$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa File: 499aa5bf-1b78-30fb-9cc6-654f68632119.roa (raw, json) Hash identifier: pT1aU+FDO4OIsncOwmqbmloRB+nsOgkRh0UWq1DE3P8= Subject key identifier: 9C:84:EE:AD:F6:AD:78:A2:4F:21:F2:83:06:54:6C:52:53:1E:3A:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD40AD0D05C0AC16E5E980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.173.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:40:ad:0d:05:c0:ac:16:e5:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=f6bfd216-f835-4cfe-81e2-b110b562a4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:0e:a7:a7:d8:a9:df:b0:bb:02:43:2d:0d: aa:82:08:97:00:2f:6f:58:00:5b:f8:60:94:60:13: 88:36:f3:79:b9:59:59:46:33:19:d6:27:a0:89:e9: 0b:cd:40:f7:d8:e6:fc:53:39:3e:c5:0f:7a:d3:9d: ee:53:eb:6f:5e:db:36:6d:21:23:90:a5:71:d7:87: 56:7d:32:66:c1:3b:5f:a5:56:ef:ce:b0:84:da:7b: 0e:77:4c:ff:ab:72:e6:7e:2e:ba:b0:8d:d5:f2:55: 73:11:04:e1:5b:7d:05:bd:46:da:2d:80:49:31:cc: f5:c3:a9:8a:cf:d3:24:8f:85:92:91:b8:eb:fe:45: 65:b1:50:80:8d:dd:b3:20:69:1e:09:59:47:da:de: b8:ec:75:e2:66:41:c3:e1:77:6e:33:d1:d9:5b:18: 73:5f:94:b9:e5:b5:b4:ad:14:b7:e6:60:90:33:5c: e5:55:da:73:81:c7:21:78:0d:e1:59:e4:c8:ef:2e: 23:e9:51:d3:92:f5:09:94:1a:9a:5d:5f:c8:40:20: 42:24:66:58:bc:dd:d2:aa:ae:51:3d:dc:05:49:f0: 24:fd:19:79:98:3a:a6:3c:18:a5:fa:63:d8:0f:c4: 2a:c0:f2:2d:2f:3c:17:95:9e:ad:9f:41:9c:24:39: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:EE:AD:F6:AD:78:A2:4F:21:F2:83:06:54:6C:52:53:1E:3A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:28:85:d7:d5:b4:95:5c:88:94:bc:11:f9:7a:06:48:51:0b: c0:e9:43:3e:2d:d1:8c:ee:17:27:c1:86:25:5a:8d:b6:4a:c9: de:2a:29:ac:d9:23:48:91:52:9e:e5:0b:a7:47:77:1d:a5:6b: 69:32:72:fb:41:31:bc:87:eb:ac:cc:41:85:15:51:41:b5:e1: a3:26:d6:2a:9c:21:67:76:6c:22:4a:46:c2:70:e7:67:5d:e4: 8e:67:75:ea:18:c4:66:4f:fb:e2:e9:d8:fb:ba:5b:0b:85:8c: bc:3f:24:bd:a8:1a:94:ec:52:40:7b:04:39:e9:05:f4:d4:04: 0c:60:73:a6:f3:dc:7a:a5:47:a7:22:9d:2d:bb:2b:5b:b6:34: e1:f2:c9:b9:10:75:fe:a1:f4:5f:34:f3:45:c2:1a:13:80:1c: 28:17:c0:ad:49:71:d5:30:26:08:78:7d:c1:fb:f7:9a:46:0f: 10:74:3d:34:c5:76:0c:cd:c1:fa:ab:12:a3:f2:c1:91:31:14: 92:59:42:7b:cd:d8:8f:2f:79:d8:3c:c8:e5:38:e3:94:b4:7d: 5b:3a:c9:38:73:b8:b9:bd:e3:df:38:d3:e5:bb:35:31:f1:4b: ec:67:9a:53:a0:a2:a7:e8:d5:90:f8:3b:9b:cc:27:af:d5:94: 98:80:86:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UCtDQXArBbl6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjZiZmQyMTYtZjgzNS00Y2ZlLTgxZTItYjExMGI1NjJhNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxsOp6fYqd+wuwJDLQ2qggiXAC9vWABb+GCU YBOINvN5uVlZRjMZ1iegiekLzUD32Ob8Uzk+xQ96053uU+tvXts2bSEjkKVx14dW fTJmwTtfpVbvzrCE2nsOd0z/q3Lmfi66sI3V8lVzEQThW30FvUbaLYBJMcz1w6mK z9Mkj4WSkbjr/kVlsVCAjd2zIGkeCVlH2t647HXiZkHD4XduM9HZWxhzX5S55bW0 rRS35mCQM1zlVdpzgccheA3hWeTI7y4j6VHTkvUJlBqaXV/IQCBCJGZYvN3Sqq5R PdwFSfAk/Rl5mDqmPBil+mPYD8QqwPItLzwXlZ6tn0GcJDmnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyE7q32rXiiTyHygwZUbFJTHjroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDk5YWE1YmYtMWI3OC0z MGZiLTljYzYtNjU0ZjY4NjMyMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0ohdfVtJVciJS8Efl6BkhRC8DpQz4t0YzuFyfBhiVajbZKyd4qKazZ I0iRUp7lC6dHdx2la2kycvtBMbyH66zMQYUVUUG14aMm1iqcIWd2bCJKRsJw52dd 5I5ndeoYxGZP++Lp2Pu6WwuFjLw/JL2oGpTsUkB7BDnpBfTUBAxgc6bz3HqlR6ci nS27K1u2NOHyybkQdf6h9F8080XCGhOAHCgXwK1JcdUwJgh4fcH795pGDxB0PTTF dgzNwfqrEqPywZExFJJZQnvN2I8vedg8yOU445S0fVs6yThzuLm949840+W7NTHx S+xnmlOgoqfo1ZD4O5vMJ6/VlJiAhlU= -----END CERTIFICATE-----Generated at Sat Sep 26 03:46:27 2026 by rpki-client