$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa File: 0ff6af81-9112-3d31-b21c-6fd467b60608.roa (raw, json) Hash identifier: 0VQNNQnqE1BRGMcY7R2Jj5jAhTt2Kx8R1P1aE9Jhyo4= Subject key identifier: 56:AD:FA:20:A5:F6:62:E3:E1:71:D3:33:D7:57:2D:E2:D3:CE:F7:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBE6B1D1EDF0F4E2AC1551700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 22773 IP address blocks: 70.172.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:1d:1e:df:0f:4e:2a:c1:55:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=95abd0d2-08f6-42d5-b254-fc2365faec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:dc:85:d9:ff:2e:20:d4:27:f9:cd:58:b3: 10:bd:eb:18:ef:2e:6d:61:0d:b0:7c:2b:4a:72:e3: 20:42:fa:8f:c9:6a:93:a0:74:b4:8b:e3:f7:e6:e8: 2b:a8:9a:57:82:61:0f:fd:38:10:e9:c1:55:c4:5e: d2:46:57:c5:3d:b2:ce:03:fa:e2:1c:06:2e:c5:6a: de:63:d7:f7:9c:d6:48:de:16:ba:1b:0a:17:ba:b6: 5f:54:3e:7f:f5:21:d4:fc:ec:d5:7e:1c:eb:fa:43: 3a:fb:52:be:08:a7:a7:f7:0b:a2:dc:4b:24:ee:08: 8e:2d:9a:ed:6d:21:31:2c:1c:35:9c:ea:f1:0c:3d: 29:98:f5:2b:8b:80:68:0b:a7:92:e9:29:2e:ee:08: 54:ac:ea:2f:72:96:7f:c4:d1:56:da:39:63:29:2f: 5a:a4:b5:bc:df:15:dd:e7:ee:77:39:5d:95:d8:86: ef:90:a2:fb:8b:43:a3:8f:45:6c:67:61:44:b1:55: ae:e9:54:ae:fd:d2:03:9d:ab:cf:9e:bc:79:0e:ef: ab:8b:32:36:d7:5d:8c:6e:dc:e3:41:d2:47:c6:dc: 2e:cc:af:64:4b:44:7d:35:7e:13:41:b1:ce:56:82: 67:88:1c:96:c3:0f:73:55:2a:0c:a6:94:43:4c:48: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AD:FA:20:A5:F6:62:E3:E1:71:D3:33:D7:57:2D:E2:D3:CE:F7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ed:d1:5b:72:49:26:0b:a8:6a:7e:72:44:e2:24:ed:b7:d0: 29:ef:dd:bb:23:f6:3f:13:6e:fa:58:d0:60:55:4f:4c:ab:5c: b4:a3:e2:68:79:f1:a4:94:97:e9:ae:55:d1:22:9f:71:19:ca: 34:54:c1:3f:9d:a2:c9:7a:46:bd:45:6d:42:d1:13:22:25:39: fc:cc:06:02:d7:bc:f2:5c:17:fd:fd:d0:48:2e:b0:fc:ee:45: b5:eb:67:69:3b:4f:72:2c:c9:86:f0:80:e8:bf:74:44:d4:3a: 1e:9c:fe:d2:aa:e4:55:b2:98:bc:65:e6:0e:99:49:3c:64:8f: 05:27:53:a5:cf:27:67:f0:6e:78:6b:bb:93:d6:22:c7:52:66: d6:08:12:dd:cd:36:69:6b:37:ce:ac:03:50:19:69:f6:e2:34: ff:e4:d6:fe:33:ed:60:58:3c:b7:83:a6:ef:99:88:de:1d:db: 74:a9:e7:04:aa:47:60:16:ab:a7:fd:bf:1a:42:30:34:18:7e: 1e:98:a3:07:8e:eb:0e:a5:ae:66:fb:5d:45:83:0b:12:88:72: 9a:8f:5e:23:a4:56:5c:22:8e:b6:ce:36:36:a0:5a:67:4a:aa: 84:77:fb:08:6b:04:bc:7f:f4:36:0b:21:ec:f7:c8:7d:15:40: bb:39:a9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ax0e3w9OKsFVFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk OTVhYmQwZDItMDhmNi00MmQ1LWIyNTQtZmMyMzY1ZmFlYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Lchdn/LiDUJ/nNWLMQvesY7y5tYQ2wfCtK cuMgQvqPyWqToHS0i+P35ugrqJpXgmEP/TgQ6cFVxF7SRlfFPbLOA/riHAYuxWre Y9f3nNZI3ha6GwoXurZfVD5/9SHU/OzVfhzr+kM6+1K+CKen9wui3Esk7giOLZrt bSExLBw1nOrxDD0pmPUri4BoC6eS6Sku7ghUrOovcpZ/xNFW2jljKS9apLW83xXd 5+53OV2V2IbvkKL7i0Ojj0VsZ2FEsVWu6VSu/dIDnavPnrx5Du+rizI2112Mbtzj QdJHxtwuzK9kS0R9NX4TQbHOVoJniByWww9zVSoMppRDTEiVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFat+iCl9mLj4XHTM9dXLeLTzveqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmNmFmODEtOTExMi0z ZDMxLWIyMWMtNmZkNDY3YjYwNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnt0VtySSYLqGp+ckTiJO230Cnv3bsj9j8TbvpY0GBVT0yrXLSj4mh5 8aSUl+muVdEin3EZyjRUwT+dosl6Rr1FbULREyIlOfzMBgLXvPJcF/390EgusPzu RbXrZ2k7T3IsyYbwgOi/dETUOh6c/tKq5FWymLxl5g6ZSTxkjwUnU6XPJ2fwbnhr u5PWIsdSZtYIEt3NNmlrN86sA1AZafbiNP/k1v4z7WBYPLeDpu+ZiN4d23Sp5wSq R2AWq6f9vxpCMDQYfh6YoweO6w6lrmb7XUWDCxKIcpqPXiOkVlwijrbONjagWmdK qoR3+whrBLx/9DYLIez3yH0VQLs5qTY= -----END CERTIFICATE-----Generated at Wed May 13 10:04:53 2026 by rpki-client