$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa File: 2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa (raw, json) Hash identifier: jTJWTqXp1DRyMLMJ9Ef7EUxoJb1rqGTnGQZgZ32FBcs= Subject key identifier: C6:DC:D3:3B:F3:26:BA:FE:E8:96:02:5E:4F:CC:AB:86:69:83:AD:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD0703BE79E6258F24F9980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 70.190.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:70:3b:e7:9e:62:58:f2:4f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=a1a0e5e0-0a07-4bc3-9334-1ee815fb7c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:63:81:bf:93:de:1b:8d:2c:fc:38:3c:84: 77:8b:0a:c7:38:79:2b:7e:7e:11:70:af:18:d1:72: ea:2a:cc:57:1e:d8:8e:f6:1f:26:0e:e7:64:06:01: ea:80:00:b4:fc:b8:e3:46:59:f3:2a:72:5e:83:56: b1:4a:85:ce:d0:cb:37:37:d8:ba:f6:56:43:23:95: c0:e8:75:70:10:9b:14:ec:c6:0e:12:2a:d7:d0:c4: 20:c9:b8:cb:fd:14:18:23:00:fe:b4:1f:0f:2c:44: 04:67:dc:c7:c3:7f:f2:64:06:cf:07:89:18:e6:ae: 34:7c:8c:9d:64:ba:ed:c2:fc:3b:bc:d6:d3:76:5d: fc:27:1c:15:24:b0:d4:3c:3b:7a:af:93:7f:03:24: e8:f0:fa:31:c3:47:c6:37:ad:2e:35:99:8d:cd:a5: 05:6d:b4:28:59:a0:12:59:de:f7:ef:fe:f5:1a:56: 32:df:82:02:ce:b0:f2:26:be:51:6b:bb:42:d2:46: 45:9a:4a:5a:90:b2:bb:31:e5:f1:35:8e:ea:e9:49: 3e:66:59:77:44:f8:6e:6a:88:3b:27:d3:51:71:ba: 1b:82:85:4e:12:b1:48:d5:d6:17:b9:82:ce:7e:b8: b8:ca:53:5f:9b:c9:55:bc:eb:d0:49:10:12:42:22: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:D3:3B:F3:26:BA:FE:E8:96:02:5E:4F:CC:AB:86:69:83:AD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:50:98:37:b7:a8:06:aa:eb:cb:3a:93:35:6a:c2:e9:22:e6: 59:c2:8a:a0:50:24:7e:9c:4a:30:71:5a:bb:8b:2f:78:e5:a0: af:46:2b:d4:88:6d:87:12:4d:13:c8:a3:5a:1e:cd:2b:de:62: e1:4b:ae:3e:b1:9f:51:45:e0:8a:48:2d:7d:96:a5:08:84:92: 74:0b:f9:76:67:9c:ac:1c:f7:d0:24:2e:6d:93:40:b3:af:c7: 51:8b:13:82:f4:e0:4e:5d:98:e1:68:b6:d1:27:05:89:c9:df: 5a:b8:d4:11:00:72:e4:f9:a6:05:44:33:0b:78:55:34:73:e2: 0d:5b:00:44:15:02:82:24:7f:96:ba:8c:17:3a:95:d3:d7:48: 76:bb:a2:ea:6b:50:2e:53:01:26:4b:1d:62:2f:87:7a:5a:a0: 17:23:ad:3e:27:2e:30:fc:64:02:c3:a4:f3:2a:72:a1:d9:b1: 65:f0:46:e9:41:a5:df:77:b1:3b:f6:f0:02:52:83:84:01:88: 50:33:01:44:60:c4:f8:fc:22:e6:71:50:e1:b0:47:a3:26:35: 36:47:72:1c:5f:97:bc:81:7b:43:24:00:07:7c:7d:28:72:f2: a8:f0:da:bd:e3:2e:f6:3f:74:bc:cb:77:8f:68:02:67:68:cc: 63:e2:c0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0HA7555iWPJPmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YTFhMGU1ZTAtMGEwNy00YmMzLTkzMzQtMWVlODE1ZmI3Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycRjgb+T3huNLPw4PIR3iwrHOHkrfn4RcK8Y 0XLqKsxXHtiO9h8mDudkBgHqgAC0/LjjRlnzKnJeg1axSoXO0Ms3N9i69lZDI5XA 6HVwEJsU7MYOEirX0MQgybjL/RQYIwD+tB8PLEQEZ9zHw3/yZAbPB4kY5q40fIyd ZLrtwvw7vNbTdl38JxwVJLDUPDt6r5N/AyTo8Poxw0fGN60uNZmNzaUFbbQoWaAS Wd737/71GlYy34ICzrDyJr5Ra7tC0kZFmkpakLK7MeXxNY7q6Uk+Zll3RPhuaog7 J9NRcbobgoVOErFI1dYXuYLOfri4ylNfm8lVvOvQSRASQiItXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbc0zvzJrr+6JYCXk/Mq4Zpg60VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmYyYWNmYTAtMDc5Zi0z NmNlLWEwMWUtOGZlODU5NTI0M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZQmDe3qAaq68s6kzVqwuki5lnCiqBQJH6cSjBxWruLL3jloK9GK9SI bYcSTRPIo1oezSveYuFLrj6xn1FF4IpILX2WpQiEknQL+XZnnKwc99AkLm2TQLOv x1GLE4L04E5dmOFottEnBYnJ31q41BEAcuT5pgVEMwt4VTRz4g1bAEQVAoIkf5a6 jBc6ldPXSHa7ouprUC5TASZLHWIvh3paoBcjrT4nLjD8ZALDpPMqcqHZsWXwRulB pd93sTv28AJSg4QBiFAzAURgxPj8IuZxUOGwR6MmNTZHchxfl7yBe0MkAAd8fShy 8qjw2r3jLvY/dLzLd49oAmdozGPiwLk= -----END CERTIFICATE-----Generated at Wed May 13 05:32:54 2026 by rpki-client