$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa File: 0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa (raw, json) Hash identifier: Wy/lLxh2uLKzurDNrTGq5Si3tqn85uxVyICN+B45tpc= Subject key identifier: 36:56:1D:D0:68:7A:C6:65:E5:2C:66:C3:1D:53:5E:D2:57:FF:4E:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBE6B1C8714D16A27D87C7F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 22773 IP address blocks: 70.171.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:1c:87:14:d1:6a:27:d8:7c:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=9ae5e1a4-91cf-4db6-ac1d-2786041bd955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:91:07:b9:a2:95:eb:66:ea:1b:e1:63:8a: 5a:d7:02:96:42:9b:9f:1a:25:1b:52:97:a1:b1:79: 78:9f:48:39:3e:bf:54:90:d4:71:79:d0:41:ea:6c: e5:1b:64:03:1c:29:e9:39:c4:ed:9b:d5:c3:f8:05: ba:71:aa:bb:41:ea:82:62:ef:e6:d5:41:6f:87:20: 5d:a2:87:ad:ed:05:11:eb:47:df:f1:91:dd:24:91: 08:70:ee:ef:f0:84:65:eb:65:e6:ca:41:9b:da:82: 38:32:d1:f9:a8:67:b7:af:6c:20:0b:89:4c:ba:64: 93:f2:b5:0b:d5:53:25:5d:6c:d2:a5:70:a7:9a:9f: dc:25:cf:46:52:b2:cb:29:9c:35:50:f1:c1:27:4f: 42:78:29:28:73:67:bc:9c:22:4c:7c:af:e0:76:52: 90:bf:8e:79:08:19:ac:92:9d:86:a5:83:62:a5:65: 64:7e:44:82:ca:55:56:16:f0:b3:95:b9:0e:7c:c2: 02:4c:a3:f7:03:36:d9:5a:c8:b7:ba:8a:48:d1:99: 6b:73:38:ed:0d:a5:20:7a:90:e9:9d:9e:3f:64:e3: 7c:a8:37:c9:55:99:d9:e9:fd:9d:91:93:9e:69:67: 3d:75:09:dd:97:0c:22:7a:b2:88:e7:c6:62:1a:d8: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:1D:D0:68:7A:C6:65:E5:2C:66:C3:1D:53:5E:D2:57:FF:4E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:75:b2:ed:d9:6d:de:8c:d5:1d:0e:0c:e1:39:c4:94:9d:3b: 57:0c:6e:b4:95:63:35:48:31:82:66:e3:70:42:2e:b3:ba:b1: 4a:e4:a7:b1:ff:c5:9f:a5:ff:e5:d4:06:73:56:53:47:1c:8b: 64:2b:6d:34:78:c6:3d:df:12:d1:ed:d1:98:6f:b2:a9:fe:a2: e8:2d:46:c6:72:8a:04:c7:49:e5:43:df:1e:be:6f:a3:83:be: fb:da:c9:04:d1:6b:f7:0b:88:f5:dd:93:03:16:3f:16:0d:40: 2b:fb:a6:f3:44:93:da:a1:9f:bd:56:f4:47:bf:9f:ed:65:09: cb:a8:8d:52:d5:55:a3:67:4c:39:fa:46:d0:52:a4:53:b6:a9: 22:5b:9d:e7:ee:f9:6c:d3:72:28:52:ea:0c:eb:9e:3e:27:be: ee:d3:c2:e2:26:46:1a:cb:86:65:07:cc:29:a0:ba:c6:fd:90: 79:e6:ce:aa:30:1a:e1:22:d1:78:fa:28:83:92:cd:ff:99:85: 31:20:11:d0:af:64:66:d5:ab:d4:59:54:98:e5:63:1e:dc:15: 7b:16:e8:82:bc:47:c4:e0:88:a7:51:e4:b9:e9:da:85:e6:3d: f0:48:4d:c5:a4:53:10:7e:28:3b:10:ea:d5:da:12:18:54:c4: 76:eb:97:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+axyHFNFqJ9h8f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk OWFlNWUxYTQtOTFjZi00ZGI2LWFjMWQtMjc4NjA0MWJkOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2iRB7miletm6hvhY4pa1wKWQpufGiUbUpeh sXl4n0g5Pr9UkNRxedBB6mzlG2QDHCnpOcTtm9XD+AW6caq7QeqCYu/m1UFvhyBd ooet7QUR60ff8ZHdJJEIcO7v8IRl62XmykGb2oI4MtH5qGe3r2wgC4lMumST8rUL 1VMlXWzSpXCnmp/cJc9GUrLLKZw1UPHBJ09CeCkoc2e8nCJMfK/gdlKQv455CBms kp2GpYNipWVkfkSCylVWFvCzlbkOfMICTKP3AzbZWsi3uopI0ZlrczjtDaUgepDp nZ4/ZON8qDfJVZnZ6f2dkZOeaWc9dQndlwwierKI58ZiGtinnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZWHdBoesZl5Sxmwx1TXtJX/06iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNkOTBkMzEtZTBjMi0z YjYxLWJkNTktZGVjNzk3NWY5MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF1su3Zbd6M1R0ODOE5xJSdO1cMbrSVYzVIMYJm43BCLrO6sUrkp7H/ xZ+l/+XUBnNWU0cci2QrbTR4xj3fEtHt0Zhvsqn+ougtRsZyigTHSeVD3x6+b6OD vvvayQTRa/cLiPXdkwMWPxYNQCv7pvNEk9qhn71W9Ee/n+1lCcuojVLVVaNnTDn6 RtBSpFO2qSJbnefu+WzTcihS6gzrnj4nvu7TwuImRhrLhmUHzCmgusb9kHnmzqow GuEi0Xj6KIOSzf+ZhTEgEdCvZGbVq9RZVJjlYx7cFXsW6IK8R8TgiKdR5Lnp2oXm PfBITcWkUxB+KDsQ6tXaEhhUxHbrl0I= -----END CERTIFICATE-----Generated at Wed May 13 05:02:39 2026 by rpki-client