$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b43f85-e7a0-3b00-af27-c49d43c8ccf1.roa File: 35b43f85-e7a0-3b00-af27-c49d43c8ccf1.roa (raw, json) Hash identifier: hWmX+xWmqdEOZb/ZFd8kfSPEDGsAbpVSLYjZEhUHeG0= Subject key identifier: 4C:D4:CC:69:D4:88:6C:94:FE:43:AD:55:23:FA:C7:7E:96:52:57:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD7CB513066A57DC279F10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b43f85-e7a0-3b00-af27-c49d43c8ccf1.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.191.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:7c:b5:13:06:6a:57:dc:27:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=ecd5b100-1c0e-47bc-979f-8814ff2990b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:c2:ee:d3:fc:fd:47:41:62:f5:2a:fa:d9: 5d:61:21:e7:5b:ad:1a:07:b7:ae:97:28:0d:78:04: 1f:2a:a4:5b:96:ff:99:e6:36:58:64:9e:64:01:11: 07:3a:79:5e:87:fe:76:0b:cc:78:8d:04:9e:6d:98: a2:fe:e0:d6:5e:a8:66:f9:f8:a6:3c:b2:d7:e8:d6: c5:05:27:cb:be:cf:fb:d7:14:31:2e:e8:ca:22:f4: ef:4e:d5:37:dc:a3:f2:86:a1:60:ca:83:49:ff:c1: d4:26:30:09:36:dc:2e:21:b5:f2:08:6a:4a:bf:c0: 71:90:2b:f2:c8:cb:b3:01:6f:2c:1a:fe:25:20:cd: d2:61:ea:37:66:c5:6f:28:b1:d4:58:96:fa:0b:f4: a5:1b:98:26:e4:1c:7e:f4:37:db:4b:09:50:a7:20: 4e:2d:25:ed:39:a5:53:62:40:d0:61:16:50:47:8a: 83:75:02:6b:04:38:17:c3:f7:9c:0f:9d:2a:b0:c9: b1:1e:7c:bf:31:32:21:76:f4:7d:a4:75:4d:2e:43: 77:49:5b:76:c4:6a:f7:7b:cb:31:9b:eb:f6:15:91: 0d:63:af:ae:4a:39:d2:b1:40:5b:71:5a:23:40:f9: 61:1e:ae:d0:1d:73:c6:21:05:6d:62:28:b5:98:50: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D4:CC:69:D4:88:6C:94:FE:43:AD:55:23:FA:C7:7E:96:52:57:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b43f85-e7a0-3b00-af27-c49d43c8ccf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.191.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0f:47:ca:22:50:92:9a:d7:0c:5d:05:06:9c:0d:db:79:d7: ed:87:c0:42:46:1f:7d:7e:7b:b3:40:39:4d:5e:5c:f3:cf:77: 06:c7:22:d1:f9:6b:d7:0a:83:48:16:17:37:da:86:e5:ae:94: 66:d2:5e:60:ad:5b:01:fa:ff:de:7a:b4:d2:58:19:c9:e8:7f: 41:cf:b6:bc:03:ad:77:86:93:f8:4f:e3:7f:65:c0:44:28:ac: 0e:89:41:9d:82:d9:d4:e0:2b:85:ea:dc:1a:6b:e0:9e:9e:5a: 4e:d9:1b:df:5a:97:16:06:02:e5:a3:fd:98:2d:0d:77:f4:d7: 3a:1a:23:7c:d3:43:38:97:92:56:2d:8c:30:d7:9b:c7:4c:a0: 19:b2:b8:42:45:bc:47:e3:60:4a:28:8a:9a:f6:f2:5c:29:01: 72:89:2e:70:f6:42:81:ab:47:cb:f9:8c:7a:88:a4:9d:fa:de: 4c:62:a3:6b:d4:f9:bd:b7:27:ca:ad:64:47:cf:79:64:97:c1: 2e:c3:ee:a2:8f:e5:59:30:89:ac:29:ec:ff:66:1f:9d:5e:ec: 77:31:93:1b:17:65:ec:20:00:48:26:84:d4:29:45:35:1a:e9: ac:34:6a:f8:51:c4:18:3a:83:57:0d:c8:a2:34:77:55:51:86: 30:1a:17:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Xy1EwZqV9wnnxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWNkNWIxMDAtMWMwZS00N2JjLTk3OWYtODgxNGZmMjk5MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIPC7tP8/UdBYvUq+tldYSHnW60aB7eulygN eAQfKqRblv+Z5jZYZJ5kAREHOnleh/52C8x4jQSebZii/uDWXqhm+fimPLLX6NbF BSfLvs/71xQxLujKIvTvTtU33KPyhqFgyoNJ/8HUJjAJNtwuIbXyCGpKv8BxkCvy yMuzAW8sGv4lIM3SYeo3ZsVvKLHUWJb6C/SlG5gm5Bx+9DfbSwlQpyBOLSXtOaVT YkDQYRZQR4qDdQJrBDgXw/ecD50qsMmxHny/MTIhdvR9pHVNLkN3SVt2xGr3e8sx m+v2FZENY6+uSjnSsUBbcVojQPlhHq7QHXPGIQVtYii1mFAyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzUzGnUiGyU/kOtVSP6x36WUlfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzViNDNmODUtZTdhMC0z YjAwLWFmMjctYzQ5ZDQzYzhjY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsPR8oiUJKa1wxdBQacDdt51+2HwEJGH31+e7NAOU1eXPPPdwbHItH5 a9cKg0gWFzfahuWulGbSXmCtWwH6/956tNJYGcnof0HPtrwDrXeGk/hP439lwEQo rA6JQZ2C2dTgK4Xq3Bpr4J6eWk7ZG99alxYGAuWj/ZgtDXf01zoaI3zTQziXklYt jDDXm8dMoBmyuEJFvEfjYEooipr28lwpAXKJLnD2QoGrR8v5jHqIpJ363kxio2vU +b23J8qtZEfPeWSXwS7D7qKP5Vkwiawp7P9mH51e7HcxkxsXZewgAEgmhNQpRTUa 6aw0avhRxBg6g1cNyKI0d1VRhjAaF8c= -----END CERTIFICATE-----Generated at Mon Nov 2 15:25:19 2026 by rpki-client