$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa File: af7da248-524d-3bf8-a7d1-341e26104528.roa (raw, json) Hash identifier: Gn6dWBagzaWSN90qaNwatToDd7Ax1tscqe4K1kcpY9c= Subject key identifier: 96:22:76:84:39:F8:2F:15:C4:41:FE:29:90:7D:E6:39:F3:DE:8C:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D27AA1431BB2BAD71554A3000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.190.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:14:31:bb:2b:ad:71:55:4a:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8dc9f7be-883e-4e13-bea0-6553b6fa6440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:94:f8:89:4c:5f:f6:8e:f0:69:5f:4c:de: 3b:f6:f3:a1:e8:37:a4:c2:38:42:60:a4:ba:b1:93: 72:83:ed:f3:06:42:cf:dd:2e:a3:d3:1e:f8:b8:32: 84:4e:a5:37:c0:c0:09:cc:d1:33:7b:49:bb:f4:f2: 86:4b:ea:2c:ea:9d:89:bc:e4:d3:81:a6:14:ca:dd: 2a:64:ba:a1:d4:22:07:06:4d:2f:b4:8f:1c:18:48: 28:8a:9a:37:28:25:5b:fb:aa:c5:e5:48:de:a6:bc: 2b:e5:95:b5:1c:47:f6:e3:2a:50:c1:65:83:a4:b8: b7:0f:d8:b6:d6:6b:27:8b:b0:46:fa:eb:79:98:70: 4a:20:a8:7a:a4:a1:75:ea:ff:6e:fa:39:5a:64:44: 94:7c:2b:7c:96:59:d0:66:df:21:c4:74:dd:a3:fa: 6f:33:7b:71:a0:ec:7b:d6:2c:71:d7:77:54:40:54: 5a:34:f2:50:a6:ed:cb:b3:4d:49:45:b2:87:ed:b7: 2f:c5:a0:14:1f:34:c0:5e:27:23:9b:ad:76:e9:89: 85:84:dc:d4:d1:8d:65:46:99:c8:b4:e9:8b:37:2f: d5:98:b4:91:da:97:06:25:d4:a6:87:8d:37:bd:bc: 20:b7:e5:b5:b5:49:ca:e1:6e:e9:c4:10:8a:9e:52: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:22:76:84:39:F8:2F:15:C4:41:FE:29:90:7D:E6:39:F3:DE:8C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1e:cf:45:96:2d:16:9c:7f:37:61:08:35:84:29:5a:9b:09: 3a:74:ab:a3:f6:41:c1:ea:5f:26:b8:aa:9e:ca:60:19:f1:1c: 0b:bf:5e:dc:2b:11:56:b3:92:83:6e:03:ff:1a:b4:1e:67:1f: 0f:85:70:1b:91:4a:60:15:67:f8:26:38:0e:6e:17:cd:9e:e0: 7f:b1:50:32:99:eb:11:eb:d1:58:b4:c4:23:44:4a:2f:33:e1: 41:35:24:7f:ee:fc:54:48:b5:56:69:26:d7:62:4f:93:5b:58: 6d:5d:ea:a1:bd:a7:2a:1f:37:dd:ae:aa:d9:1a:b6:29:c3:f0: 79:7e:9c:91:ac:70:91:e9:db:f2:04:03:8b:75:d0:26:3f:7c: e5:5c:3a:be:2b:ad:6d:1b:c6:6d:00:5e:a3:e7:c4:2d:98:19: d9:3d:54:eb:8f:2c:da:fd:ff:a7:d2:f8:87:4b:2a:9b:e5:ab: 5d:94:e0:54:b2:47:90:6d:db:0a:7f:6b:8b:19:5c:4a:63:41: 80:6e:d2:d6:5d:f2:16:0d:79:6d:14:7b:49:c1:ca:31:35:18: 07:e8:8c:39:cd:d9:cf:10:74:95:fd:61:35:ee:b4:85:b0:b0: a8:cf:53:a7:8d:26:57:9a:a2:c9:3f:ed:91:36:c2:df:82:da: fe:cf:c1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhQxuyutcVVKMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGRjOWY3YmUtODgzZS00ZTEzLWJlYTAtNjU1M2I2ZmE2NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr6U+IlMX/aO8GlfTN479vOh6DekwjhCYKS6 sZNyg+3zBkLP3S6j0x74uDKETqU3wMAJzNEze0m79PKGS+os6p2JvOTTgaYUyt0q ZLqh1CIHBk0vtI8cGEgoipo3KCVb+6rF5Ujeprwr5ZW1HEf24ypQwWWDpLi3D9i2 1msni7BG+ut5mHBKIKh6pKF16v9u+jlaZESUfCt8llnQZt8hxHTdo/pvM3txoOx7 1ixx13dUQFRaNPJQpu3Ls01JRbKH7bcvxaAUHzTAXicjm6126YmFhNzU0Y1lRpnI tOmLNy/VmLSR2pcGJdSmh403vbwgt+W1tUnK4W7pxBCKnlKQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYidoQ5+C8VxEH+KZB95jnz3owJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY3ZGEyNDgtNTI0ZC0z YmY4LWE3ZDEtMzQxZTI2MTA0NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEez0WWLRacfzdhCDWEKVqbCTp0q6P2QcHqXya4qp7KYBnxHAu/Xtwr EVazkoNuA/8atB5nHw+FcBuRSmAVZ/gmOA5uF82e4H+xUDKZ6xHr0Vi0xCNESi8z 4UE1JH/u/FRItVZpJtdiT5NbWG1d6qG9pyofN92uqtkatinD8Hl+nJGscJHp2/IE A4t10CY/fOVcOr4rrW0bxm0AXqPnxC2YGdk9VOuPLNr9/6fS+IdLKpvlq12U4FSy R5Bt2wp/a4sZXEpjQYBu0tZd8hYNeW0Ue0nByjE1GAfojDnN2c8QdJX9YTXutIWw sKjPU6eNJleaosk/7ZE2wt+C2v7PwQs= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:29 2026 by rpki-client