$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a49aebf-5a11-3f51-bc12-666418bad860.roa File: 8a49aebf-5a11-3f51-bc12-666418bad860.roa (raw, json) Hash identifier: VRcFiarwxyaEbTqKlulxvzY5LzxnrZ6+kntnI1y0smA= Subject key identifier: 3C:D5:4F:AB:F5:1C:69:FD:35:FF:CF:46:19:70:5D:6F:2E:1C:C3:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78B4EA660FB4083787C8A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a49aebf-5a11-3f51-bc12-666418bad860.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33659 IP address blocks: 70.90.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:4e:a6:60:fb:40:83:78:7c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=37de5e2a-2f57-440c-b70a-edb32e5ac778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:e9:1d:69:4a:00:f2:f8:bd:80:52:fc:2a: 6a:d6:4f:13:79:5f:8e:3e:cc:f5:80:ad:81:98:f4: c9:a3:d7:8c:e0:8a:4f:61:16:47:da:14:43:8f:05: 03:23:79:47:b3:80:e7:f2:94:29:11:cb:0c:b6:f1: f7:16:81:b1:6e:92:4c:30:19:e6:8b:35:79:30:34: 8d:4c:75:7d:9e:50:ff:ed:b0:0a:2a:14:7e:29:32: eb:ab:68:74:70:71:16:e0:c4:14:65:58:db:78:72: 64:4c:ad:ed:73:1e:4e:f0:f3:fe:69:31:bd:49:f1: ea:84:05:a3:bb:31:a5:51:86:8d:bf:b1:74:d1:1a: a4:c3:13:11:27:7e:ce:db:7d:bd:1a:ec:3d:d7:7d: bb:b5:51:83:41:8b:e3:02:15:b8:9b:e3:28:f1:ac: 08:54:75:52:fa:32:05:38:81:cc:99:40:cd:82:a0: b4:0f:a6:60:a4:4f:1d:dd:53:68:a2:0a:b5:dc:82: 7c:e7:ac:72:3b:6d:af:23:49:5e:6b:6d:d0:cd:1c: 9a:07:67:24:c2:1c:ee:63:51:37:1a:41:c3:c4:16: d9:db:d0:b1:07:28:fa:a7:55:ee:c7:af:8d:8a:77: 17:94:7a:5b:dc:44:b0:2f:f6:08:a3:e9:54:ac:00: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:4F:AB:F5:1C:69:FD:35:FF:CF:46:19:70:5D:6F:2E:1C:C3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a49aebf-5a11-3f51-bc12-666418bad860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.90.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a7:a1:1f:ba:cc:a4:66:8f:68:02:13:a2:65:1c:7a:00:34: 3b:d5:61:2d:ab:0d:21:8a:05:4f:24:a0:8a:31:5d:7d:d0:d0: c9:f1:da:75:79:78:82:b2:99:46:ea:c4:47:3c:81:6c:7d:42: e5:2a:a4:09:95:26:31:28:9c:b7:7a:b7:93:69:b0:d8:04:af: c5:6a:1d:08:d7:b1:85:9c:b9:83:80:43:39:5b:8e:52:4a:70: d4:b1:69:82:39:4c:a3:3a:d8:34:dc:14:b6:aa:69:ed:d0:8b: 94:78:27:4f:69:b3:0e:63:08:e3:09:a0:18:91:29:4a:db:16: d0:43:0a:c7:1d:a5:4f:d6:e5:cf:06:5d:04:cc:57:ff:77:7e: ef:69:33:94:95:6d:b4:67:15:a0:75:1a:4b:0b:f7:1d:0f:f6: ef:37:e8:42:1d:3c:1c:53:e5:cc:f5:33:08:2e:e3:6f:b2:4a: 45:85:a0:62:b9:33:b2:34:4c:b7:b0:4a:ce:c2:12:fc:3c:08: 2b:25:9a:5f:f7:54:44:ec:3f:58:41:f2:5e:30:c0:92:65:6e: 53:2b:b8:69:16:63:73:45:54:f2:f4:fb:33:6e:02:01:76:13: 94:de:da:8a:c2:52:29:6e:6a:a8:ff:30:f9:50:8f:71:6b:1f: e3:7f:39:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni06mYPtAg3h8ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzdkZTVlMmEtMmY1Ny00NDBjLWI3MGEtZWRiMzJlNWFjNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmefpHWlKAPL4vYBS/Cpq1k8TeV+OPsz1gK2B mPTJo9eM4IpPYRZH2hRDjwUDI3lHs4Dn8pQpEcsMtvH3FoGxbpJMMBnmizV5MDSN THV9nlD/7bAKKhR+KTLrq2h0cHEW4MQUZVjbeHJkTK3tcx5O8PP+aTG9SfHqhAWj uzGlUYaNv7F00RqkwxMRJ37O2329Guw91327tVGDQYvjAhW4m+Mo8awIVHVS+jIF OIHMmUDNgqC0D6ZgpE8d3VNoogq13IJ856xyO22vI0lea23QzRyaB2ckwhzuY1E3 GkHDxBbZ29CxByj6p1Xux6+NincXlHpb3ESwL/YIo+lUrAChOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzVT6v1HGn9Nf/PRhlwXW8uHMMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE0OWFlYmYtNWExMS0z ZjUxLWJjMTItNjY2NDE4YmFkODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRloAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADanoR+6zKRmj2gCE6JlHHoANDvVYS2rDSGKBU8koIoxXX3Q0Mnx2nV5 eIKymUbqxEc8gWx9QuUqpAmVJjEonLd6t5NpsNgEr8VqHQjXsYWcuYOAQzlbjlJK cNSxaYI5TKM62DTcFLaqae3Qi5R4J09psw5jCOMJoBiRKUrbFtBDCscdpU/W5c8G XQTMV/93fu9pM5SVbbRnFaB1GksL9x0P9u836EIdPBxT5cz1Mwgu42+ySkWFoGK5 M7I0TLewSs7CEvw8CCslml/3VETsP1hB8l4wwJJlblMruGkWY3NFVPL0+zNuAgF2 E5Te2orCUiluaqj/MPlQj3FrH+N/OSw= -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:45 2026 by rpki-client