$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c690b-089b-372c-aa76-47a1b34c9f2a.roa File: 240c690b-089b-372c-aa76-47a1b34c9f2a.roa (raw, json) Hash identifier: IX3KFDt/RLxK6TIyzNbe47nKrb6SngobmTZ+XAMfFt0= Subject key identifier: 76:FC:C2:ED:B5:69:54:68:0C:3A:DC:27:DD:EA:1B:D8:FF:0F:11:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539FDEF6CA23C0E3F6E94280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c690b-089b-372c-aa76-47a1b34c9f2a.roa Signing time: Mon 28 Sep 2026 16:29:40 +0000 ROA not before: Mon 28 Sep 2026 16:29:40 +0000 ROA not after: Sun 27 Dec 2026 17:29:40 +0000 asID: 22773 IP address blocks: 70.164.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:de:f6:ca:23:c0:e3:f6:e9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:29:40 2026 GMT Not After : Dec 27 17:29:40 2026 GMT Subject: CN=26a00728-58a7-417e-a7b2-4595e9637d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:34:0e:55:d2:c9:41:c1:34:b3:a7:8d:8e: 35:30:b6:60:d3:c0:f8:b1:4b:a2:8d:74:f5:cc:e7: ae:a7:ca:8e:3c:f8:ef:5f:f9:d4:e7:cb:20:c4:b9: 01:6c:02:04:15:e9:7a:2a:1e:4c:9a:a8:a4:50:2e: 69:11:d9:e5:d9:5f:8d:d8:7c:92:a1:c0:ba:2b:ad: 2e:4f:e6:e3:45:41:e9:48:e3:46:30:7f:3c:45:5a: 55:83:85:05:d5:ab:78:47:37:e0:59:b4:6b:7e:bd: 15:6d:b2:e5:bf:11:64:b6:c5:17:3a:c1:6c:fc:5a: b1:8f:88:bc:e5:d5:bb:46:c1:6e:ca:18:ef:07:f7: 2b:f1:c0:ac:e8:8e:0b:f0:01:fb:50:03:de:72:ce: 1f:24:d8:c0:3f:06:1b:36:0e:85:23:b5:25:02:6e: 12:e9:97:af:03:b3:c9:12:54:e9:08:52:ac:3b:7d: 14:30:8b:39:4d:c4:d6:25:30:d8:cb:00:45:56:5b: b9:31:28:4b:47:f3:cc:0c:a4:ea:0f:0f:d2:52:03: d4:fc:b2:ce:75:1e:72:d3:44:5e:1d:bf:c3:31:c1: 4c:e5:4d:c2:4e:32:5c:02:c8:49:e2:34:d1:7d:fe: 2d:73:c2:56:2a:9d:37:01:78:31:ab:d0:2d:8c:fc: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FC:C2:ED:B5:69:54:68:0C:3A:DC:27:DD:EA:1B:D8:FF:0F:11:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c690b-089b-372c-aa76-47a1b34c9f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.164.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3c:f3:3e:4d:89:e8:60:82:2b:1d:37:ec:57:93:9e:48:8d: 5e:d2:0e:cb:0e:19:28:be:f5:62:0f:c1:2d:7d:61:8e:24:b8: 55:fa:e6:ff:87:6a:9a:c9:85:b5:b3:b4:e7:a9:b9:70:d5:27: 55:7f:06:70:2d:db:3d:f0:93:9e:d8:80:32:06:c5:51:51:62: a8:e6:92:78:1c:a3:aa:85:cf:4c:88:53:78:b9:47:bf:a6:0a: 6b:4e:ec:41:f2:8b:d4:10:5c:11:5e:ec:21:06:3f:f1:62:fd: 24:71:51:2d:f3:71:10:b1:eb:fb:86:81:ec:62:eb:00:4a:2d: 6f:6b:88:0e:da:9f:61:09:82:ab:47:5c:ed:11:25:30:55:99: 40:30:dd:58:6b:46:22:0f:70:7a:19:93:dc:dd:72:87:58:13: a3:bf:dd:b5:1b:36:cc:28:2b:e7:ae:d8:25:4c:86:6c:98:8d: fc:2b:0e:d8:bb:60:63:a6:de:e1:b0:eb:94:10:52:42:c0:61: fc:4a:45:c7:e0:1c:4d:f0:f0:61:78:68:e8:df:39:8c:d1:c1: e4:b2:77:1d:71:9f:6b:01:66:15:9c:52:31:4a:de:cb:ad:ba: c3:e5:65:a4:43:03:27:d4:ea:86:3c:c6:da:33:2c:d8:42:00: b5:c2:de:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn972yiPA4/bpQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjk0MFoXDTI2MTIyNzE3Mjk0MFowLzEtMCsGA1UEAxMk MjZhMDA3MjgtNThhNy00MTdlLWE3YjItNDU5NWU5NjM3ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL80DlXSyUHBNLOnjY41MLZg08D4sUuijXT1 zOeup8qOPPjvX/nU58sgxLkBbAIEFel6Kh5MmqikUC5pEdnl2V+N2HySocC6K60u T+bjRUHpSONGMH88RVpVg4UF1at4RzfgWbRrfr0VbbLlvxFktsUXOsFs/Fqxj4i8 5dW7RsFuyhjvB/cr8cCs6I4L8AH7UAPecs4fJNjAPwYbNg6FI7UlAm4S6ZevA7PJ ElTpCFKsO30UMIs5TcTWJTDYywBFVlu5MShLR/PMDKTqDw/SUgPU/LLOdR5y00Re Hb/DMcFM5U3CTjJcAshJ4jTRff4tc8JWKp03AXgxq9AtjPzMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb8wu21aVRoDDrcJ93qG9j/DxGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQwYzY5MGItMDg5Yi0z NzJjLWFhNzYtNDdhMWIzNGM5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw88z5NiehggisdN+xXk55IjV7SDssOGSi+9WIPwS19YY4kuFX65v+H aprJhbWztOepuXDVJ1V/BnAt2z3wk57YgDIGxVFRYqjmkngco6qFz0yIU3i5R7+m CmtO7EHyi9QQXBFe7CEGP/Fi/SRxUS3zcRCx6/uGgexi6wBKLW9riA7an2EJgqtH XO0RJTBVmUAw3VhrRiIPcHoZk9zdcodYE6O/3bUbNswoK+eu2CVMhmyYjfwrDti7 YGOm3uGw65QQUkLAYfxKRcfgHE3w8GF4aOjfOYzRweSydx1xn2sBZhWcUjFK3sut usPlZaRDAyfU6oY8xtozLNhCALXC3nc= -----END CERTIFICATE-----Generated at Tue Oct 6 15:59:24 2026 by rpki-client