$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17f4eb47-d924-308e-9c25-cfb5b5d3fea3.roa File: 17f4eb47-d924-308e-9c25-cfb5b5d3fea3.roa (raw, json) Hash identifier: vrgicuQIdiuxJt3FEPZ52Uyu9wiN7KAsqS/ADFfaTEY= Subject key identifier: F0:67:6F:DD:50:0C:79:B8:CD:D6:A0:31:3B:90:3F:A0:4F:9D:22:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F498771CBB72A5B0E6465BF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17f4eb47-d924-308e-9c25-cfb5b5d3fea3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.189.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:71:cb:b7:2a:5b:0e:64:65:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86c3b539-aec8-4abe-837e-eef7af416496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:df:78:36:aa:c4:2c:bf:09:63:61:f8:ed:38: 72:e2:dd:f9:4b:d9:2a:34:80:b9:bb:45:fc:e2:31: 2c:89:81:7d:fe:52:9c:bf:36:9c:e1:e1:a2:ba:31: ac:47:f2:99:1a:b8:74:c2:08:e0:e8:80:44:c0:c3: d0:21:94:25:3b:6c:a4:e0:4d:ed:db:b9:b9:4a:57: a2:99:eb:96:e8:03:51:80:cb:fd:43:ec:02:2b:f2: ab:83:80:ef:09:21:50:0c:81:a9:f0:70:50:e3:a0: f8:d4:c5:1a:09:b9:6a:df:65:f6:5e:c4:25:19:77: bc:3f:9a:5c:26:63:ac:2f:80:bc:6e:66:c5:58:94: be:7c:d5:87:53:98:6b:df:5d:1b:fd:63:a3:7e:ee: f9:cd:ea:de:8c:3c:7c:cf:72:94:10:94:d8:b7:cf: d0:1f:3a:98:ff:d1:d1:54:50:fc:77:6e:bc:36:c7: e8:90:14:99:94:f0:fb:cd:64:f2:cf:9b:63:bd:51: c4:e5:7e:32:cc:dd:fa:b1:66:04:27:2d:f3:8b:41: b5:13:e2:7e:a3:10:e0:fa:ff:57:43:34:07:76:cd: 36:57:e6:b4:a9:37:23:34:a9:bd:3d:c9:d3:6a:ec: f6:55:26:df:6f:b8:25:7a:58:34:f6:7a:9b:be:fc: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:6F:DD:50:0C:79:B8:CD:D6:A0:31:3B:90:3F:A0:4F:9D:22:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17f4eb47-d924-308e-9c25-cfb5b5d3fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:25:9b:75:aa:b8:b4:78:26:b9:62:e3:a7:cf:0e:1b:f6:32: 87:c0:13:a8:e5:4d:24:95:4e:ee:82:9c:13:21:dd:1e:54:68: 14:05:67:9f:22:e5:2e:37:89:0d:e3:f1:6a:a6:2e:32:ff:a1: 90:1e:d7:29:f9:b5:c4:68:e0:3e:a3:43:50:ba:7c:8a:9d:d6: e2:b9:f6:f5:00:bc:c7:85:0f:a2:b0:b1:6a:cf:55:7c:7b:2f: 27:63:3f:01:6d:e0:65:05:99:5e:1f:a4:1a:1a:4a:cd:ec:c3: 64:8a:07:6b:da:a7:2c:39:3a:2e:cf:23:61:72:f3:37:09:80: 11:b1:5e:81:9d:1d:15:25:4d:8d:b7:66:31:f1:6a:68:36:65: 10:5d:19:e5:1d:4b:a5:94:11:a8:b8:28:31:11:c0:92:b6:d7: 07:a8:bc:bc:ba:14:ae:19:5c:af:57:18:56:e7:94:ca:4a:5a: 80:bb:53:68:40:7f:df:58:f5:8e:f2:3b:2c:8a:89:6b:c8:1d: f2:20:55:45:bb:84:fd:2f:67:6e:4f:df:68:c7:0b:cf:e4:0e: 9a:7f:33:77:c4:b6:23:b7:40:72:23:5e:ab:19:dc:9a:c8:5e: 83:75:d5:c4:ae:c7:2f:a0:23:95:8c:5f:a4:d9:2d:8c:3a:6f: af:37:6b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh3HLtypbDmRlv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZjM2I1MzktYWVjOC00YWJlLTgzN2UtZWVmN2FmNDE2NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N94NqrELL8JY2H47Thy4t35S9kqNIC5u0X8 4jEsiYF9/lKcvzac4eGiujGsR/KZGrh0wgjg6IBEwMPQIZQlO2yk4E3t27m5Slei meuW6ANRgMv9Q+wCK/Krg4DvCSFQDIGp8HBQ46D41MUaCblq32X2XsQlGXe8P5pc JmOsL4C8bmbFWJS+fNWHU5hr310b/WOjfu75zerejDx8z3KUEJTYt8/QHzqY/9HR VFD8d268NsfokBSZlPD7zWTyz5tjvVHE5X4yzN36sWYEJy3zi0G1E+J+oxDg+v9X QzQHds02V+a0qTcjNKm9PcnTauz2VSbfb7glelg09nqbvvwPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBnb91QDHm4zdagMTuQP6BPnSKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdmNGViNDctZDkyNC0z MDhlLTljMjUtY2ZiNWI1ZDNmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwlm3WquLR4Jrli46fPDhv2MofAE6jlTSSVTu6CnBMh3R5UaBQFZ58i 5S43iQ3j8WqmLjL/oZAe1yn5tcRo4D6jQ1C6fIqd1uK59vUAvMeFD6KwsWrPVXx7 LydjPwFt4GUFmV4fpBoaSs3sw2SKB2vapyw5Oi7PI2Fy8zcJgBGxXoGdHRUlTY23 ZjHxamg2ZRBdGeUdS6WUEai4KDERwJK21weovLy6FK4ZXK9XGFbnlMpKWoC7U2hA f99Y9Y7yOyyKiWvIHfIgVUW7hP0vZ25P32jHC8/kDpp/M3fEtiO3QHIjXqsZ3JrI XoN11cSuxy+gI5WMX6TZLYw6b683a8k= -----END CERTIFICATE-----Generated at Sat Sep 26 00:02:27 2026 by rpki-client