$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0deafac1-dc00-3f4e-845a-d785890d16b6.roa File: 0deafac1-dc00-3f4e-845a-d785890d16b6.roa (raw, json) Hash identifier: hTqLkPJ2lOO6jNp8ZsKFoQi1RxYVgoGL3JzYO9NYDBI= Subject key identifier: 1A:AD:86:A7:58:E3:A2:99:D8:10:CE:6D:E6:37:9F:FC:6D:ED:C5:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53ADDD1CE724E77D1C2399C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0deafac1-dc00-3f4e-845a-d785890d16b6.roa Signing time: Mon 28 Sep 2026 16:57:51 +0000 ROA not before: Mon 28 Sep 2026 16:57:51 +0000 ROA not after: Sun 27 Dec 2026 17:57:51 +0000 asID: 400258 IP address blocks: 70.186.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:dd:1c:e7:24:e7:7d:1c:23:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:57:51 2026 GMT Not After : Dec 27 17:57:51 2026 GMT Subject: CN=87eff2e2-d8fd-458d-b30e-7b8ccdc74c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:2b:45:27:90:ed:b6:e9:de:59:15:e0:28: d6:7a:a2:95:a7:f2:1a:c3:fc:0a:bf:f7:3d:70:d9: 91:6a:99:23:8b:20:1c:fe:57:bc:db:be:d1:dc:d1: 75:cd:f3:15:2e:58:28:86:af:8b:f6:e2:ae:7f:98: 2d:ae:1d:4a:4a:26:4b:ca:db:66:2a:ef:93:45:32: 14:3d:32:ba:c8:8a:69:6a:24:09:26:cc:7c:e6:80: 6a:df:37:13:bd:a8:99:f4:ae:03:96:35:85:b2:3c: 5d:2b:a0:cc:58:8f:cf:d0:ef:68:89:69:f1:4f:49: fb:06:05:86:a7:94:b2:dc:5b:05:de:e5:52:e8:69: e3:05:87:34:4c:8b:99:a5:cd:78:6d:33:f4:be:18: 8e:43:44:84:63:e7:a2:35:5b:f2:eb:37:2e:12:d0: 87:87:57:9a:cc:26:bb:d8:42:bc:cb:45:8f:28:31: 86:38:d7:42:b1:4c:f2:59:86:cd:f9:93:7f:d7:cb: 8f:40:ab:37:7b:2d:cd:a2:0c:10:26:c4:ca:00:03: 53:f3:cc:7e:19:06:f2:2c:53:dc:53:24:30:52:e7: 74:6d:1a:c1:f9:86:cc:3f:92:fb:e5:9f:b8:7b:9f: 43:d8:00:f9:ae:a7:83:68:06:41:b6:b3:62:42:df: b8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AD:86:A7:58:E3:A2:99:D8:10:CE:6D:E6:37:9F:FC:6D:ED:C5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0deafac1-dc00-3f4e-845a-d785890d16b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.186.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a8:5c:7d:0a:6b:9b:7a:80:96:cb:b2:e9:19:ec:fc:d2:60: 92:33:b2:9b:27:40:3d:b1:be:f8:f0:3c:9b:18:62:79:28:57: 02:7e:b0:ed:7e:e3:37:e1:38:e1:c4:3a:da:94:f2:ab:a9:6a: 62:db:ee:4c:d2:d0:94:73:de:17:84:18:b0:c6:46:e4:5a:7b: 1e:aa:d1:db:dd:df:57:b7:80:70:b5:ec:81:12:17:8d:6e:1b: 5d:46:6f:09:5a:8f:eb:bb:6c:d1:ce:1f:fa:d2:f8:a4:f8:18: e9:a8:15:7f:9b:e4:a4:bf:8b:2f:a2:9c:3b:53:72:98:31:81: bf:74:50:32:a1:dd:f2:8a:20:45:ca:5e:97:c0:04:7b:34:72: b8:b9:65:eb:70:00:00:6f:12:a2:7f:8c:d6:f0:f1:c3:fc:88: 41:99:32:ee:de:24:37:fc:f8:ca:b8:5e:46:09:10:7a:aa:a8: de:f0:12:1f:93:56:f6:15:54:d0:aa:a8:b4:10:e7:53:c6:f4: 9b:f3:34:95:c8:2c:30:7e:82:26:c1:70:b6:4e:72:4c:04:da: dd:2d:cb:9e:0a:cc:bb:0c:62:24:8e:74:03:ba:eb:68:82:96: 7d:ed:2f:fd:60:c2:11:50:fe:d0:b3:77:1f:db:24:e7:0c:98: 60:af:3d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Trd0c5yTnfRwjmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTc1MVoXDTI2MTIyNzE3NTc1MVowLzEtMCsGA1UEAxMk ODdlZmYyZTItZDhmZC00NThkLWIzMGUtN2I4Y2NkYzc0YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCgrRSeQ7bbp3lkV4CjWeqKVp/Iaw/wKv/c9 cNmRapkjiyAc/le8277R3NF1zfMVLlgohq+L9uKuf5gtrh1KSiZLyttmKu+TRTIU PTK6yIppaiQJJsx85oBq3zcTvaiZ9K4DljWFsjxdK6DMWI/P0O9oiWnxT0n7BgWG p5Sy3FsF3uVS6GnjBYc0TIuZpc14bTP0vhiOQ0SEY+eiNVvy6zcuEtCHh1eazCa7 2EK8y0WPKDGGONdCsUzyWYbN+ZN/18uPQKs3ey3NogwQJsTKAANT88x+GQbyLFPc UyQwUud0bRrB+YbMP5L75Z+4e59D2AD5rqeDaAZBtrNiQt+44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqthqdY46KZ2BDObeY3n/xt7cWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRlYWZhYzEtZGMwMC0z ZjRlLTg0NWEtZDc4NTg5MGQxNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARroRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOoXH0Ka5t6gJbLsukZ7PzSYJIzspsnQD2xvvjwPJsYYnkoVwJ+sO1+ 4zfhOOHEOtqU8qupamLb7kzS0JRz3heEGLDGRuRaex6q0dvd31e3gHC17IESF41u G11Gbwlaj+u7bNHOH/rS+KT4GOmoFX+b5KS/iy+inDtTcpgxgb90UDKh3fKKIEXK XpfABHs0cri5ZetwAABvEqJ/jNbw8cP8iEGZMu7eJDf8+Mq4XkYJEHqqqN7wEh+T VvYVVNCqqLQQ51PG9JvzNJXILDB+gibBcLZOckwE2t0ty54KzLsMYiSOdAO662iC ln3tL/1gwhFQ/tCzdx/bJOcMmGCvPa0= -----END CERTIFICATE-----Generated at Sun Oct 4 19:49:14 2026 by rpki-client