$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa File: 2b348d42-e915-30c8-90d9-c6a574165b90.roa (raw, json) Hash identifier: +ExDItYkM5a9GfbVwnsWPLmEex3jJX/8XYxYdLowiio= Subject key identifier: 9B:B4:FE:CD:9D:32:45:16:92:0B:16:C7:D2:D2:BC:31:D1:83:AE:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A332707D87519E704730E66 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:27:07:d8:75:19:e7:04:73:0e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9df458aa-7048-428e-bf8a-e4420605bfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:03:2b:5e:89:b8:3f:3f:41:58:52:fb:40: c4:37:d9:91:36:de:28:be:d3:6a:85:4b:28:b7:98: 6f:9d:56:03:f0:fb:f9:cc:aa:80:08:1f:3e:17:c4: 5d:eb:d6:c8:37:6a:cd:d2:fd:e2:55:5a:1a:2c:ee: e1:29:51:45:8a:99:1c:ab:39:ae:fa:7d:34:3f:bd: 62:58:07:00:77:fd:9c:57:c6:10:78:31:1e:c4:6c: 0b:4f:d1:35:75:22:24:15:6f:e4:84:e8:96:cf:b2: 71:1c:7b:6d:fb:00:28:53:07:c1:1d:e9:bc:9d:8e: 8b:ae:56:d2:70:48:d2:9c:06:d7:85:22:9d:c1:b8: c5:72:88:f8:c0:0f:e8:fb:85:fe:e4:5c:4a:34:e8: 16:a3:4c:5c:53:aa:f2:17:90:c0:04:a6:27:a5:9d: 9b:91:3e:ae:5c:d9:e7:9a:5b:b3:e3:32:6d:2f:60: 6a:7c:7c:56:53:68:5b:1f:ae:e2:61:8c:50:84:5b: ad:3d:84:96:a0:72:3d:41:b9:c0:52:09:25:95:48: cd:c3:f3:02:bd:6c:36:2b:8e:d4:74:5f:91:36:ba: 0d:bc:1b:9d:4d:41:a8:42:0d:4a:3c:fc:59:f1:21: f5:eb:a4:71:c1:8f:04:d9:fd:e4:ec:bf:ff:d7:94: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:FE:CD:9D:32:45:16:92:0B:16:C7:D2:D2:BC:31:D1:83:AE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:54:59:05:d8:77:8a:60:18:14:cf:42:16:9f:4f:bf:35:b9: fd:96:cd:68:99:2c:f9:38:37:61:b6:61:9b:82:10:57:86:6d: b1:13:69:7b:c4:c3:e9:61:dc:25:9a:c6:9b:28:cc:cf:5c:97: d9:0b:00:db:cc:f1:3f:f2:dc:8d:0a:75:b2:2d:d4:91:80:db: 39:8b:08:06:9d:48:12:c9:a3:ad:e1:2c:5b:f0:dd:54:fd:b0: f9:e8:86:b2:20:25:4c:c2:59:7b:40:87:8e:3e:92:93:04:b7: 02:4a:bb:bd:8f:24:09:16:4c:46:0f:69:0f:a0:f8:e0:9b:a8: 0f:1c:36:74:47:79:6c:c4:ea:b9:6a:2b:d6:ca:3b:d2:17:c3: 6e:56:c0:72:ce:4b:8d:14:f8:41:68:66:fa:17:34:ea:e0:2b: f5:c6:05:44:56:bf:13:59:e4:f2:1d:95:a2:86:d2:8d:fe:75: 25:25:b9:02:ca:6f:54:66:c7:d5:37:41:ad:2f:d2:43:18:f2: bb:87:23:ed:eb:70:58:fb:f3:00:14:5c:b8:6a:6f:30:e6:15: ff:d1:a4:03:b5:76:c5:af:d5:de:91:b9:5c:a9:5a:09:57:1f: a0:1f:10:ce:80:52:5c:39:0e:2d:2d:c5:a3:ca:3e:84:82:c3: ce:cf:73:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMycH2HUZ5wRzDmYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWRmNDU4YWEtNzA0OC00MjhlLWJmOGEtZTQ0MjA2MDViZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK8DK16JuD8/QVhS+0DEN9mRNt4ovtNqhUso t5hvnVYD8Pv5zKqACB8+F8Rd69bIN2rN0v3iVVoaLO7hKVFFipkcqzmu+n00P71i WAcAd/2cV8YQeDEexGwLT9E1dSIkFW/khOiWz7JxHHtt+wAoUwfBHem8nY6LrlbS cEjSnAbXhSKdwbjFcoj4wA/o+4X+5FxKNOgWo0xcU6ryF5DABKYnpZ2bkT6uXNnn mluz4zJtL2BqfHxWU2hbH67iYYxQhFutPYSWoHI9QbnAUgkllUjNw/MCvWw2K47U dF+RNroNvBudTUGoQg1KPPxZ8SH166RxwY8E2f3k7L//15ScIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu0/s2dMkUWkgsWx9LSvDHRg67XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmIzNDhkNDItZTkxNS0z MGM4LTkwZDktYzZhNTc0MTY1YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChUWQXYd4pgGBTPQhafT781uf2WzWiZLPk4N2G2YZuCEFeGbbETaXvE w+lh3CWaxpsozM9cl9kLANvM8T/y3I0KdbIt1JGA2zmLCAadSBLJo63hLFvw3VT9 sPnohrIgJUzCWXtAh44+kpMEtwJKu72PJAkWTEYPaQ+g+OCbqA8cNnRHeWzE6rlq K9bKO9IXw25WwHLOS40U+EFoZvoXNOrgK/XGBURWvxNZ5PIdlaKG0o3+dSUluQLK b1Rmx9U3Qa0v0kMY8ruHI+3rcFj78wAUXLhqbzDmFf/RpAO1dsWv1d6RuVypWglX H6AfEM6AUlw5Di0txaPKPoSCw87Pcys= -----END CERTIFICATE-----Generated at Thu Nov 5 04:37:34 2026 by rpki-client