$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa File: 240c4587-780d-3be8-87be-b52fad1e5cd8.roa (raw, json) Hash identifier: oix0G5gyZEBCnbpSacjyoLD1NJY4/GMJ+H/sXFfFkXI= Subject key identifier: 19:A7:0A:EC:55:47:52:15:72:B4:42:5A:89:56:AB:04:B1:85:F6:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584FA5934DC6F5A81EBE2815F600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 32766 IP address blocks: 70.191.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:4d:c6:f5:a8:1e:be:28:15:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=f5cda5a3-7f26-4ef7-aa37-e6a8991deec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:b1:d8:1b:b3:4c:7d:aa:68:b5:5b:6a:d0: 40:a3:58:c1:f9:2f:db:d2:e0:74:61:35:3d:c8:81: 5d:d6:57:b5:81:fd:8c:87:f0:f4:ae:ee:b5:d9:bb: 2b:b4:71:1b:a8:81:84:e1:d3:d9:3f:e5:a9:71:d4: 35:c8:0f:cd:17:83:55:b7:da:ae:70:df:61:0b:f8: 45:23:b0:d9:7f:24:de:8d:36:72:da:fb:6c:3d:6a: 1f:82:84:7f:f3:48:af:cb:3f:2a:ab:5b:8d:59:b8: 7d:8b:b5:b8:27:73:b7:71:ff:41:47:2d:25:54:8a: 09:f7:13:2d:c3:84:f0:d5:19:5c:62:8a:0c:53:90: cb:9c:53:67:18:53:9d:39:2d:87:62:91:37:ca:52: bd:3f:93:ce:df:0f:d8:b2:63:5c:0c:fa:e9:b1:d1: ff:64:2b:5b:32:62:a1:9e:97:20:d6:cb:d4:fe:f1: 81:80:ab:dc:51:9c:c5:aa:28:b0:9f:81:4a:f3:3e: 5e:70:08:10:b2:34:ca:14:e6:98:03:54:32:7b:4b: 77:bd:94:ba:ae:70:3b:1e:eb:dc:e3:d0:4d:97:3f: a1:ab:9f:1b:7f:dc:84:79:47:e1:e9:47:e2:6b:09: 36:20:6a:dd:2c:45:13:c5:66:4d:58:31:f0:fd:e3: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A7:0A:EC:55:47:52:15:72:B4:42:5A:89:56:AB:04:B1:85:F6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.191.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f6:4f:de:af:32:a2:95:e2:cb:f2:f6:65:67:16:b1:1a:ff: fe:87:4b:8c:bf:04:c8:ab:05:04:b9:01:28:7d:90:31:e9:8c: 87:20:68:3b:24:d6:3d:f9:e4:20:a6:2b:1e:09:19:70:8a:75: d2:62:a3:52:38:ab:c5:0a:33:eb:9c:9a:72:6b:b0:ed:37:59: 17:d4:c4:67:d3:41:1b:53:62:29:61:03:87:1f:23:72:70:cd: b6:af:b7:66:05:37:e4:04:cf:08:95:99:b7:58:d8:93:a3:ea: 1f:42:86:5f:4d:18:00:17:8d:68:cc:08:50:38:c4:9b:52:a0: 11:43:1e:96:3a:14:5b:ba:64:5f:f3:c5:de:48:e3:00:77:73: 43:3e:04:b3:2e:2e:c8:86:6c:7f:29:3f:dd:96:dc:67:3b:1f: 7c:74:67:93:af:75:6c:55:83:b6:a0:93:e3:90:20:3f:63:a8: 51:ee:15:3a:b8:b9:c4:e6:60:b3:67:87:ef:38:92:d1:ee:86: 37:b8:46:27:db:2f:5c:b9:6d:c1:46:cd:9b:bd:2c:6d:99:2a: 91:9e:fe:04:8e:18:cc:46:1e:79:88:a4:e8:79:9b:00:98:e5: 06:cf:0b:82:67:23:56:e9:67:f7:b1:54:8e:21:16:77:92:07: 03:f2:b5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk03G9agevigV9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk ZjVjZGE1YTMtN2YyNi00ZWY3LWFhMzctZTZhODk5MWRlZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVSx2BuzTH2qaLVbatBAo1jB+S/b0uB0YTU9 yIFd1le1gf2Mh/D0ru612bsrtHEbqIGE4dPZP+WpcdQ1yA/NF4NVt9qucN9hC/hF I7DZfyTejTZy2vtsPWofgoR/80ivyz8qq1uNWbh9i7W4J3O3cf9BRy0lVIoJ9xMt w4Tw1RlcYooMU5DLnFNnGFOdOS2HYpE3ylK9P5PO3w/YsmNcDPrpsdH/ZCtbMmKh npcg1svU/vGBgKvcUZzFqiiwn4FK8z5ecAgQsjTKFOaYA1Qye0t3vZS6rnA7Huvc 49BNlz+hq58bf9yEeUfh6Ufiawk2IGrdLEUTxWZNWDHw/eMKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmnCuxVR1IVcrRCWolWqwSxhfbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQwYzQ1ODctNzgwZC0z YmU4LTg3YmUtYjUyZmFkMWU1Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb2T96vMqKV4svy9mVnFrEa//6HS4y/BMirBQS5ASh9kDHpjIcgaDsk 1j355CCmKx4JGXCKddJio1I4q8UKM+ucmnJrsO03WRfUxGfTQRtTYilhA4cfI3Jw zbavt2YFN+QEzwiVmbdY2JOj6h9Chl9NGAAXjWjMCFA4xJtSoBFDHpY6FFu6ZF/z xd5I4wB3c0M+BLMuLsiGbH8pP92W3Gc7H3x0Z5OvdWxVg7agk+OQID9jqFHuFTq4 ucTmYLNnh+84ktHuhje4RifbL1y5bcFGzZu9LG2ZKpGe/gSOGMxGHnmIpOh5mwCY 5QbPC4JnI1bpZ/exVI4hFneSBwPytWA= -----END CERTIFICATE-----Generated at Thu Nov 5 05:38:20 2026 by rpki-client