$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23ba9d25-a62c-3eaa-a701-426c1dccac07.roa File: 23ba9d25-a62c-3eaa-a701-426c1dccac07.roa (raw, json) Hash identifier: q427quFD5YyNXLJvQJpkT+5HD+K7qAwPIYJgYJfE/l8= Subject key identifier: 19:4F:38:D1:E1:AF:F7:78:C5:65:F0:D7:44:52:67:78:2F:89:ED:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539FE2A350341FA38C8CE880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23ba9d25-a62c-3eaa-a701-426c1dccac07.roa Signing time: Mon 28 Sep 2026 16:29:42 +0000 ROA not before: Mon 28 Sep 2026 16:29:42 +0000 ROA not after: Sun 27 Dec 2026 17:29:42 +0000 asID: 22773 IP address blocks: 70.164.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:e2:a3:50:34:1f:a3:8c:8c:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:29:42 2026 GMT Not After : Dec 27 17:29:42 2026 GMT Subject: CN=cdfde666-2893-461d-a6b5-32bde40c7c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:72:ab:23:66:0d:ec:3e:5f:24:f2:85:62: 14:fe:08:e3:4d:35:93:ff:d3:6e:07:a7:7f:80:e6: 0a:cb:16:2c:31:2e:50:cd:14:e5:69:b3:fc:93:e0: 63:d7:74:61:c2:51:a6:29:83:ff:fd:d7:ac:69:c4: fd:18:20:60:c2:79:54:1a:c0:78:d0:8b:08:22:b4: b6:c0:6b:73:4c:e8:c5:76:f1:2b:95:29:cb:7a:3a: 1a:33:15:a8:8b:9c:6b:e8:0c:9f:33:ac:c9:42:18: b4:74:c1:70:53:f9:f0:80:88:e4:31:c9:5e:fa:5f: 6e:28:c3:6f:d7:d9:af:2e:a0:0b:8f:83:ca:5a:f6: c3:c4:81:6b:2a:d6:69:fc:44:1d:1b:3c:6e:4a:a6: 83:cc:d6:ca:78:34:26:07:cb:68:83:fa:5f:46:5a: 10:96:da:3a:65:fd:cf:1f:c1:a0:7c:c1:82:7d:86: 05:d7:d6:af:f9:f9:cf:57:24:86:5e:88:45:73:bc: 0d:6e:91:d2:02:1c:67:01:16:61:53:f1:21:9f:8e: a2:69:70:8f:2a:6e:ea:ba:89:b2:35:4f:6d:b3:57: 71:11:97:92:7e:d3:18:38:d7:8a:35:36:4a:bf:29: 71:5f:50:30:a8:d2:a6:73:a0:31:f7:39:17:aa:c3: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4F:38:D1:E1:AF:F7:78:C5:65:F0:D7:44:52:67:78:2F:89:ED:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23ba9d25-a62c-3eaa-a701-426c1dccac07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.164.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d9:ba:d1:20:37:0f:c2:c7:9b:84:59:bd:e9:1d:a2:b8:d7: b0:c9:93:52:a3:10:3d:d6:ce:a3:b5:b1:bc:cd:f5:9a:2e:53: 72:a6:64:5c:ec:97:25:60:24:2f:47:b4:de:bd:9b:53:b1:b1: ca:cd:4d:ba:46:2a:dd:8b:d5:26:c8:1e:c8:4c:ec:05:f8:4b: fd:64:7d:8b:a8:1f:f4:ab:7e:23:e9:21:3f:d6:5d:a5:0c:37: a0:b3:dc:6f:8e:01:5a:cd:b6:55:12:4a:ca:bf:3c:fd:b6:75: 7d:9e:98:3a:e8:ec:11:4c:bb:db:b5:26:2e:cf:64:cd:b1:f7: fc:a0:c0:4e:a8:fd:72:e6:fb:d4:28:56:90:68:e8:23:41:68: 9f:bd:9f:e9:94:c4:27:45:86:3f:7a:39:37:80:a6:f3:a0:2b: c1:b7:10:df:b3:0c:22:eb:7c:3d:e5:70:eb:8e:07:d0:45:8c: b8:bb:37:1c:42:15:5e:f8:94:c2:5c:8c:1f:7a:98:a8:c9:52: 98:7d:fe:7d:bc:86:ef:b5:bc:38:8b:05:e4:db:cb:b9:d9:a4: df:a8:04:35:f5:04:7b:3e:fa:30:f4:ba:ca:91:0b:1d:5b:f3: 82:6d:3b:2e:7d:46:30:83:04:df:02:8a:36:bc:3a:bc:eb:e4: fe:80:42:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn+KjUDQfo4yM6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjk0MloXDTI2MTIyNzE3Mjk0MlowLzEtMCsGA1UEAxMk Y2RmZGU2NjYtMjg5My00NjFkLWE2YjUtMzJiZGU0MGM3YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53xyqyNmDew+XyTyhWIU/gjjTTWT/9NuB6d/ gOYKyxYsMS5QzRTlabP8k+Bj13RhwlGmKYP//desacT9GCBgwnlUGsB40IsIIrS2 wGtzTOjFdvErlSnLejoaMxWoi5xr6AyfM6zJQhi0dMFwU/nwgIjkMcle+l9uKMNv 19mvLqALj4PKWvbDxIFrKtZp/EQdGzxuSqaDzNbKeDQmB8tog/pfRloQlto6Zf3P H8GgfMGCfYYF19av+fnPVySGXohFc7wNbpHSAhxnARZhU/Ehn46iaXCPKm7quomy NU9ts1dxEZeSftMYONeKNTZKvylxX1AwqNKmc6Ax9zkXqsNq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlPONHhr/d4xWXw10RSZ3gvie2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNiYTlkMjUtYTYyYy0z ZWFhLWE3MDEtNDI2YzFkY2NhYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADZutEgNw/Cx5uEWb3pHaK417DJk1KjED3WzqO1sbzN9ZouU3KmZFzs lyVgJC9HtN69m1OxscrNTbpGKt2L1SbIHshM7AX4S/1kfYuoH/SrfiPpIT/WXaUM N6Cz3G+OAVrNtlUSSsq/PP22dX2emDro7BFMu9u1Ji7PZM2x9/ygwE6o/XLm+9Qo VpBo6CNBaJ+9n+mUxCdFhj96OTeApvOgK8G3EN+zDCLrfD3lcOuOB9BFjLi7NxxC FV74lMJcjB96mKjJUph9/n28hu+1vDiLBeTby7nZpN+oBDX1BHs++jD0usqRCx1b 84JtOy59RjCDBN8Cija8Orzr5P6AQvQ= -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:53 2026 by rpki-client