$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/014e2398-63f8-377a-90b3-3db3f10b2e0b.roa File: 014e2398-63f8-377a-90b3-3db3f10b2e0b.roa (raw, json) Hash identifier: 1Yk8rSpJWlej8+4CTw6ubjbdCRasrG6MywNG8lPqyK0= Subject key identifier: 9E:A2:B7:8E:79:B4:4A:3F:14:E2:7A:AF:1B:56:71:CF:C1:CE:1A:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A0A5B411CFE304190A1A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/014e2398-63f8-377a-90b3-3db3f10b2e0b.roa Signing time: Mon 28 Sep 2026 16:31:14 +0000 ROA not before: Mon 28 Sep 2026 16:31:14 +0000 ROA not after: Sun 27 Dec 2026 17:31:14 +0000 asID: 22773 IP address blocks: 70.169.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a0:a5:b4:11:cf:e3:04:19:0a:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:31:14 2026 GMT Not After : Dec 27 17:31:14 2026 GMT Subject: CN=1e3c8717-1339-463a-a615-6e955f351743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:68:0e:68:00:14:e6:eb:e7:11:ab:ce:4f:68: 76:1f:b6:fb:23:52:9a:5d:c2:62:0f:32:04:67:08: 5c:2b:e9:99:a9:6a:25:4e:85:5e:23:d5:d2:14:16: 2b:09:31:bd:00:9d:0e:d5:1a:dc:b5:92:64:ff:67: e6:80:00:48:5f:e5:6a:08:29:18:2a:0b:bd:6c:cd: d7:96:00:36:9d:64:f5:0b:b5:81:08:0d:5c:df:95: 6c:a9:2f:75:8a:23:ce:ea:97:cf:c5:67:b7:05:a4: f3:38:c4:66:6e:b9:50:58:30:2a:8c:87:74:b9:79: 3b:11:ec:6d:bc:d2:94:53:20:62:b3:de:f2:7a:44: a2:35:23:09:28:d8:4c:02:2d:95:90:2a:dc:7c:9a: c0:ad:04:b6:7b:8c:6a:a0:8f:8a:f0:88:70:bc:70: 6c:0a:b9:32:cc:9c:11:21:45:61:0b:b5:3b:00:35: 2d:05:ef:2f:93:fd:39:95:3f:69:f7:0b:85:e0:17: 70:03:ad:4b:74:f8:b5:6f:f0:dd:30:27:a3:aa:78: dc:2f:07:44:f9:b5:fb:de:82:1a:1e:78:a4:ff:b7: d2:02:2f:67:5b:c5:75:89:a4:d1:0f:b3:f5:33:69: 0a:f7:7e:c9:09:75:61:19:97:d7:5e:fa:d8:58:e9: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:B7:8E:79:B4:4A:3F:14:E2:7A:AF:1B:56:71:CF:C1:CE:1A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/014e2398-63f8-377a-90b3-3db3f10b2e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.169.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:eb:c0:a7:d4:b4:06:cd:fe:89:ba:0d:5a:45:77:00:9e:3e: 3b:59:fe:f0:50:f7:de:36:d5:c2:64:e7:7c:2b:d7:f8:89:e7: 94:64:95:9d:f5:d7:62:6c:87:d6:e4:e9:bc:96:10:5f:c3:c9: 76:e0:69:35:aa:44:32:93:e0:03:ee:df:0e:31:31:ba:0a:44: 3f:fb:93:17:3a:ed:15:fc:8f:a1:01:8f:c7:9a:1b:46:ba:22: 2f:a5:6d:e9:b9:6a:6e:4a:a0:3d:e7:ba:e6:b9:8c:16:42:f0: d8:15:da:47:8c:ca:dc:69:38:c1:09:18:2a:d7:4e:35:ed:36: 83:e7:01:fc:f0:aa:5d:ec:d4:4d:48:ca:93:18:f7:a4:cd:5e: 23:a1:e1:2f:49:7d:d0:d9:21:46:a2:b0:1e:7a:1f:2b:e4:3d: c8:80:09:bd:ba:cf:5b:01:8f:36:14:08:7a:4f:76:00:95:d9: d2:e0:db:e3:c8:59:9e:8e:5a:ca:70:b0:6f:e6:40:07:43:52: 38:3e:d9:b0:37:04:32:0b:2a:6c:9a:aa:ea:80:e2:60:34:5a: 6a:fa:6f:3f:f2:eb:83:ec:31:d8:d2:1a:76:d1:e9:56:66:c1: a6:69:31:7a:9a:d0:63:6f:a2:26:61:a8:a1:f6:0a:c5:e4:9c: 1e:14:8e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ToKW0Ec/jBBkKGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzExNFoXDTI2MTIyNzE3MzExNFowLzEtMCsGA1UEAxMk MWUzYzg3MTctMTMzOS00NjNhLWE2MTUtNmU5NTVmMzUxNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WgOaAAU5uvnEavOT2h2H7b7I1KaXcJiDzIE ZwhcK+mZqWolToVeI9XSFBYrCTG9AJ0O1RrctZJk/2fmgABIX+VqCCkYKgu9bM3X lgA2nWT1C7WBCA1c35VsqS91iiPO6pfPxWe3BaTzOMRmbrlQWDAqjId0uXk7Eext vNKUUyBis97yekSiNSMJKNhMAi2VkCrcfJrArQS2e4xqoI+K8IhwvHBsCrkyzJwR IUVhC7U7ADUtBe8vk/05lT9p9wuF4BdwA61LdPi1b/DdMCejqnjcLwdE+bX73oIa Hnik/7fSAi9nW8V1iaTRD7P1M2kK937JCXVhGZfXXvrYWOm8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6it455tEo/FOJ6rxtWcc/BzhrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDE0ZTIzOTgtNjNmOC0z NzdhLTkwYjMtM2RiM2YxMGIyZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTrwKfUtAbN/om6DVpFdwCePjtZ/vBQ99421cJk53wr1/iJ55RklZ31 12Jsh9bk6byWEF/DyXbgaTWqRDKT4APu3w4xMboKRD/7kxc67RX8j6EBj8eaG0a6 Ii+lbem5am5KoD3nuua5jBZC8NgV2keMytxpOMEJGCrXTjXtNoPnAfzwql3s1E1I ypMY96TNXiOh4S9JfdDZIUaisB56HyvkPciACb26z1sBjzYUCHpPdgCV2dLg2+PI WZ6OWspwsG/mQAdDUjg+2bA3BDILKmyaquqA4mA0Wmr6bz/y64PsMdjSGnbR6VZm waZpMXqa0GNvoiZhqKH2CsXknB4UjjI= -----END CERTIFICATE-----Generated at Sun Oct 4 05:36:47 2026 by rpki-client