$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa File: 2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa (raw, json) Hash identifier: Pjk7zKK9CTQlrNcZti6+vhAarQ1gR3AUhUUPi/Hf11A= Subject key identifier: 8C:27:4B:6F:09:7D:BD:9C:EA:69:C9:EE:0C:6C:54:1B:D7:7F:4F:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32B8A0DCF2A89144ADE1B6 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.68.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b8:a0:dc:f2:a8:91:44:ad:e1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3c0a0c8c-9319-4f6c-a759-2fc07cf8960d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:7c:72:eb:fd:b5:ce:a9:8c:54:74:de:ea: 98:f8:a8:33:87:ee:f1:65:55:8c:50:2e:b2:70:35: e8:4b:3d:d1:70:09:53:8c:2d:b3:74:4e:e2:5f:18: bf:41:64:fb:e8:21:de:c2:fe:1a:8d:23:f7:44:46: 82:98:45:7d:5f:03:52:af:16:25:e7:78:50:cb:7d: 7c:08:3b:cb:e0:a3:b4:c9:ae:24:84:20:e3:a2:78: 8a:84:0c:dd:f5:cc:72:3d:df:47:6b:c5:e1:b4:6c: 41:04:c8:95:e9:0c:52:0f:b1:cc:88:2a:1a:50:4c: 12:19:c7:dd:fb:73:6b:54:4c:1d:63:69:32:38:24: 4c:f6:0a:91:8d:92:44:05:34:58:24:2b:7c:70:61: 7b:50:92:a7:ba:37:b1:b3:c6:8c:57:4b:fc:b4:f8: 5c:46:b9:85:b3:95:0a:92:6f:1b:11:12:9d:db:ed: 73:ff:fc:a2:65:42:5c:f0:19:32:50:1a:1a:b8:20: 5a:02:1f:60:f5:59:95:a4:10:7b:5a:26:23:53:73: 80:01:79:45:ba:9e:42:c0:a4:0c:4d:14:8f:ce:66: f1:b4:9c:9f:9e:10:2f:9d:8a:5d:c2:06:a4:0f:b9: fa:36:4e:b2:ff:d1:f6:04:2d:5e:27:13:99:38:42: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:27:4B:6F:09:7D:BD:9C:EA:69:C9:EE:0C:6C:54:1B:D7:7F:4F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a71cd2d-bcb8-3ecc-b44d-ba1c3e31c216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5d:69:9d:1b:aa:f3:eb:91:44:02:63:fb:76:21:61:ed:11: fb:5a:9d:c5:61:f1:d6:f3:b7:9a:0a:8f:96:e0:de:53:b7:4e: 5f:9c:8e:4e:2c:1f:d3:7f:d2:1d:1e:45:f4:87:46:8e:15:70: 65:a0:56:59:a1:13:ce:6d:aa:f6:76:fa:c1:a1:be:8d:9d:8b: 96:18:58:ca:b4:30:18:7e:8c:5b:77:50:11:56:25:6f:41:5b: 8e:16:9d:c6:a0:4a:56:e7:11:91:88:0b:8a:54:c0:11:35:af: 0e:c6:a5:d7:d1:d1:90:99:1e:ba:fd:44:c7:3c:43:58:ec:a5: c3:c6:3b:82:a4:52:7f:59:e5:02:5e:00:0e:20:03:3d:46:86: 60:e9:e0:69:05:2a:33:c0:fc:bf:eb:92:97:dc:e8:a3:63:cf: e5:62:01:08:ff:0c:29:62:d9:42:e4:fa:28:bb:f1:08:2a:28: bf:de:13:1b:96:61:3d:f2:ff:3b:9a:1a:78:9b:3a:3c:fc:bf: ec:ce:e4:18:0c:24:44:c5:b7:8d:ee:fa:59:be:e9:5f:ff:86: f9:b3:55:80:d3:79:7f:ca:ca:bd:3e:5d:d5:bb:79:85:f1:f7: fc:65:86:e1:94:a6:6b:b4:89:7b:d8:32:50:38:d5:1b:57:4b: d1:29:8f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrig3PKokUSt4bYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2MwYTBjOGMtOTMxOS00ZjZjLWE3NTktMmZjMDdjZjg5NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjx8cuv9tc6pjFR03uqY+Kgzh+7xZVWMUC6y cDXoSz3RcAlTjC2zdE7iXxi/QWT76CHewv4ajSP3REaCmEV9XwNSrxYl53hQy318 CDvL4KO0ya4khCDjoniKhAzd9cxyPd9Ha8XhtGxBBMiV6QxSD7HMiCoaUEwSGcfd +3NrVEwdY2kyOCRM9gqRjZJEBTRYJCt8cGF7UJKnujexs8aMV0v8tPhcRrmFs5UK km8bERKd2+1z//yiZUJc8BkyUBoauCBaAh9g9VmVpBB7WiYjU3OAAXlFup5CwKQM TRSPzmbxtJyfnhAvnYpdwgakD7n6Nk6y/9H2BC1eJxOZOELwsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwnS28Jfb2c6mnJ7gxsVBvXf08gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmE3MWNkMmQtYmNiOC0z ZWNjLWI0NGQtYmExYzNlMzFjMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACddaZ0bqvPrkUQCY/t2IWHtEftancVh8dbzt5oKj5bg3lO3Tl+cjk4s H9N/0h0eRfSHRo4VcGWgVlmhE85tqvZ2+sGhvo2di5YYWMq0MBh+jFt3UBFWJW9B W44WncagSlbnEZGIC4pUwBE1rw7GpdfR0ZCZHrr9RMc8Q1jspcPGO4KkUn9Z5QJe AA4gAz1GhmDp4GkFKjPA/L/rkpfc6KNjz+ViAQj/DCli2ULk+ii78QgqKL/eExuW YT3y/zuaGnibOjz8v+zO5BgMJETFt43u+lm+6V//hvmzVYDTeX/Kyr0+XdW7eYXx 9/xlhuGUpmu0iXvYMlA41RtXS9Epjw8= -----END CERTIFICATE-----Generated at Wed Nov 4 19:40:19 2026 by rpki-client