$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa File: 024c2748-50f2-305e-9819-30f6382d5fe5.roa (raw, json) Hash identifier: 5Hg/1qhezi5QZIHWGX6O7aDN+cUrCvtOuZ4A8YR/FP4= Subject key identifier: 3F:6D:E0:13:B1:C8:89:A0:85:17:12:EA:4D:84:FD:BA:82:EA:01:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A331F518F985699240A7580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:1f:51:8f:98:56:99:24:0a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=daa42f1c-341a-40c4-8e9c-57a40c705b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:79:f3:a4:e2:08:95:30:71:a9:32:ca:80: 93:61:4b:f3:39:53:6f:a6:4b:8a:5a:ba:8b:ac:b9: a1:2b:4c:f7:31:2f:90:8a:86:58:13:d5:55:7c:6a: 75:34:6c:02:f0:f4:67:61:d8:55:b6:0b:84:1c:ee: 56:61:e2:44:b0:18:6f:6c:85:9e:49:b4:37:a0:6d: c6:fa:f6:70:6a:f9:10:d7:60:db:35:43:ee:a0:c8: 21:2e:79:de:6b:83:b9:8b:75:7b:54:b3:79:3a:15: 74:6e:78:06:54:c5:09:d0:8d:90:82:a3:f6:d1:ad: de:3c:9b:73:99:f7:d6:c7:2d:9b:eb:21:8e:c2:84: 08:8d:e4:8c:cb:5b:7c:35:ca:f9:0e:b6:a3:84:22: 5e:f5:c3:79:45:bc:77:e4:5f:f8:81:0b:ba:23:e0: 72:73:51:54:19:ab:dd:64:5e:2e:96:58:52:ee:d6: 1d:f6:35:37:b0:bd:76:08:82:1a:0d:7e:04:24:45: 5d:09:73:81:40:e0:ba:d3:a3:a7:21:ad:9f:6e:78: a5:af:92:f3:52:9f:83:d7:e4:34:5b:70:cc:9f:c7: 1e:f1:01:73:84:8c:96:e5:03:66:45:aa:26:21:4c: ea:56:49:fc:04:ad:f4:52:c0:2a:e5:90:2e:45:26: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6D:E0:13:B1:C8:89:A0:85:17:12:EA:4D:84:FD:BA:82:EA:01:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:97:17:7b:42:eb:57:3d:8e:01:a5:ea:de:b7:96:26:c5: fa:7f:95:67:d0:f9:9f:fa:04:c1:2d:20:9f:0e:6c:15:b1:7b: bb:67:13:1f:28:8d:eb:bf:0a:55:62:48:41:45:46:9d:e8:f0: 50:2a:57:ab:a3:a5:e1:42:8b:b3:a6:70:b6:17:8e:6c:18:88: ab:84:cb:9d:c1:dc:da:ad:e4:59:6d:c5:58:82:d0:a1:a0:3c: c2:0a:a1:2c:eb:36:a9:99:af:50:1a:39:a1:b4:38:c5:15:0b: 3a:bb:f4:27:c6:93:2e:69:45:48:04:6c:63:1c:ef:da:08:2f: f2:65:b5:6f:01:8c:26:d2:10:24:64:68:c8:e5:a1:70:98:66: 39:60:6c:45:c1:80:a3:12:0c:e2:6c:81:58:e8:2a:84:f5:bb: 00:1d:41:b8:c8:70:6e:ef:80:e0:b3:6c:b4:d5:b5:d1:85:34: 67:ae:1f:6a:0a:fc:7b:e2:c0:d5:50:6f:b4:ac:2f:6a:49:df: 75:c5:24:c4:33:40:a5:eb:98:11:41:98:8b:7f:4b:35:3c:67: ca:88:58:8d:23:d3:7b:66:d8:72:25:ae:d6:d3:23:44:ea:eb: 67:68:97:23:b5:8d:d0:6e:cf:f2:8e:c5:f0:7a:95:4b:cb:9d: 77:bc:e5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMx9Rj5hWmSQKdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFhNDJmMWMtMzQxYS00MGM0LThlOWMtNTdhNDBjNzA1Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bd586TiCJUwcakyyoCTYUvzOVNvpkuKWrqL rLmhK0z3MS+QioZYE9VVfGp1NGwC8PRnYdhVtguEHO5WYeJEsBhvbIWeSbQ3oG3G +vZwavkQ12DbNUPuoMghLnnea4O5i3V7VLN5OhV0bngGVMUJ0I2QgqP20a3ePJtz mffWxy2b6yGOwoQIjeSMy1t8Ncr5DrajhCJe9cN5Rbx35F/4gQu6I+Byc1FUGavd ZF4ullhS7tYd9jU3sL12CIIaDX4EJEVdCXOBQOC606OnIa2fbnilr5LzUp+D1+Q0 W3DMn8ce8QFzhIyW5QNmRaomIUzqVkn8BK30UsAq5ZAuRSbn3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9t4BOxyImghRcS6k2E/bqC6gFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI0YzI3NDgtNTBmMi0z MDVlLTk4MTktMzBmNjM4MmQ1ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHTlxd7QutXPY4Bperet5Ymxfp/lWfQ+Z/6BMEtIJ8ObBWxe7tnEx8o jeu/ClViSEFFRp3o8FAqV6ujpeFCi7OmcLYXjmwYiKuEy53B3Nqt5FltxViC0KGg PMIKoSzrNqmZr1AaOaG0OMUVCzq79CfGky5pRUgEbGMc79oIL/JltW8BjCbSECRk aMjloXCYZjlgbEXBgKMSDOJsgVjoKoT1uwAdQbjIcG7vgOCzbLTVtdGFNGeuH2oK /HviwNVQb7SsL2pJ33XFJMQzQKXrmBFBmIt/SzU8Z8qIWI0j03tm2HIlrtbTI0Tq 62dolyO1jdBuz/KOxfB6lUvLnXe85ew= -----END CERTIFICATE-----Generated at Thu Nov 5 07:29:51 2026 by rpki-client