$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21d8cad2-7a06-3aa5-8844-ab59fac7576a.roa File: 21d8cad2-7a06-3aa5-8844-ab59fac7576a.roa (raw, json) Hash identifier: c/gfmaggxV1uzjsVxXa5ogWNXBJluEUQSLiKVaHwDQI= Subject key identifier: 02:A9:25:81:77:E7:91:0B:0F:64:94:57:11:F5:ED:DE:CA:7B:6C:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AD9A3422726D2A627F9480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21d8cad2-7a06-3aa5-8844-ab59fac7576a.roa Signing time: Mon 28 Sep 2026 16:57:20 +0000 ROA not before: Mon 28 Sep 2026 16:57:20 +0000 ROA not after: Sun 27 Dec 2026 17:57:20 +0000 asID: 62957 IP address blocks: 70.165.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:9a:34:22:72:6d:2a:62:7f:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:57:20 2026 GMT Not After : Dec 27 17:57:20 2026 GMT Subject: CN=44112f32-a5e7-4a85-b829-b92e2dd89150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:0f:a9:52:7a:46:65:aa:ed:38:b9:6d:98: 62:f6:6f:c5:a5:c0:3a:d5:0a:89:2c:ff:18:a7:81: 77:32:71:43:ce:96:68:33:77:1b:97:fd:c0:78:a9: b1:b9:14:b5:82:a3:d9:26:62:1d:cc:9a:15:2a:62: 8d:01:c2:54:4e:5d:3d:98:84:10:7b:59:fa:fa:61: 1d:8e:6e:04:8a:97:49:9f:ef:bc:36:8c:31:9f:05: 44:94:62:c4:33:3d:5e:a6:49:6d:1c:52:01:82:43: 2a:79:e5:1a:2f:91:a0:78:53:55:c7:0c:9b:2a:30: 4c:d2:90:5e:ab:ac:05:6d:97:b0:80:b4:c9:75:94: 7b:4c:50:e9:31:3d:85:2e:a1:02:52:06:8e:34:a9: fc:5d:6b:20:b1:bd:2c:06:a2:4c:9a:8b:19:85:20: 9d:5d:bf:60:05:9b:31:9a:fc:96:a3:9e:55:91:43: 14:04:52:84:78:59:76:fd:94:3e:81:e5:0d:ce:4b: 4b:1c:40:ca:71:5c:f6:bc:35:5f:00:ed:15:c9:da: 85:79:82:4e:e0:fe:d4:b9:99:e7:f9:aa:0b:86:39: 61:ff:17:e4:5f:d7:d6:56:b3:97:ef:6d:fc:f7:66: 36:e5:41:9a:6b:cc:fc:6e:f7:9d:59:4f:ae:78:91: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:25:81:77:E7:91:0B:0F:64:94:57:11:F5:ED:DE:CA:7B:6C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21d8cad2-7a06-3aa5-8844-ab59fac7576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4b:31:db:4d:7a:fc:04:3d:46:ed:a2:ef:a0:8d:5d:d0:4d: 03:33:eb:f2:61:6b:1a:8b:4e:d1:50:60:e4:ea:1c:0c:96:cd: c8:6c:4d:3c:c3:28:73:80:45:9d:6e:e9:cb:39:b2:f6:b3:a0: df:20:dd:b7:86:86:e0:b5:50:cc:a0:18:44:5e:36:47:b5:23: 35:6a:09:03:50:ab:08:d4:19:43:ee:be:cc:6b:04:db:86:a8: 85:95:96:8a:e5:67:91:10:85:3f:81:c2:c0:a6:8c:4c:79:f9: 81:4c:0d:2a:f8:e2:c8:36:23:f8:6b:f9:1d:03:8a:6e:67:18: 8d:eb:83:20:0a:6b:dd:1c:a1:3b:a7:c2:3b:dc:22:49:14:ff: d1:7c:aa:2a:8b:f4:ed:80:c8:75:52:bd:71:59:88:b9:e7:fa: 59:91:2b:79:43:37:a2:6f:d8:08:54:3f:a3:db:35:0e:a7:ce: 81:78:a8:22:db:c5:20:dc:1e:0e:1c:dc:25:60:f2:f0:5a:2a: 51:88:90:fe:fd:ab:2f:46:2e:c1:85:99:2f:dc:46:f6:61:a1: c6:2c:7f:1a:8b:cc:89:15:ff:92:10:dd:78:6c:a3:2e:f2:15: d1:f5:75:40:be:e2:8a:75:f5:ec:c5:91:95:10:13:8d:07:09: ef:60:30:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TrZo0InJtKmJ/lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTcyMFoXDTI2MTIyNzE3NTcyMFowLzEtMCsGA1UEAxMk NDQxMTJmMzItYTVlNy00YTg1LWI4MjktYjkyZTJkZDg5MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ4PqVJ6RmWq7Ti5bZhi9m/FpcA61QqJLP8Y p4F3MnFDzpZoM3cbl/3AeKmxuRS1gqPZJmIdzJoVKmKNAcJUTl09mIQQe1n6+mEd jm4EipdJn++8NowxnwVElGLEMz1epkltHFIBgkMqeeUaL5GgeFNVxwybKjBM0pBe q6wFbZewgLTJdZR7TFDpMT2FLqECUgaONKn8XWsgsb0sBqJMmosZhSCdXb9gBZsx mvyWo55VkUMUBFKEeFl2/ZQ+geUNzktLHEDKcVz2vDVfAO0VydqFeYJO4P7UuZnn +aoLhjlh/xfkX9fWVrOX723892Y25UGaa8z8bvedWU+ueJHuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKpJYF355ELD2SUVxH17d7Ke2zvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFkOGNhZDItN2EwNi0z YWE1LTg4NDQtYWI1OWZhYzc1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdLMdtNevwEPUbtou+gjV3QTQMz6/JhaxqLTtFQYOTqHAyWzchsTTzD KHOARZ1u6cs5svazoN8g3beGhuC1UMygGEReNke1IzVqCQNQqwjUGUPuvsxrBNuG qIWVlorlZ5EQhT+BwsCmjEx5+YFMDSr44sg2I/hr+R0Dim5nGI3rgyAKa90coTun wjvcIkkU/9F8qiqL9O2AyHVSvXFZiLnn+lmRK3lDN6Jv2AhUP6PbNQ6nzoF4qCLb xSDcHg4c3CVg8vBaKlGIkP79qy9GLsGFmS/cRvZhocYsfxqLzIkV/5IQ3Xhsoy7y FdH1dUC+4op19ezFkZUQE40HCe9gMCw= -----END CERTIFICATE-----Generated at Wed Sep 30 15:17:07 2026 by rpki-client