$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20391c94-03fd-3cdd-824d-0e21e79cf41f.roa File: 20391c94-03fd-3cdd-824d-0e21e79cf41f.roa (raw, json) Hash identifier: o2k8VT9i4lTZnO7XIltIf/gWeUgJZp16fHwJbNVj7vM= Subject key identifier: B7:19:5E:C0:75:E3:57:06:D4:AB:7F:87:EA:86:33:AA:10:92:69:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F411280212F644D6CD0C07040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20391c94-03fd-3cdd-824d-0e21e79cf41f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.176.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:80:21:2f:64:4d:6c:d0:c0:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e0c06ed6-2764-42a0-b6b1-21f34d72b62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:bf:65:1f:ee:60:75:45:bc:52:09:7c:ef: 37:b9:17:e4:3f:3a:46:c6:92:a7:bf:78:57:b4:40: 1d:8a:d0:1e:25:6a:5e:22:f2:ba:8e:8d:82:4e:73: 8d:a5:32:46:82:02:0e:b5:f7:e9:a8:4d:2a:3f:ed: 19:55:60:91:13:7e:a7:ff:6a:4b:14:b3:ef:81:bd: a9:08:db:e4:2f:f4:56:6e:6d:5d:c1:fd:5b:95:7a: 25:34:2c:27:68:23:c1:23:ea:9e:de:54:41:99:5d: 08:8a:ee:c1:35:dc:30:fa:fc:43:df:8d:72:6c:1b: b3:29:30:0d:65:bf:76:08:03:6a:fb:ec:b4:7e:cf: 38:a2:95:e6:b1:4c:fe:e2:33:70:a5:95:99:3b:2b: b2:94:e3:a1:84:36:19:65:44:ed:e1:df:6b:5c:a9: 53:4c:22:4f:1c:13:9e:bd:e9:11:3f:2b:a1:c8:0e: 09:23:7b:96:bc:28:8e:59:16:0c:ef:c3:36:43:07: 7a:29:dd:25:69:2e:09:10:ad:1b:4b:45:30:66:f1: 00:b7:69:a7:4e:d8:b9:a0:9e:ba:9f:40:10:48:a6: ca:fb:4a:6d:d1:5c:96:b4:ec:87:69:64:bb:46:2c: 82:b2:c5:3d:07:19:e6:37:88:39:2c:db:b1:42:cc: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:5E:C0:75:E3:57:06:D4:AB:7F:87:EA:86:33:AA:10:92:69:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20391c94-03fd-3cdd-824d-0e21e79cf41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b1:0e:de:06:04:b0:c8:39:5e:b6:a1:09:ca:77:26:5e:c2: 8f:55:d7:15:ae:46:8b:8e:15:06:8c:b7:52:36:af:3f:e8:a0: 24:9f:6d:6b:f7:6e:0a:43:b7:0c:92:e6:64:96:ba:de:30:70: 79:19:63:0b:7f:59:e8:a2:06:0b:1a:44:5c:91:ef:f5:e0:5a: 2d:12:bf:ed:5a:5c:98:77:40:c4:eb:f4:98:7c:8d:f3:da:75: b0:c5:4f:7b:d1:1d:81:d2:48:89:8a:fa:00:ec:f8:ef:d0:be: a9:ea:e5:3f:02:20:94:5c:70:9a:a9:45:9d:22:d9:63:24:ca: b5:24:4c:77:dd:07:e5:b4:43:73:fb:94:37:66:e2:e6:58:62: 80:0b:b5:bb:b4:1d:80:b0:0e:e7:b9:53:f0:02:40:fb:bb:b9: ad:e8:85:12:90:82:7f:ac:11:5f:fe:bc:ee:4f:b9:9b:f4:81: 0c:45:a9:62:60:c4:d5:1c:f8:74:71:58:25:31:44:ce:15:ac: f2:68:30:09:c2:87:5f:93:1c:29:0b:65:1f:52:0a:04:f1:96: 0d:67:b5:27:1e:65:87:6f:64:11:da:16:74:ed:e7:1d:58:17: ad:35:75:6f:ae:c5:fc:0f:38:53:86:73:18:e5:7e:82:9e:2e: f3:bc:db:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoAhL2RNbNDAcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTBjMDZlZDYtMjc2NC00MmEwLWI2YjEtMjFmMzRkNzJiNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8W/ZR/uYHVFvFIJfO83uRfkPzpGxpKnv3hX tEAditAeJWpeIvK6jo2CTnONpTJGggIOtffpqE0qP+0ZVWCRE36n/2pLFLPvgb2p CNvkL/RWbm1dwf1blXolNCwnaCPBI+qe3lRBmV0Iiu7BNdww+vxD341ybBuzKTAN Zb92CANq++y0fs84opXmsUz+4jNwpZWZOyuylOOhhDYZZUTt4d9rXKlTTCJPHBOe vekRPyuhyA4JI3uWvCiOWRYM78M2Qwd6Kd0laS4JEK0bS0UwZvEAt2mnTti5oJ66 n0AQSKbK+0pt0VyWtOyHaWS7RiyCssU9BxnmN4g5LNuxQszcsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcZXsB141cG1Kt/h+qGM6oQkmn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjAzOTFjOTQtMDNmZC0z Y2RkLTgyNGQtMGUyMWU3OWNmNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6xDt4GBLDIOV62oQnKdyZewo9V1xWuRouOFQaMt1I2rz/ooCSfbWv3 bgpDtwyS5mSWut4wcHkZYwt/WeiiBgsaRFyR7/XgWi0Sv+1aXJh3QMTr9Jh8jfPa dbDFT3vRHYHSSImK+gDs+O/Qvqnq5T8CIJRccJqpRZ0i2WMkyrUkTHfdB+W0Q3P7 lDdm4uZYYoALtbu0HYCwDue5U/ACQPu7ua3ohRKQgn+sEV/+vO5PuZv0gQxFqWJg xNUc+HRxWCUxRM4VrPJoMAnCh1+THCkLZR9SCgTxlg1ntSceZYdvZBHaFnTt5x1Y F601dW+uxfwPOFOGcxjlfoKeLvO821Y= -----END CERTIFICATE-----Generated at Wed Sep 23 13:03:20 2026 by rpki-client