$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f4efdef-d222-3af4-b0ee-b234f1d55774.roa File: 2f4efdef-d222-3af4-b0ee-b234f1d55774.roa (raw, json) Hash identifier: p8C2MXGrd6QEITIJlqjBxI5+Y4vLEkKFpKXXnskixnI= Subject key identifier: EC:1C:68:0E:67:A5:C7:5F:DC:2C:31:2F:75:D2:42:FB:0F:09:81:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD44EF419CC3D17C563F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f4efdef-d222-3af4-b0ee-b234f1d55774.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.189.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:44:ef:41:9c:c3:d1:7c:56:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=4a967e79-b122-4e66-b9ef-ba1be588dbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:34:ba:7e:d0:75:f1:f8:79:7a:36:58:96: e2:5d:b7:e4:a9:93:9a:a1:dc:f5:10:d2:5b:5d:43: 98:bd:dc:66:a6:77:bd:78:27:70:d4:e0:e0:a5:49: 36:12:b7:c4:40:55:33:62:5a:2c:46:27:d4:e4:8d: af:8c:a8:5b:8d:66:4c:55:0b:73:ca:eb:af:33:82: 39:6a:88:67:04:7e:0c:f3:ff:61:7a:8a:ad:08:15: ea:cf:74:e9:4e:a3:cc:5e:85:09:64:a3:0b:30:0d: 5c:89:f5:5b:b1:66:b4:f9:c4:74:a4:dc:38:fc:d0: b1:cb:5d:99:d6:6a:6d:40:3c:2b:c5:14:e0:42:0f: 4d:0e:10:d6:63:2d:f8:73:32:66:ac:f3:62:db:93: e6:25:55:1b:c5:6d:b5:96:08:f9:90:9e:bf:61:09: d8:2e:3a:89:a9:37:00:0b:87:ae:04:07:0e:4d:49: b0:26:a4:47:a7:2e:43:13:4c:8d:64:e8:3a:8e:07: 0b:5f:1c:04:a1:bc:db:b6:aa:99:47:17:72:7f:55: 91:19:86:9a:29:38:20:b7:08:b1:c6:6b:e4:ab:8a: 5f:ca:d6:4c:29:5d:a5:31:e4:67:49:65:9d:59:a3: bc:0f:0a:c2:d0:cf:2b:8c:fe:2c:21:30:44:3b:f7: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1C:68:0E:67:A5:C7:5F:DC:2C:31:2F:75:D2:42:FB:0F:09:81:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f4efdef-d222-3af4-b0ee-b234f1d55774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:af:21:4a:30:05:55:85:5b:02:9b:a2:67:39:01:ca:5b:17: 35:bf:0a:5f:4b:cf:cb:7b:80:c4:3a:04:b0:9d:37:56:67:a2: e8:11:3a:a5:c6:a4:75:28:6c:07:c4:df:87:71:b3:9d:85:aa: fa:d4:66:11:47:5a:14:86:62:c0:4b:68:a3:e7:2a:7c:28:3d: ea:40:96:62:94:30:3d:01:7f:21:08:f3:48:dc:7c:78:f8:82: 21:56:e3:73:bb:d4:eb:5d:01:a3:b3:38:a8:27:22:b1:9b:b1: 9c:37:07:34:1b:7c:d7:1e:1c:18:f0:21:20:b3:25:08:2e:56: 73:52:79:bd:56:7b:12:93:ca:ae:d7:92:52:9c:cb:d5:df:5b: d8:96:6d:6c:54:65:8d:23:66:91:7c:60:e7:04:f1:6f:9c:40: 74:19:14:bf:25:1e:22:9c:30:91:31:9b:69:dc:14:77:f4:cf: f4:6b:f8:c9:c1:14:6b:fb:93:dd:4d:f4:4b:0e:31:27:ce:f6: a4:f5:54:1e:8a:c1:d0:d3:75:01:d1:bd:13:c7:ef:65:35:f7: 8f:32:d0:c9:69:0f:cd:bf:2a:5c:4f:76:33:8b:69:0a:b8:99: b2:1f:5e:c5:cf:51:24:2f:29:c0:47:5c:15:6a:0c:c4:d5:af: 13:72:0b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UTvQZzD0XxWP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NGE5NjdlNzktYjEyMi00ZTY2LWI5ZWYtYmExYmU1ODhkYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneo0un7QdfH4eXo2WJbiXbfkqZOaodz1ENJb XUOYvdxmpne9eCdw1ODgpUk2ErfEQFUzYlosRifU5I2vjKhbjWZMVQtzyuuvM4I5 aohnBH4M8/9heoqtCBXqz3TpTqPMXoUJZKMLMA1cifVbsWa0+cR0pNw4/NCxy12Z 1mptQDwrxRTgQg9NDhDWYy34czJmrPNi25PmJVUbxW21lgj5kJ6/YQnYLjqJqTcA C4euBAcOTUmwJqRHpy5DE0yNZOg6jgcLXxwEobzbtqqZRxdyf1WRGYaaKTggtwix xmvkq4pfytZMKV2lMeRnSWWdWaO8DwrC0M8rjP4sITBEO/eBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwcaA5npcdf3CwxL3XSQvsPCYFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY0ZWZkZWYtZDIyMi0z YWY0LWIwZWUtYjIzNGYxZDU1Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6vIUowBVWFWwKbomc5AcpbFzW/Cl9Lz8t7gMQ6BLCdN1ZnougROqXG pHUobAfE34dxs52FqvrUZhFHWhSGYsBLaKPnKnwoPepAlmKUMD0BfyEI80jcfHj4 giFW43O71OtdAaOzOKgnIrGbsZw3BzQbfNceHBjwISCzJQguVnNSeb1WexKTyq7X klKcy9XfW9iWbWxUZY0jZpF8YOcE8W+cQHQZFL8lHiKcMJExm2ncFHf0z/Rr+MnB FGv7k91N9EsOMSfO9qT1VB6KwdDTdQHRvRPH72U1948y0MlpD82/KlxPdjOLaQq4 mbIfXsXPUSQvKcBHXBVqDMTVrxNyC7k= -----END CERTIFICATE-----Generated at Thu Sep 24 04:05:04 2026 by rpki-client