$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c1f3153-022e-3e6f-8046-7fb4551d660f.roa File: 2c1f3153-022e-3e6f-8046-7fb4551d660f.roa (raw, json) Hash identifier: NVfoUf/JWrRKvjxJLVwS1syEYztFdhVkLHNFBcqFF2w= Subject key identifier: 5E:81:3B:0A:23:78:38:81:47:5F:FC:A6:0A:81:9D:E6:0B:3F:63:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F93BD7BB76E133614D9744B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c1f3153-022e-3e6f-8046-7fb4551d660f.roa Signing time: Wed 21 Oct 2026 15:41:04 +0000 ROA not before: Wed 21 Oct 2026 15:41:04 +0000 ROA not after: Tue 19 Jan 2027 16:41:04 +0000 asID: 22773 IP address blocks: 70.173.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:bd:7b:b7:6e:13:36:14:d9:74:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:41:04 2026 GMT Not After : Jan 19 16:41:04 2027 GMT Subject: CN=09424cfb-0c64-40ac-b196-d507118e4568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:b5:21:fd:69:3f:fa:bd:e0:3e:35:08:f4: 67:4e:a2:71:2e:c6:5c:6a:e3:a1:70:60:aa:b0:14: 56:08:11:c7:8c:6a:d0:b3:27:7e:8f:99:83:e1:be: 9e:1d:35:b9:07:30:de:f8:cd:ec:d2:2f:47:f4:14: 54:0b:1c:4a:39:a8:d1:c8:72:0f:c5:e0:7a:b6:11: cc:9e:c7:1f:ba:c0:3c:da:f9:99:50:89:5b:c5:53: 0c:90:d5:e9:be:5a:27:9c:e9:c7:ce:ff:2e:0d:7c: 09:36:6f:3a:93:bb:16:91:ec:cc:b8:9e:76:0e:38: 3f:9a:e0:43:07:6b:33:94:48:2f:4a:b2:32:65:97: 91:c7:46:4f:14:18:f9:68:5a:a3:b5:78:8b:41:4a: d2:9c:ba:29:25:74:3c:a7:34:fe:8d:0e:ac:7f:c9: 5c:ab:b2:1c:a7:a3:7e:1e:a4:2b:64:c9:ae:8b:1c: 8d:cc:d8:63:45:9c:d0:90:27:29:87:54:d7:3d:7c: c5:41:64:bc:d3:10:a8:eb:ac:f5:b4:37:3d:0e:41: 9f:f1:fb:ba:b4:cf:d3:e1:44:01:a9:61:ac:3c:71: f5:10:f7:52:c7:1a:f1:77:4a:ef:74:b4:4b:27:21: 9e:40:5e:c7:5e:dc:b1:f8:b4:57:d3:ae:6a:a4:2e: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:81:3B:0A:23:78:38:81:47:5F:FC:A6:0A:81:9D:E6:0B:3F:63:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c1f3153-022e-3e6f-8046-7fb4551d660f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ac:a5:84:7c:8f:f9:dd:56:84:25:d1:7e:be:09:eb:13:7e: 55:46:4a:76:37:6d:36:3a:66:99:47:64:74:21:9d:d0:05:bd: 14:a1:2e:9a:61:14:8b:37:9a:0c:22:c3:d4:44:67:67:f5:7d: 0e:28:64:5b:d1:b0:1a:50:cf:fd:51:59:a6:a9:77:dd:36:12: 00:19:19:87:dd:a8:ae:e2:cb:cb:75:4f:11:3c:9c:77:fd:4f: d6:90:ee:8e:72:d8:00:3d:07:61:8f:45:fc:33:23:f8:7c:fa: 0f:30:83:2f:3f:d0:e4:17:c9:72:8c:14:9b:db:97:71:a8:d4: ee:44:54:41:4a:db:37:64:87:09:19:95:f9:4f:3a:47:33:d6: 0c:fb:69:28:99:20:87:a2:d5:85:f4:80:9c:69:a9:57:3c:6f: c0:23:8d:b8:96:81:05:de:4c:15:5a:34:9c:99:2b:79:d6:f3: ca:a8:a3:e5:23:f9:ee:7d:bf:b6:40:da:e9:5a:82:39:59:f0: af:6f:5e:98:e5:79:b3:84:05:64:4a:35:89:05:1b:b3:4f:52: 69:ae:41:0e:0d:85:53:f1:ad:f3:00:5c:c5:e9:e6:a6:ce:71: 1d:09:78:22:97:83:63:d6:cb:12:b3:a7:fc:ce:62:86:e0:f7: 9f:2b:66:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+TvXu3bhM2FNl0S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyMTE1NDEwNFoXDTI3MDExOTE2NDEwNFowLzEtMCsGA1UEAxMk MDk0MjRjZmItMGM2NC00MGFjLWIxOTYtZDUwNzExOGU0NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xe1If1pP/q94D41CPRnTqJxLsZcauOhcGCq sBRWCBHHjGrQsyd+j5mD4b6eHTW5BzDe+M3s0i9H9BRUCxxKOajRyHIPxeB6thHM nscfusA82vmZUIlbxVMMkNXpvlonnOnHzv8uDXwJNm86k7sWkezMuJ52Djg/muBD B2szlEgvSrIyZZeRx0ZPFBj5aFqjtXiLQUrSnLopJXQ8pzT+jQ6sf8lcq7Icp6N+ HqQrZMmuixyNzNhjRZzQkCcph1TXPXzFQWS80xCo66z1tDc9DkGf8fu6tM/T4UQB qWGsPHH1EPdSxxrxd0rvdLRLJyGeQF7HXtyx+LRX065qpC7+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6BOwojeDiBR1/8pgqBneYLP2McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmMxZjMxNTMtMDIyZS0z ZTZmLTgwNDYtN2ZiNDU1MWQ2NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuspYR8j/ndVoQl0X6+CesTflVGSnY3bTY6ZplHZHQhndAFvRShLpph FIs3mgwiw9REZ2f1fQ4oZFvRsBpQz/1RWaapd902EgAZGYfdqK7iy8t1TxE8nHf9 T9aQ7o5y2AA9B2GPRfwzI/h8+g8wgy8/0OQXyXKMFJvbl3Go1O5EVEFK2zdkhwkZ lflPOkcz1gz7aSiZIIei1YX0gJxpqVc8b8AjjbiWgQXeTBVaNJyZK3nW88qoo+Uj +e59v7ZA2ulagjlZ8K9vXpjlebOEBWRKNYkFG7NPUmmuQQ4NhVPxrfMAXMXp5qbO cR0JeCKXg2PWyxKzp/zOYobg958rZv8= -----END CERTIFICATE-----Generated at Sat Oct 24 10:39:23 2026 by rpki-client