$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2870dfde-6506-39d3-824a-7f97c5d40e42.roa File: 2870dfde-6506-39d3-824a-7f97c5d40e42.roa (raw, json) Hash identifier: nYoDrD0a1zF72JDa/t0hUE2Lo9Qtmswxugguuk1N884= Subject key identifier: 0E:68:7C:DC:F5:6F:9C:BA:37:4E:EF:F9:F1:40:76:24:28:05:74:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A19C38C05C10F3DC939B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2870dfde-6506-39d3-824a-7f97c5d40e42.roa Signing time: Mon 28 Sep 2026 16:33:10 +0000 ROA not before: Mon 28 Sep 2026 16:33:10 +0000 ROA not after: Sun 27 Dec 2026 17:33:10 +0000 asID: 22773 IP address blocks: 70.186.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a1:9c:38:c0:5c:10:f3:dc:93:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:33:10 2026 GMT Not After : Dec 27 17:33:10 2026 GMT Subject: CN=f7d19358-c460-459d-9ba4-898b6f5bd5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:0c:9b:37:e3:b5:02:f1:6b:f5:3f:72:ef: fc:45:d1:56:f3:16:b6:c0:49:c5:bb:41:fc:91:73: 59:b6:29:d3:ab:7b:08:4d:a9:54:2f:62:0a:02:ac: bc:de:2e:a0:68:2f:a3:1e:cf:cc:35:ba:b9:88:14: 54:a4:0b:53:23:d4:40:d7:09:99:cc:a0:85:53:07: 0c:77:e9:6c:73:1b:d3:de:09:18:34:4b:3a:be:1e: 2d:c6:32:cc:59:18:0e:59:29:cb:f2:91:42:6f:50: 67:59:fb:8e:8a:68:82:7e:5b:54:46:1d:94:69:2c: 0c:77:5d:ee:6b:f3:17:81:7b:44:32:9b:f1:88:c6: 50:0f:62:30:66:50:6e:77:e3:a7:64:f3:c8:11:e2: 2e:a1:2f:34:66:7c:d6:c1:61:dd:2d:77:99:75:be: 9e:f6:12:86:43:81:e5:87:2d:1f:b0:e3:a2:5f:92: c9:9c:ca:df:f0:6b:79:ea:bb:f3:01:cd:ca:f6:4e: 6f:86:ca:95:79:64:5e:8a:14:54:b5:71:4b:33:e8: 07:53:2a:77:8d:fb:66:e8:70:b5:76:0c:90:8a:80: 6c:b7:60:04:f3:7f:16:97:80:3e:21:4f:ad:1f:96: b2:48:15:2a:26:e9:9a:c3:3c:f0:84:3e:1b:e4:ca: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:7C:DC:F5:6F:9C:BA:37:4E:EF:F9:F1:40:76:24:28:05:74:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2870dfde-6506-39d3-824a-7f97c5d40e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.186.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ee:2b:e0:6e:ab:2e:5d:1d:6b:4c:6d:80:9c:37:85:1d:10: 92:75:b4:1c:db:16:84:13:a6:74:56:72:b6:c8:90:49:97:ad: bf:3b:fd:06:3b:7a:17:61:4d:cf:be:aa:c2:ef:46:c4:ae:1f: d3:dc:d8:52:31:2c:8c:c1:64:f6:66:bb:c2:03:ab:a9:d4:73: 9e:a2:3d:4d:5e:c2:17:43:30:be:ba:b5:20:e9:2f:61:78:43: 72:37:eb:0e:75:4f:1a:91:dd:16:f4:9a:e3:7d:4d:48:6c:d5: 96:9d:20:5e:84:1e:aa:02:2e:fb:6b:0c:63:0f:0e:41:07:ae: 5f:9a:47:96:ec:fa:ab:47:2d:23:6e:e3:f1:55:02:59:c7:2d: 55:55:d0:a5:2b:c7:66:77:57:bb:cf:ee:66:31:1f:aa:b6:a6: 27:88:cc:05:d4:71:3d:27:f3:a9:58:b4:d7:70:1d:6c:7b:53: 65:12:98:18:d8:f5:88:d4:a9:93:e5:26:62:17:bd:d2:0f:80: d3:83:69:43:65:73:06:53:11:e1:d8:e3:83:ce:c0:81:71:80: b8:91:35:c2:fb:2b:74:55:d3:21:25:b7:85:e5:fc:61:82:a6: e1:4b:02:eb:ab:0d:99:8b:eb:43:3a:40:39:4d:73:18:92:0e: 94:b9:30:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ToZw4wFwQ89yTmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzMxMFoXDTI2MTIyNzE3MzMxMFowLzEtMCsGA1UEAxMk ZjdkMTkzNTgtYzQ2MC00NTlkLTliYTQtODk4YjZmNWJkNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMgMmzfjtQLxa/U/cu/8RdFW8xa2wEnFu0H8 kXNZtinTq3sITalUL2IKAqy83i6gaC+jHs/MNbq5iBRUpAtTI9RA1wmZzKCFUwcM d+lscxvT3gkYNEs6vh4txjLMWRgOWSnL8pFCb1BnWfuOimiCfltURh2UaSwMd13u a/MXgXtEMpvxiMZQD2IwZlBud+OnZPPIEeIuoS80ZnzWwWHdLXeZdb6e9hKGQ4Hl hy0fsOOiX5LJnMrf8Gt56rvzAc3K9k5vhsqVeWReihRUtXFLM+gHUyp3jftm6HC1 dgyQioBst2AE838Wl4A+IU+tH5aySBUqJumawzzwhD4b5MreUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5ofNz1b5y6N07v+fFAdiQoBXQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg3MGRmZGUtNjUwNi0z OWQzLTgyNGEtN2Y5N2M1ZDQwZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbuK+Buqy5dHWtMbYCcN4UdEJJ1tBzbFoQTpnRWcrbIkEmXrb87/QY7 ehdhTc++qsLvRsSuH9Pc2FIxLIzBZPZmu8IDq6nUc56iPU1ewhdDML66tSDpL2F4 Q3I36w51TxqR3Rb0muN9TUhs1ZadIF6EHqoCLvtrDGMPDkEHrl+aR5bs+qtHLSNu 4/FVAlnHLVVV0KUrx2Z3V7vP7mYxH6q2pieIzAXUcT0n86lYtNdwHWx7U2USmBjY 9YjUqZPlJmIXvdIPgNODaUNlcwZTEeHY44POwIFxgLiRNcL7K3RV0yElt4Xl/GGC puFLAuurDZmL60M6QDlNcxiSDpS5MB0= -----END CERTIFICATE-----Generated at Wed Sep 30 22:40:01 2026 by rpki-client