$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37e3217d-9e3b-3aca-b823-ca8ee8054550.roa File: 37e3217d-9e3b-3aca-b823-ca8ee8054550.roa (raw, json) Hash identifier: SqKcj+MoKg+SADExQjch+aZ+ecwwAMondUJTVUYEI0A= Subject key identifier: 33:41:3D:0C:D1:E2:E7:76:60:AE:CF:34:B2:73:5D:CB:4A:2B:95:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F7E7E071C368C92199EABC710 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37e3217d-9e3b-3aca-b823-ca8ee8054550.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 22773 IP address blocks: 70.173.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:07:1c:36:8c:92:19:9e:ab:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d8b4d37c-7002-435a-bedb-4aa2be892ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:5f:df:ff:39:d8:63:1c:85:ce:3d:0a:d2: 61:d9:67:db:c9:d6:ba:27:c1:98:ef:42:69:29:c2: 61:9f:3a:9a:57:82:51:a2:33:ed:59:89:10:f6:0b: 76:24:28:9e:37:03:63:ee:cd:08:50:6f:d7:91:0c: b6:d2:99:7f:89:f1:94:d8:a4:fe:40:32:d5:0e:68: 87:10:06:ad:24:1c:2a:7e:9b:21:a6:f9:81:c6:43: b4:b0:f0:83:18:3c:01:03:cb:88:3d:29:a3:8c:47: ce:04:28:9f:dd:b0:aa:79:e1:6d:0a:72:cf:f0:7a: fe:ac:15:7e:61:91:f3:5b:58:39:e3:08:6d:96:a3: 50:3c:22:f6:43:ac:bb:43:c5:ad:db:ed:23:69:b4: 86:79:2e:78:58:0f:7b:db:52:2f:9c:d4:f1:45:db: c7:1e:cc:54:bb:43:e6:19:9e:4d:36:ea:93:8d:2f: bc:52:77:ce:48:7c:a9:bf:8f:5a:b7:eb:10:36:fe: 50:36:b4:5f:2a:1b:78:f1:21:9b:c4:ba:89:5b:2f: b6:b0:4e:40:ea:55:b8:9a:6c:20:b8:16:2e:58:db: d0:a4:9f:a2:ae:06:43:17:48:b6:66:03:87:c8:c6: 29:e9:88:6d:2d:4d:f6:f6:42:f1:33:c6:e8:a3:04: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:41:3D:0C:D1:E2:E7:76:60:AE:CF:34:B2:73:5D:CB:4A:2B:95:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37e3217d-9e3b-3aca-b823-ca8ee8054550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5f:a8:bd:bb:83:7b:d0:b4:8c:22:54:b0:20:88:74:eb:80: cd:a4:64:a5:16:c5:e6:bc:44:40:05:c5:2f:ef:82:16:37:d9: 0a:96:ce:3d:61:4d:c8:ee:d8:8a:75:ba:fd:6a:e8:fe:34:eb: d4:88:3b:90:11:89:a7:00:7e:b2:26:aa:4d:11:de:2d:6d:98: 99:0e:64:81:63:3b:5f:bc:bb:aa:14:57:39:50:7e:3d:41:6e: e3:0c:ea:d4:ea:2f:2e:b1:83:6e:22:c7:36:8a:99:64:4e:90: d5:88:ac:fa:e3:fe:eb:f9:50:98:76:ee:90:46:af:9f:9b:16: 7b:84:f3:23:10:3e:4a:50:18:5b:9d:22:0a:ad:61:b3:9c:9b: 5b:bd:18:89:f8:3e:34:0a:c4:fe:5d:dc:01:e2:35:b4:fb:51: ea:a0:cb:24:2b:c4:07:9c:e9:47:91:b9:66:65:04:54:4f:4a: 5e:a2:97:74:4b:ed:b7:80:31:e0:1e:fa:ce:1a:d0:71:db:88: d3:a6:f4:d1:b0:9b:39:7d:16:10:05:64:22:19:13:9e:24:6e: 22:a9:4f:fa:5b:9c:2c:31:63:4c:62:2e:2a:03:43:ca:2c:4e: f7:8d:6e:4a:65:14:69:4b:17:0c:d8:ee:f1:e7:2e:f0:09:b1: 9c:42:e8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgccNoySGZ6rxxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDhiNGQzN2MtNzAwMi00MzVhLWJlZGItNGFhMmJlODkyYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA141f3/852GMchc49CtJh2Wfbyda6J8GY70Jp KcJhnzqaV4JRojPtWYkQ9gt2JCieNwNj7s0IUG/XkQy20pl/ifGU2KT+QDLVDmiH EAatJBwqfpshpvmBxkO0sPCDGDwBA8uIPSmjjEfOBCif3bCqeeFtCnLP8Hr+rBV+ YZHzW1g54whtlqNQPCL2Q6y7Q8Wt2+0jabSGeS54WA9721IvnNTxRdvHHsxUu0Pm GZ5NNuqTjS+8UnfOSHypv49at+sQNv5QNrRfKht48SGbxLqJWy+2sE5A6lW4mmwg uBYuWNvQpJ+irgZDF0i2ZgOHyMYp6YhtLU329kLxM8boowQVDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNBPQzR4ud2YK7PNLJzXctKK5U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzdlMzIxN2QtOWUzYi0z YWNhLWI4MjMtY2E4ZWU4MDU0NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9fqL27g3vQtIwiVLAgiHTrgM2kZKUWxea8REAFxS/vghY32QqWzj1h Tcju2Ip1uv1q6P4069SIO5ARiacAfrImqk0R3i1tmJkOZIFjO1+8u6oUVzlQfj1B buMM6tTqLy6xg24ixzaKmWROkNWIrPrj/uv5UJh27pBGr5+bFnuE8yMQPkpQGFud IgqtYbOcm1u9GIn4PjQKxP5d3AHiNbT7UeqgyyQrxAec6UeRuWZlBFRPSl6il3RL 7beAMeAe+s4a0HHbiNOm9NGwmzl9FhAFZCIZE54kbiKpT/pbnCwxY0xiLioDQ8os TveNbkplFGlLFwzY7vHnLvAJsZxC6PE= -----END CERTIFICATE-----Generated at Thu Nov 5 19:31:35 2026 by rpki-client