$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/488cfac6-90c4-3f8b-81d3-94f1e703b5f4.roa File: 488cfac6-90c4-3f8b-81d3-94f1e703b5f4.roa (raw, json) Hash identifier: MkV99uS9vjQj9er/4C5Do4Ck6xZ49CPRsx+2a8Csyws= Subject key identifier: 50:E9:44:D3:2E:92:44:B8:B3:F6:E3:C4:00:34:FA:73:99:92:4E:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6D4DDB31D5C300268E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/488cfac6-90c4-3f8b-81d3-94f1e703b5f4.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.180.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6d:4d:db:31:d5:c3:00:26:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=e396f516-a7aa-4186-9e71-29f83bbc357c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:39:e6:87:bd:87:5c:d5:99:26:a7:56:f8: 8e:cd:83:7f:07:e3:7f:44:73:dd:cc:1e:f1:66:f7: 4b:a6:e3:45:66:75:50:c3:1c:86:73:a4:e3:f0:7f: d9:ad:c0:69:a7:c4:b0:7f:63:57:97:6f:c2:b4:85: 9a:bb:15:3b:45:fb:65:79:ba:51:17:46:ec:29:85: e9:46:a2:4e:7a:6c:76:48:39:de:e5:e5:6d:6d:61: 92:1a:47:15:dc:68:e7:16:fe:7f:57:fa:76:b1:ff: 48:df:4a:4c:a1:56:b9:10:cb:07:66:4a:ea:7e:d7: 9b:57:7d:ad:1b:89:5e:77:13:d0:78:54:f8:c0:4a: 04:6d:a9:64:8b:b0:dc:2b:80:7d:ce:a4:a3:34:82: 88:9d:5d:1a:c5:98:f7:8a:03:36:69:0f:79:c2:49: d7:06:1b:79:fc:31:d2:34:e6:38:18:a0:2d:8d:5e: a0:3d:1f:2e:f8:58:cb:8a:dc:c7:8b:fc:bf:e8:44: 9e:60:a0:db:ea:35:b7:05:e6:6e:0e:b9:01:25:8d: 31:3d:5d:49:63:51:11:f8:93:fb:ca:f2:0d:41:12: 42:91:17:3f:dd:76:52:61:95:1e:f9:df:07:74:6b: c3:4f:c7:0d:ac:d4:f0:f7:fe:e4:02:67:7f:b9:f2: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:44:D3:2E:92:44:B8:B3:F6:E3:C4:00:34:FA:73:99:92:4E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/488cfac6-90c4-3f8b-81d3-94f1e703b5f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b3:ad:71:17:cd:34:b5:33:0a:90:f8:bf:25:cc:1c:1d:eb: 00:84:80:c6:29:c2:d9:b6:7d:77:75:13:90:62:b6:2b:30:c2: b8:df:e9:55:38:b7:b4:6d:b5:6a:69:5a:21:4d:72:ef:95:2d: 9a:38:30:c4:96:5d:da:d2:30:fb:3f:06:04:0f:36:80:9b:7d: 38:eb:ae:ad:26:e2:da:59:a3:7b:d6:a1:90:6f:4b:f0:62:d8: 8e:76:e8:32:28:d7:57:aa:ec:dd:33:b5:b5:5e:ea:c5:75:04: 0f:e7:ea:de:52:db:2e:47:dd:4f:fb:64:9f:c3:a0:95:3f:bd: c4:4a:8d:28:8d:11:d8:f9:07:aa:7e:a3:22:4f:e7:e4:29:d6: c9:c3:9f:d8:ab:1f:a7:eb:e4:34:ad:3f:19:8c:d4:26:3b:7e: f4:9c:70:9b:d3:20:40:57:ab:67:e2:51:39:61:cd:ae:26:73: 69:c9:c9:7f:e9:4b:84:04:ed:99:47:86:0f:fa:53:02:70:29: a5:2f:4a:0f:e1:f3:1f:cd:a2:6b:ad:80:51:88:75:90:95:6a: 66:31:66:7f:eb:17:14:6d:9a:fb:00:86:db:12:81:11:03:40: 3d:07:ee:05:0c:47:9b:ca:f4:ca:ff:48:46:ba:01:0d:58:77: b8:64:6c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3W1N2zHVwwAmjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTM5NmY1MTYtYTdhYS00MTg2LTllNzEtMjlmODNiYmMzNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+w55oe9h1zVmSanVviOzYN/B+N/RHPdzB7x ZvdLpuNFZnVQwxyGc6Tj8H/ZrcBpp8Swf2NXl2/CtIWauxU7RftlebpRF0bsKYXp RqJOemx2SDne5eVtbWGSGkcV3GjnFv5/V/p2sf9I30pMoVa5EMsHZkrqftebV32t G4ledxPQeFT4wEoEbalki7DcK4B9zqSjNIKInV0axZj3igM2aQ95wknXBht5/DHS NOY4GKAtjV6gPR8u+FjLitzHi/y/6ESeYKDb6jW3BeZuDrkBJY0xPV1JY1ER+JP7 yvINQRJCkRc/3XZSYZUe+d8HdGvDT8cNrNTw9/7kAmd/ufIHdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDpRNMukkS4s/bjxAA0+nOZkk7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDg4Y2ZhYzYtOTBjNC0z ZjhiLTgxZDMtOTRmMWU3MDNiNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFezrXEXzTS1MwqQ+L8lzBwd6wCEgMYpwtm2fXd1E5Bitiswwrjf6VU4 t7RttWppWiFNcu+VLZo4MMSWXdrSMPs/BgQPNoCbfTjrrq0m4tpZo3vWoZBvS/Bi 2I526DIo11eq7N0ztbVe6sV1BA/n6t5S2y5H3U/7ZJ/DoJU/vcRKjSiNEdj5B6p+ oyJP5+Qp1snDn9irH6fr5DStPxmM1CY7fvSccJvTIEBXq2fiUTlhza4mc2nJyX/p S4QE7ZlHhg/6UwJwKaUvSg/h8x/NomutgFGIdZCVamYxZn/rFxRtmvsAhtsSgRED QD0H7gUMR5vK9Mr/SEa6AQ1Yd7hkbIA= -----END CERTIFICATE-----Generated at Wed Sep 23 11:47:24 2026 by rpki-client