:13:be:86:ae:b3:14:1c:88:8c:15:bc:67: a8:ba:a2:95:4c:bf:92:3d:78:7e:8e:5d:52:90:3a: 2e:66:05:ce:9a:86:2d:ba:2d:e8:0d:73:43:96:e8: 06:f8:13:69:80:57:97:30:e8:7c:7e:cd:0e:c5:42: 78:bf:b9:43:47:ca:be:c7:5c:ac:5e:dd:65:c5:c0: 9f:84:0e:53:48:11:3e:11:a1:26:dc:10:28:a5:f6: 44:be:77:03:75:08:de:19:da:c0:13:55:70:be:9c: 3d:28:f1:be:f9:ff:0e:5b:be:be:d4:cf:a8:67:5f: 1b:c1:05:d7:d4:b0:58:d8:f5:af:69:dd:62:df:e8: f0:8c:24:4d:0c:d2:d9:55:0b:19:0b:29:f6:f0:8c: ab:28:ad:b0:f8:b6:b3:38:3c:fb:28:6d:0c:02:b0: b0:dc:a4:8b:be:bb:58:26:e8:14:df:4a:e6:70:cb: 36:3e:a7:88:96:9a:48:9c:6a:76:5b:29:66:66:d3: ef:ac:07:ee:c0:f0:13:85:8c:cf:eb:c6:89:a3:eb: 8b:a4:b7:97:6b:dc:00:a5:e1:be:fb:65:19:8c:79: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:30:A9:00:3D:8A:54:6A:D6:12:9B:47:F9:CE:18:B5:2B:99:E7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:88:00:cf:70:d2:da:9f:3c:17:4e:f9:b7:e2:8c:7e:d1:24: 21:bf:06:21:c3:52:35:23:a9:98:b9:d9:af:1f:53:b2:48:ed: 29:09:0a:af:00:c0:11:2a:96:10:cb:7c:94:44:a6:d8:94:3e: 5e:43:a5:00:47:bd:0d:5c:26:99:0f:3b:11:29:da:ce:a0:3c: 8f:0b:98:9e:5d:98:5e:73:cf:6c:af:bf:31:cd:0d:c8:90:88: 1c:2c:60:e6:98:cd:af:1c:e3:7f:be:36:73:91:0a:fc:78:7c: c3:f7:d2:a1:7d:b5:b5:59:41:06:fe:3b:50:2b:d9:ce:bc:3f: c0:11:ff:ee:b1:85:41:7d:a6:c7:8b:97:ad:20:28:51:6f:df: 40:76:2b:86:c1:d1:7e:f3:e6:ec:58:51:76:74:49:86:be:84: 65:f1:31:3a:f0:53:00:85:1d:23:3b:ed:51:f3:d8:83:d4:36: 59:04:8d:7f:7c:dc:0e:52:c8:1a:38:53:f0:94:bb:ec:d1:64: b3:70:78:b7:f0:8f:1b:c8:bf:f4:5c:e5:be:52:32:fb:a9:86: 8a:69:ff:6e:fe:a1:88:52:a9:be:cd:7d:c8:73:02:ba:db:e2: 31:72:bf:6d:05:4e:77:e3:ec:22:b3:40:d9:ca:fa:49:86:72: ec:bc:7c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5ly8ZmPBHLGWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ODk1NDlhMjAtZmJhYy00ZDNjLTk4MDgtN2IwZDZjNmRjZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21hdqiOp46Xhnvio/FK5nsaWapI4OxPAiJPv UpQsJ9wTvoausxQciIwVvGeouqKVTL+SPXh+jl1SkDouZgXOmoYtui3oDXNDlugG +BNpgFeXMOh8fs0OxUJ4v7lDR8q+x1ysXt1lxcCfhA5TSBE+EaEm3BAopfZEvncD dQjeGdrAE1Vwvpw9KPG++f8OW76+1M+oZ18bwQXX1LBY2PWvad1i3+jwjCRNDNLZ VQsZCyn28IyrKK2w+LazODz7KG0MArCw3KSLvrtYJugU30rmcMs2PqeIlppInGp2 WylmZtPvrAfuwPAThYzP68aJo+uLpLeXa9wApeG++2UZjHlW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMwqQA9ilRq1hKbR/nOGLUrmecBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjg2YWJhNGEtOGE1NC0z ZmU1LWI3OGUtOTc1MGNjODJlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuIAM9w0tqfPBdO+bfijH7RJCG/BiHDUjUjqZi52a8fU7JI7SkJCq8A wBEqlhDLfJREptiUPl5DpQBHvQ1cJpkPOxEp2s6gPI8LmJ5dmF5zz2yvvzHNDciQ iBwsYOaYza8c43++NnORCvx4fMP30qF9tbVZQQb+O1Ar2c68P8AR/+6xhUF9pseL l60gKFFv30B2K4bB0X7z5uxYUXZ0SYa+hGXxMTrwUwCFHSM77VHz2IPUNlkEjX98 3A5SyBo4U/CUu+zRZLNweLfwjxvIv/Rc5b5SMvuphopp/27+oYhSqb7NfchzArrb 4jFyv20FTnfj7CKzQNnK+kmGcuy8fHM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:38 2026 by rpki-client