$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa File: 23777efa-a298-3c7e-a51e-d0679fa4e63d.roa (raw, json) Hash identifier: Nyyc9uVJiSkUL5wJSUFOEM66NPSUbOdAMCjT2NtU4fM= Subject key identifier: 37:F3:B2:B0:7F:1A:C0:BD:9C:7A:C2:78:62:33:19:7A:C9:52:84:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E53796566FEE3177C840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 70.190.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e5:37:96:56:6f:ee:31:77:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=5363e5cc-e3c8-45d9-bfb9-559860a8eafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:77:c2:a9:5b:ee:21:c1:e7:d7:ec:57:c8: a8:11:cb:bc:c3:92:4b:39:fa:e1:7f:b4:59:ef:23: 17:31:af:88:a7:98:40:a5:c3:d5:c5:63:1f:55:4a: 2c:b3:d5:9d:cb:43:96:6f:75:fb:b2:96:ed:b4:7e: 01:fb:ba:b6:1b:5d:c6:27:27:55:44:b6:c7:cf:85: 38:28:fc:66:3d:39:0a:72:52:48:5c:60:ed:a4:b1: 9e:b8:b8:75:f7:58:88:aa:94:c5:3b:ee:d0:98:bb: f2:73:92:39:aa:e3:6c:ef:1e:2d:b2:51:a9:88:6b: f8:dc:cb:3c:34:28:62:91:44:fc:d9:59:c6:01:77: 29:99:19:2f:e1:44:37:a4:83:30:6d:b7:ac:e2:b4: 21:a1:0d:af:c3:3a:a4:c8:6f:c2:95:6b:5a:77:5a: 96:4b:5a:b8:fb:49:f5:39:0f:21:ba:ad:18:f8:a6: 2a:06:c6:9b:30:8c:d7:2b:42:ae:81:3b:4f:19:82: cd:d9:6f:ec:70:5a:95:f1:75:7f:a6:e3:0a:9b:e3: 01:8b:ae:01:98:a2:a1:9c:d5:93:57:04:ea:d4:17: 9c:68:bc:2c:63:5e:16:64:02:53:e3:29:61:e6:42: 1b:98:e6:44:d1:23:1c:15:d9:cb:2f:84:a5:15:74: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:B2:B0:7F:1A:C0:BD:9C:7A:C2:78:62:33:19:7A:C9:52:84:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:09:ee:95:5d:b3:91:3d:cf:af:85:03:a8:b6:09:be:c5: f2:45:9d:83:7c:96:38:72:d9:c5:9b:e4:65:d7:ad:0c:1e:e2: 40:68:67:3d:49:32:99:f3:aa:90:5f:c7:8d:86:5b:16:48:44: 7e:63:4a:8e:b8:ca:7d:18:81:e7:d2:f8:60:f9:63:19:65:83: 3c:15:53:d1:c1:f1:4e:d0:26:d6:94:09:74:0d:e8:07:ca:8b: 34:bb:8c:32:a2:5b:b3:bd:21:06:18:ec:bb:ab:66:9f:19:78: bb:ee:25:3e:e1:02:7c:67:a6:9a:48:3b:eb:ec:f0:61:35:9e: 3b:b9:29:be:89:2d:7e:c6:f2:ee:cd:18:b8:a1:f7:81:93:cd: bf:ce:41:11:25:f3:8e:79:0b:3d:35:66:b8:33:47:8a:94:6c: f5:b2:56:8d:4c:5b:7a:2b:71:cf:64:c5:c9:d1:f4:1e:2a:74: 7b:d8:4c:bb:be:b1:9c:67:be:bf:b4:c1:63:e3:e7:00:3c:bf: 0a:a1:04:d4:d5:cf:0b:b1:11:80:97:33:7e:26:e2:0e:b5:fa: 8a:86:d3:0e:f1:0b:31:4a:3e:d7:92:4d:3e:29:18:99:36:8b: d0:86:9c:17:a8:78:84:05:09:ab:8d:0a:32:5d:d7:b9:7d:ae: a9:28:9b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+U3llZv7jF3yEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NTM2M2U1Y2MtZTNjOC00NWQ5LWJmYjktNTU5ODYwYThlYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnB3wqlb7iHB59fsV8ioEcu8w5JLOfrhf7RZ 7yMXMa+Ip5hApcPVxWMfVUoss9Wdy0OWb3X7spbttH4B+7q2G13GJydVRLbHz4U4 KPxmPTkKclJIXGDtpLGeuLh191iIqpTFO+7QmLvyc5I5quNs7x4tslGpiGv43Ms8 NChikUT82VnGAXcpmRkv4UQ3pIMwbbes4rQhoQ2vwzqkyG/ClWtad1qWS1q4+0n1 OQ8huq0Y+KYqBsabMIzXK0KugTtPGYLN2W/scFqV8XV/puMKm+MBi64BmKKhnNWT VwTq1BecaLwsY14WZAJT4ylh5kIbmOZE0SMcFdnLL4SlFXQNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfzsrB/GsC9nHrCeGIzGXrJUoQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjM3NzdlZmEtYTI5OC0z YzdlLWE1MWUtZDA2NzlmYTRlNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR1Ce6VXbORPc+vhQOotgm+xfJFnYN8ljhy2cWb5GXXrQwe4kBoZz1J MpnzqpBfx42GWxZIRH5jSo64yn0YgefS+GD5YxllgzwVU9HB8U7QJtaUCXQN6AfK izS7jDKiW7O9IQYY7LurZp8ZeLvuJT7hAnxnpppIO+vs8GE1nju5Kb6JLX7G8u7N GLih94GTzb/OQREl8455Cz01ZrgzR4qUbPWyVo1MW3orcc9kxcnR9B4qdHvYTLu+ sZxnvr+0wWPj5wA8vwqhBNTVzwuxEYCXM34m4g61+oqG0w7xCzFKPteSTT4pGJk2 i9CGnBeoeIQFCauNCjJd17l9rqkom44= -----END CERTIFICATE-----Generated at Fri Sep 25 19:55:04 2026 by rpki-client