$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38e21897-4b2f-3ae0-9e53-4dc4eb50d226.roa File: 38e21897-4b2f-3ae0-9e53-4dc4eb50d226.roa (raw, json) Hash identifier: DhNw2Clug742O8+wqSH/VWjfM4T8Rjv++GZdlTw5WYA= Subject key identifier: 25:0B:8B:2A:EA:33:D5:04:82:29:2C:BB:F4:81:67:DF:DB:9E:3C:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A0CA529A1F97C330F4A100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38e21897-4b2f-3ae0-9e53-4dc4eb50d226.roa Signing time: Mon 28 Sep 2026 16:31:31 +0000 ROA not before: Mon 28 Sep 2026 16:31:31 +0000 ROA not after: Sun 27 Dec 2026 17:31:31 +0000 asID: 22773 IP address blocks: 70.174.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a0:ca:52:9a:1f:97:c3:30:f4:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:31:31 2026 GMT Not After : Dec 27 17:31:31 2026 GMT Subject: CN=0cd287de-0852-4932-8448-7e4879da3beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:c9:9c:b3:27:4a:cc:5b:c1:82:58:81:da: 0f:85:b8:04:85:fa:8f:67:9a:4a:e1:7e:40:85:19: 29:3f:0b:5e:5b:04:e5:cb:d6:aa:bf:b8:7d:35:e7: 1e:40:62:46:76:b9:68:f3:80:6a:e2:73:8b:e4:ce: 49:10:d6:e2:5c:c1:ff:5f:c4:fe:a2:00:b1:72:4e: 9e:e2:d5:1d:13:a0:3d:e5:02:ef:b2:32:bf:a6:28: eb:b6:e3:83:2c:22:4a:03:cf:5a:2c:1a:b9:be:21: 64:01:37:ca:44:a8:8f:b8:2b:c9:3f:cf:38:3d:66: 98:9b:47:62:48:1d:ca:56:96:3d:89:1c:c8:ee:37: 4c:32:4a:f7:27:55:9a:1b:0b:d4:af:29:e3:58:a6: c7:c3:68:0d:8e:0d:55:49:ab:85:e2:ab:60:d0:2c: 9c:c1:c5:f8:49:15:fb:8a:1a:25:16:84:08:05:4d: de:04:ed:cd:bf:fe:c1:3c:57:02:fa:3d:d5:af:aa: 03:82:60:40:29:f3:64:56:11:23:8f:fa:63:34:35: 52:b7:3e:12:00:a3:82:54:73:59:f5:aa:fb:19:03: f0:e3:c6:5c:d8:22:70:64:b1:e5:74:b0:38:25:0c: 1f:f4:71:ff:f8:df:f8:51:b0:3f:6b:4c:6e:47:f8: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:8B:2A:EA:33:D5:04:82:29:2C:BB:F4:81:67:DF:DB:9E:3C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38e21897-4b2f-3ae0-9e53-4dc4eb50d226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:00:77:82:27:43:78:8d:eb:76:1c:2d:ae:8f:a5:c8:9b:91: 56:a2:41:96:c6:c0:47:c8:e8:50:45:bb:b9:f0:c9:af:95:44: da:f6:e2:af:ca:13:6c:01:06:97:51:74:44:b9:33:55:b2:d6: f9:05:06:c2:e2:b3:41:0e:e3:c5:88:90:5f:8e:a1:44:8d:f0: 37:0b:a0:7c:ef:9e:84:05:e8:fb:2e:54:55:0b:64:82:9a:0b: 71:c5:c4:d9:ac:87:3d:07:ab:16:23:31:18:7c:08:ba:89:80: 89:b5:82:6a:1f:4f:5f:aa:a2:84:44:f5:fd:44:f6:d4:71:af: a4:e4:7a:d1:d2:08:f1:5f:90:75:4b:06:b3:44:96:61:61:46: 42:59:d9:1f:47:9a:01:e0:5a:09:c8:c1:37:32:c6:32:49:10: 97:c7:17:1b:1a:3d:fb:73:33:1a:12:48:a9:9d:da:79:2b:dd: 5b:73:ef:37:a6:30:43:71:eb:21:14:c3:09:d3:a3:66:da:0c: c4:0d:8c:71:ec:29:39:65:b0:7e:1e:2f:e5:e5:2e:ba:4d:79: e1:08:06:10:a1:97:f1:a6:fc:67:1e:0e:ce:40:56:9f:2b:41: 3e:cb:ac:49:fd:4b:c1:88:a2:8d:bb:c2:27:ee:f7:96:05:e5: 88:97:a1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ToMpSmh+XwzD0oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzEzMVoXDTI2MTIyNzE3MzEzMVowLzEtMCsGA1UEAxMk MGNkMjg3ZGUtMDg1Mi00OTMyLTg0NDgtN2U0ODc5ZGEzYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphHJnLMnSsxbwYJYgdoPhbgEhfqPZ5pK4X5A hRkpPwteWwTly9aqv7h9NeceQGJGdrlo84Bq4nOL5M5JENbiXMH/X8T+ogCxck6e 4tUdE6A95QLvsjK/pijrtuODLCJKA89aLBq5viFkATfKRKiPuCvJP884PWaYm0di SB3KVpY9iRzI7jdMMkr3J1WaGwvUrynjWKbHw2gNjg1VSauF4qtg0CycwcX4SRX7 iholFoQIBU3eBO3Nv/7BPFcC+j3Vr6oDgmBAKfNkVhEjj/pjNDVStz4SAKOCVHNZ 9ar7GQPw48Zc2CJwZLHldLA4JQwf9HH/+N/4UbA/a0xuR/jWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCULiyrqM9UEgiksu/SBZ9/bnjzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhlMjE4OTctNGIyZi0z YWUwLTllNTMtNGRjNGViNTBkMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIAd4InQ3iN63YcLa6PpcibkVaiQZbGwEfI6FBFu7nwya+VRNr24q/K E2wBBpdRdES5M1Wy1vkFBsLis0EO48WIkF+OoUSN8DcLoHzvnoQF6PsuVFULZIKa C3HFxNmshz0HqxYjMRh8CLqJgIm1gmofT1+qooRE9f1E9tRxr6TketHSCPFfkHVL BrNElmFhRkJZ2R9HmgHgWgnIwTcyxjJJEJfHFxsaPftzMxoSSKmd2nkr3Vtz7zem MENx6yEUwwnTo2baDMQNjHHsKTllsH4eL+XlLrpNeeEIBhChl/Gm/GceDs5AVp8r QT7LrEn9S8GIoo27wifu95YF5YiXoZw= -----END CERTIFICATE-----Generated at Sun Oct 4 01:10:49 2026 by rpki-client