$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa File: 2aa97c3d-3754-3e18-ad66-0856ce43a922.roa (raw, json) Hash identifier: lKrFRQHmB65LUI/e3RM6NKbn/I1EdiFNq9ozn+KIQgU= Subject key identifier: E2:39:18:9C:ED:E1:71:DC:E9:7A:C6:25:2C:59:2B:69:C7:49:10:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DC135B6AE2030F095239D8300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22773 IP address blocks: 70.189.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:b6:ae:20:30:f0:95:23:9d:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=a3fb8d80-5e57-41bc-a337-e2197bb04f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:e2:71:a4:e1:ee:ec:73:7e:dd:40:fb:a1: fa:5f:9e:92:db:83:fa:9e:39:cf:e0:ec:8c:98:8f: 73:df:6a:a0:98:2b:6a:42:37:22:dd:67:03:37:18: af:88:37:b7:dc:1d:32:b8:22:eb:97:03:1c:2b:8a: 4f:7e:4a:f6:0b:25:e3:3a:3e:82:4d:d8:f9:11:fc: af:e9:d7:7a:9e:5e:ca:a6:3b:d8:ed:eb:8e:cf:ad: ab:39:4a:89:7d:86:54:7c:c6:89:c1:fd:62:a7:e4: 7b:5a:8b:8a:05:d6:15:4b:d5:ac:f1:2a:bb:e0:bd: a0:de:57:05:4d:62:8a:4b:71:4b:bf:02:a7:ca:93: 1e:46:0f:3a:52:de:f5:74:da:7e:42:7d:3a:84:b4: 40:ac:05:12:e2:ce:f0:58:80:f1:32:5b:84:e3:19: 59:33:5d:46:ff:79:ea:6c:55:ad:96:96:64:3e:64: 99:34:8c:0d:30:58:60:b2:59:d3:94:11:c9:35:94: 5e:30:8d:c3:3d:e5:6f:f0:29:f5:7f:7b:68:1a:e5: 26:ba:bc:fc:ff:d9:dc:32:20:cb:21:d6:54:69:4b: c9:cf:40:23:3f:33:72:dc:08:51:74:6a:ad:64:e3: 8c:60:5e:36:2e:dc:64:47:ae:2a:88:71:af:c4:f2: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:18:9C:ED:E1:71:DC:E9:7A:C6:25:2C:59:2B:69:C7:49:10:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa97c3d-3754-3e18-ad66-0856ce43a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:de:29:b4:15:b4:b0:df:d9:af:38:be:0f:0a:30:e1:bb:44: 7d:bc:c6:b1:39:b8:31:5d:0d:42:5f:33:39:fd:4a:0e:ed:54: d0:1a:48:8e:8f:09:a5:95:11:77:b9:ba:83:4a:92:04:9c:9d: de:a0:76:1e:46:7d:4a:37:55:e0:24:bb:8c:9c:4d:be:95:83: 82:d3:fb:c3:f6:11:c6:94:b2:eb:84:ec:41:76:e2:0c:c0:2b: 50:20:2c:56:fb:54:4b:a8:d3:e3:1e:6a:89:8d:fd:23:e7:b8: 32:f5:d9:85:ca:e6:06:51:71:2b:be:3b:bf:8c:56:c8:f3:9d: 39:a5:3d:b5:3a:f1:39:8e:14:bf:79:e6:63:2d:79:d0:32:61: 69:96:9e:d4:b4:4e:f1:41:9b:88:34:bf:6c:65:05:17:58:de: 78:2f:83:a7:66:8e:73:ff:d3:70:cd:4f:4f:ad:19:1f:da:4d: c2:1e:2e:32:f1:c2:9c:f7:8d:79:1f:67:31:6d:cb:a6:17:2b: 0b:ad:71:af:7d:87:3a:ab:3b:80:44:43:1d:b6:78:88:6e:c9: 73:5e:66:cb:9e:9b:39:ee:17:25:e0:45:07:0e:e3:3f:3c:91: 3b:d7:6b:16:da:96:7d:3d:75:2a:39:41:58:2a:99:a5:09:36: 44:02:7f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNbauIDDwlSOdgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk YTNmYjhkODAtNWU1Ny00MWJjLWEzMzctZTIxOTdiYjA0ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvTicaTh7uxzft1A+6H6X56S24P6njnP4OyM mI9z32qgmCtqQjci3WcDNxiviDe33B0yuCLrlwMcK4pPfkr2CyXjOj6CTdj5Efyv 6dd6nl7KpjvY7euOz62rOUqJfYZUfMaJwf1ip+R7WouKBdYVS9Ws8Sq74L2g3lcF TWKKS3FLvwKnypMeRg86Ut71dNp+Qn06hLRArAUS4s7wWIDxMluE4xlZM11G/3nq bFWtlpZkPmSZNIwNMFhgslnTlBHJNZReMI3DPeVv8Cn1f3toGuUmurz8/9ncMiDL IdZUaUvJz0AjPzNy3AhRdGqtZOOMYF42LtxkR64qiHGvxPIzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI5GJzt4XHc6XrGJSxZK2nHSRBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhOTdjM2QtMzc1NC0z ZTE4LWFkNjYtMDg1NmNlNDNhOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/eKbQVtLDf2a84vg8KMOG7RH28xrE5uDFdDUJfMzn9Sg7tVNAaSI6P CaWVEXe5uoNKkgScnd6gdh5GfUo3VeAku4ycTb6Vg4LT+8P2EcaUsuuE7EF24gzA K1AgLFb7VEuo0+MeaomN/SPnuDL12YXK5gZRcSu+O7+MVsjznTmlPbU68TmOFL95 5mMtedAyYWmWntS0TvFBm4g0v2xlBRdY3ngvg6dmjnP/03DNT0+tGR/aTcIeLjLx wpz3jXkfZzFty6YXKwutca99hzqrO4BEQx22eIhuyXNeZsuemznuFyXgRQcO4z88 kTvXaxbaln09dSo5QVgqmaUJNkQCf+g= -----END CERTIFICATE-----Generated at Wed May 13 07:51:27 2026 by rpki-client