$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa File: 0ff6af81-9112-3d31-b21c-6fd467b60608.roa (raw, json) Hash identifier: wkC7SUfH5ctDek8Qh/DGxM6ygYZXNQ08UClybSX1rPQ= Subject key identifier: 24:41:9F:4A:55:53:3F:DE:76:F9:C5:8B:13:16:80:AF:3D:DA:CF:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112AEB7F1FBD106DE3C7B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:ae:b7:f1:fb:d1:06:de:3c:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a47a0eaa-d377-4e1d-9b90-a5185590e62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:03:5a:bb:3a:5a:dc:42:2e:aa:07:b7:ac: d6:7a:6e:1c:7b:2b:d2:8a:fd:92:8b:3c:eb:f5:e2: 39:29:38:7f:97:11:67:28:a5:1a:3e:00:17:05:74: 38:b0:3a:fd:4c:5d:93:90:ee:68:57:fc:e3:14:d4: be:02:9d:6f:23:b1:78:96:c3:6a:2b:27:cd:9b:8f: b4:f3:4e:da:4f:a9:f2:48:d2:67:70:d1:01:36:79: 4f:63:27:35:8f:85:a1:14:dd:7e:56:18:62:e0:7c: 09:4d:27:0b:5d:51:ad:fa:34:31:e1:a4:f2:19:48: 15:9a:b6:69:c2:a8:3d:25:87:24:6a:29:b6:f1:00: 94:9d:9f:83:a2:ac:cf:66:d9:95:96:ac:4a:53:9b: 4a:bf:17:8e:d3:fd:57:82:5a:1c:c1:4b:4c:98:17: 51:82:d7:44:45:83:21:ea:51:57:a6:4f:34:d4:f5: 52:9c:cf:ab:0c:76:be:ae:1e:c3:f3:f2:e3:a2:60: 1f:35:72:21:b5:58:4c:18:ed:87:5c:2f:46:99:e0: 7e:60:06:cf:6a:ac:1e:15:73:5d:65:a1:fa:00:4c: 16:15:b6:e0:af:89:c4:4d:e4:39:6a:7a:a4:31:5b: 53:73:4f:cd:f8:0f:4b:e7:3a:02:e9:fe:8c:66:f0: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:9F:4A:55:53:3F:DE:76:F9:C5:8B:13:16:80:AF:3D:DA:CF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:13:7e:c0:9b:96:2d:f2:74:2c:17:d1:5d:a3:3d:f4:07:bf: 09:e6:67:67:4f:0f:0c:9f:24:71:55:d2:34:30:d9:3c:43:70: f3:d1:e1:a1:75:ae:4b:86:d9:9d:5b:38:00:02:04:46:a7:e8: 49:92:2d:a7:3e:ea:b2:89:6a:8c:7b:5a:e6:47:07:f2:33:c6: fb:d4:61:9a:33:d9:dc:3b:aa:e5:b6:7a:6e:76:d0:75:a7:f6: a7:aa:51:dc:15:d5:04:92:22:35:56:00:ee:07:7e:ed:f6:76: 3c:95:fe:65:37:73:6b:50:6f:bd:91:78:d3:4c:f4:0f:f0:6f: 97:1b:b4:9b:74:d4:d3:c5:53:e3:51:5d:e2:d2:9b:83:8e:9a: e8:76:4d:0e:10:68:4d:e8:0d:71:5e:a0:77:3a:d7:c9:26:e3: ca:9a:22:ab:5f:45:35:76:4f:6c:7f:23:e7:f6:c3:f5:f5:b1: b3:7e:d0:52:55:ff:0d:d9:57:0f:62:32:5e:f5:49:a3:8f:e8: 28:d9:3c:27:76:87:00:c4:05:ac:d4:ca:f0:d6:b0:d5:ee:e8: 60:b8:7e:2b:bb:9c:28:8f:12:f6:d2:f1:d1:b9:f9:2c:bd:70: 7e:ac:56:c1:35:64:7d:b0:ac:6d:e0:36:cb:34:a3:37:62:21: 87:e5:13:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEq638fvRBt48e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTQ3YTBlYWEtZDM3Ny00ZTFkLTliOTAtYTUxODU1OTBlNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlADWrs6WtxCLqoHt6zWem4ceyvSiv2Sizzr 9eI5KTh/lxFnKKUaPgAXBXQ4sDr9TF2TkO5oV/zjFNS+Ap1vI7F4lsNqKyfNm4+0 807aT6nySNJncNEBNnlPYyc1j4WhFN1+Vhhi4HwJTScLXVGt+jQx4aTyGUgVmrZp wqg9JYckaim28QCUnZ+DoqzPZtmVlqxKU5tKvxeO0/1XglocwUtMmBdRgtdERYMh 6lFXpk801PVSnM+rDHa+rh7D8/LjomAfNXIhtVhMGO2HXC9GmeB+YAbPaqweFXNd ZaH6AEwWFbbgr4nETeQ5anqkMVtTc0/N+A9L5zoC6f6MZvDuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRBn0pVUz/edvnFixMWgK892s+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmNmFmODEtOTExMi0z ZDMxLWIyMWMtNmZkNDY3YjYwNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkTfsCbli3ydCwX0V2jPfQHvwnmZ2dPDwyfJHFV0jQw2TxDcPPR4aF1 rkuG2Z1bOAACBEan6EmSLac+6rKJaox7WuZHB/IzxvvUYZoz2dw7quW2em520HWn 9qeqUdwV1QSSIjVWAO4Hfu32djyV/mU3c2tQb72ReNNM9A/wb5cbtJt01NPFU+NR XeLSm4OOmuh2TQ4QaE3oDXFeoHc618km48qaIqtfRTV2T2x/I+f2w/X1sbN+0FJV /w3ZVw9iMl71SaOP6CjZPCd2hwDEBazUyvDWsNXu6GC4fiu7nCiPEvbS8dG5+Sy9 cH6sVsE1ZH2wrG3gNss0ozdiIYflE8k= -----END CERTIFICATE-----Generated at Sun Sep 27 11:58:06 2026 by rpki-client