$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa File: 434bc3ee-7616-35ca-a203-7e16994ae753.roa (raw, json) Hash identifier: JvIfMiovoYgQ2fgLgjEzB/zzgU2pNYRRvIi4HJyPlbI= Subject key identifier: AC:1F:E9:B7:39:70:E1:C6:58:B3:D4:38:FF:99:35:CA:CB:A5:1E:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112DAF35DA786E9E7D1F600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:da:f3:5d:a7:86:e9:e7:d1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=ba653afe-68d2-482d-87d9-925fe0d6dff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:b3:91:a6:3d:12:99:74:2d:e4:d3:1d:d0: 81:64:22:fb:6c:b9:3c:3c:7d:48:6d:54:db:ca:3c: bc:7d:a4:9f:b1:65:20:b7:a4:bd:07:73:71:9f:17: b4:ce:72:b9:1f:13:10:3e:1c:0e:72:63:b3:ce:75: 7e:b8:c8:bd:ff:37:80:27:8f:f3:6a:7f:79:8a:ec: ae:8a:17:bd:30:26:9e:4b:3e:01:f0:74:d5:46:1b: 9f:e2:5e:7a:de:d9:06:89:47:09:a2:4f:f9:4d:ac: 48:01:b0:eb:e4:4f:18:c5:3d:8d:58:8b:31:68:bd: 20:ae:b2:76:c6:3a:49:b1:fa:97:ef:e6:0d:35:aa: eb:87:6a:f9:9c:a0:8a:a6:f5:94:a4:15:bd:96:58: a2:fb:f0:e6:92:ed:1d:65:63:4e:52:f8:b1:56:7f: 0e:3a:ae:a5:19:0c:c2:4e:e0:43:72:a8:b9:23:24: 45:40:82:ad:b6:de:22:c1:c1:1b:a5:04:bc:49:f5: cf:65:35:f8:ef:a5:ba:f5:cc:f7:83:9e:42:d9:1a: a4:be:7b:7f:55:19:f5:31:15:14:12:85:a7:77:46: f7:50:20:33:11:c1:01:bd:2f:12:28:78:a6:1e:7f: 50:da:3c:bf:3f:03:19:ec:ed:a5:6a:f4:ec:ac:4e: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:E9:B7:39:70:E1:C6:58:B3:D4:38:FF:99:35:CA:CB:A5:1E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:42:d0:81:5e:da:9e:62:b0:46:9e:9e:c7:40:57:f8:6f:37: ed:51:b4:2e:6b:f3:a5:b0:c1:d4:e3:cb:e3:a2:1e:f7:84:b5: 6b:1a:b4:95:8f:bf:69:fd:ad:d5:68:c7:47:45:da:55:6f:ab: 04:e4:f1:49:00:c7:2e:c0:c0:d1:10:2f:f0:6e:7e:4d:ab:39: 27:6e:a3:d5:3f:69:36:21:43:9e:54:be:fa:7e:62:c9:94:2a: 2a:3f:4e:eb:44:4f:0d:8f:53:97:cf:1c:3b:1e:50:bc:b1:88: 6d:dc:1c:be:36:5b:89:b7:e3:a6:c7:9b:c7:04:89:6b:77:52: 24:1d:ec:00:cf:f2:5a:72:62:bd:69:3c:f0:bf:98:8a:ea:71: 9f:70:3e:36:59:1d:4d:77:d1:13:cf:b2:0b:44:b0:fb:0e:44: 83:27:12:da:6a:1b:27:38:d2:d8:85:98:e1:0d:d3:54:54:12: 22:9e:6a:f0:c2:87:ee:4f:aa:16:95:0a:11:08:79:1e:c5:80: 70:fb:e4:a2:8f:c7:97:0f:69:97:0a:13:31:15:38:6a:19:5b: 95:92:e4:74:ae:73:0d:87:be:5c:d3:d8:d9:9d:ac:e7:f0:1c: fc:e0:ae:4a:40:9a:5f:b0:bb:57:f8:40:16:8a:8d:70:c1:24: 3a:79:89:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEtrzXaeG6efR9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YmE2NTNhZmUtNjhkMi00ODJkLTg3ZDktOTI1ZmUwZDZkZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlizkaY9Epl0LeTTHdCBZCL7bLk8PH1IbVTb yjy8faSfsWUgt6S9B3Nxnxe0znK5HxMQPhwOcmOzznV+uMi9/zeAJ4/zan95iuyu ihe9MCaeSz4B8HTVRhuf4l563tkGiUcJok/5TaxIAbDr5E8YxT2NWIsxaL0grrJ2 xjpJsfqX7+YNNarrh2r5nKCKpvWUpBW9llii+/Dmku0dZWNOUvixVn8OOq6lGQzC TuBDcqi5IyRFQIKttt4iwcEbpQS8SfXPZTX476W69cz3g55C2Rqkvnt/VRn1MRUU EoWnd0b3UCAzEcEBvS8SKHimHn9Q2jy/PwMZ7O2lavTsrE4CywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwf6bc5cOHGWLPUOP+ZNcrLpR6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM0YmMzZWUtNzYxNi0z NWNhLWEyMDMtN2UxNjk5NGFlNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFC0IFe2p5isEaensdAV/hvN+1RtC5r86WwwdTjy+OiHveEtWsatJWP v2n9rdVox0dF2lVvqwTk8UkAxy7AwNEQL/Bufk2rOSduo9U/aTYhQ55Uvvp+YsmU Kio/TutETw2PU5fPHDseULyxiG3cHL42W4m346bHm8cEiWt3UiQd7ADP8lpyYr1p PPC/mIrqcZ9wPjZZHU130RPPsgtEsPsORIMnEtpqGyc40tiFmOEN01RUEiKeavDC h+5PqhaVChEIeR7FgHD75KKPx5cPaZcKEzEVOGoZW5WS5HSucw2HvlzT2NmdrOfw HPzgrkpAml+wu1f4QBaKjXDBJDp5iX8= -----END CERTIFICATE-----Generated at Fri Sep 25 03:24:23 2026 by rpki-client