$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14456664-64d5-33a9-875e-563c4f3f3532.roa File: 14456664-64d5-33a9-875e-563c4f3f3532.roa (raw, json) Hash identifier: M7Sxju9Ej5wPh3Hx323pjcYatQBEp0oej1IXU9l6SA8= Subject key identifier: 52:B6:19:63:91:40:7D:94:1F:C5:25:C5:AB:41:29:D4:E1:C3:79:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33151E42503BC209190E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14456664-64d5-33a9-875e-563c4f3f3532.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.181.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:15:1e:42:50:3b:c2:09:19:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=60a1d3a6-20a8-4fd5-99a2-ebe049a84b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:1b:db:7d:bb:08:2c:06:30:3f:29:3e:6c: ed:ec:24:16:91:51:4a:a9:77:06:80:ed:53:cc:e5: de:c2:66:bd:c9:58:c0:e4:d1:27:39:95:cb:3a:10: 7d:d1:d8:68:f9:92:dd:98:e2:89:a9:bc:40:0f:b3: 4e:64:3c:b7:05:87:ed:c7:e5:00:aa:9b:f6:58:a6: e3:8e:81:13:eb:f5:5b:6c:d6:63:d9:2e:34:41:ab: d2:f7:e4:ea:13:76:0a:da:a3:19:d4:1d:d0:2b:17: d5:f9:90:69:f1:ce:ee:0b:0f:ed:73:d4:a5:f8:8c: 12:84:06:78:dd:a9:ea:09:2c:78:ca:6f:05:b0:c3: 1a:63:21:03:60:f5:31:07:cd:11:5d:cf:3c:0c:5a: 02:8c:e3:cd:1a:44:46:6c:80:0e:c8:e2:60:30:c7: 5a:b9:96:5c:c2:f8:3e:b3:bd:34:f2:25:80:a4:eb: 81:12:ed:7f:f5:41:03:29:f9:da:6d:bf:c7:73:93: 4c:2d:22:2d:38:97:89:14:38:48:9c:ed:35:c6:ea: cb:62:9c:ea:52:b5:7d:86:b7:1e:aa:2f:45:ee:fb: 77:c2:a1:15:5b:65:fe:13:d5:f5:22:ce:b2:0e:28: 06:d4:91:73:33:70:f8:7c:ac:2b:fb:c3:35:d5:36: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B6:19:63:91:40:7D:94:1F:C5:25:C5:AB:41:29:D4:E1:C3:79:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14456664-64d5-33a9-875e-563c4f3f3532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:64:8c:54:96:7a:88:aa:79:92:eb:71:b9:65:22:ee:c9:f3: a2:49:93:07:99:13:b9:fa:43:69:2a:77:66:be:2b:b7:8b:54: 79:e2:f6:31:90:15:99:ea:b7:46:b5:4e:a9:16:9e:99:d8:10: 09:ec:62:24:af:e2:59:b0:f4:a7:f2:32:d3:d8:c2:02:54:64: a2:fe:78:f9:96:cc:c9:08:13:8d:30:ef:e3:7f:85:2c:c2:5c: fe:d1:02:d5:20:6f:dd:9e:04:26:e2:0b:c1:7a:cd:e5:af:12: 96:08:85:15:14:fc:be:bf:0f:e8:85:6d:98:ad:20:3a:98:4d: 5e:1f:cf:55:0c:40:d1:b7:b1:2d:fb:ba:e0:1b:fc:73:b8:6a: 75:f9:17:6f:72:bd:e2:2b:50:8c:4b:6c:b2:47:f0:18:15:90: b0:02:e6:d3:03:b0:ef:9b:81:fd:1f:21:34:f0:62:90:2f:04: c2:d0:96:8f:92:e8:96:a4:ea:78:29:c2:71:94:89:26:d8:be: d6:f6:b9:14:86:21:95:f2:39:39:63:e0:3f:69:9b:00:48:27: fe:07:9a:fa:ab:b2:e5:d8:6c:24:34:6d:29:ac:f0:29:08:fa: 5e:a1:ee:df:32:ce:5f:57:7c:3e:cd:b4:e3:39:a1:f6:b6:63: dd:2c:0c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxUeQlA7wgkZDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjBhMWQzYTYtMjBhOC00ZmQ1LTk5YTItZWJlMDQ5YTg0YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziUb2327CCwGMD8pPmzt7CQWkVFKqXcGgO1T zOXewma9yVjA5NEnOZXLOhB90dho+ZLdmOKJqbxAD7NOZDy3BYftx+UAqpv2WKbj joET6/VbbNZj2S40QavS9+TqE3YK2qMZ1B3QKxfV+ZBp8c7uCw/tc9Sl+IwShAZ4 3anqCSx4ym8FsMMaYyEDYPUxB80RXc88DFoCjOPNGkRGbIAOyOJgMMdauZZcwvg+ s7008iWApOuBEu1/9UEDKfnabb/Hc5NMLSItOJeJFDhInO01xurLYpzqUrV9hrce qi9F7vt3wqEVW2X+E9X1Is6yDigG1JFzM3D4fKwr+8M11TbfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK2GWORQH2UH8UlxatBKdThw3n0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQ0NTY2NjQtNjRkNS0z M2E5LTg3NWUtNTYzYzRmM2YzNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtkjFSWeoiqeZLrcbllIu7J86JJkweZE7n6Q2kqd2a+K7eLVHni9jGQ FZnqt0a1TqkWnpnYEAnsYiSv4lmw9KfyMtPYwgJUZKL+ePmWzMkIE40w7+N/hSzC XP7RAtUgb92eBCbiC8F6zeWvEpYIhRUU/L6/D+iFbZitIDqYTV4fz1UMQNG3sS37 uuAb/HO4anX5F29yveIrUIxLbLJH8BgVkLAC5tMDsO+bgf0fITTwYpAvBMLQlo+S 6Jak6ngpwnGUiSbYvtb2uRSGIZXyOTlj4D9pmwBIJ/4HmvqrsuXYbCQ0bSms8CkI +l6h7t8yzl9XfD7NtOM5ofa2Y90sDBQ= -----END CERTIFICATE-----Generated at Thu Nov 5 14:14:19 2026 by rpki-client