$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2432b8e1-c23d-38a4-9b83-986454e0b866.roa File: 2432b8e1-c23d-38a4-9b83-986454e0b866.roa (raw, json) Hash identifier: IBgJAXJNH+OHxfKF6oVlbkJvEdW+6oPFjRa/1j7pCb0= Subject key identifier: BB:18:48:C5:DC:E2:A7:AF:AA:5B:76:1E:2C:92:04:D5:04:28:11:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D40CB9EB53D5AD647A38C6F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2432b8e1-c23d-38a4-9b83-986454e0b866.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 22773 IP address blocks: 70.174.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:b5:3d:5a:d6:47:a3:8c:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=46f55f36-0d57-4950-a0aa-70cd1f9a0cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:f3:05:27:5f:14:0f:57:7c:00:cd:0c:bc: 96:9f:52:bb:a1:69:00:d7:7e:3d:56:86:3b:62:f7: dd:72:84:8f:82:a1:2d:88:a1:1b:8a:4e:e1:35:1b: 74:34:47:e9:c9:59:de:dd:e3:44:ed:2e:bf:11:3e: de:54:6a:f6:38:4d:ff:57:a0:b9:76:a3:d5:11:99: 4e:e7:c7:5d:bf:43:19:93:b0:3c:f1:9d:60:ac:2b: 01:a7:f4:d2:c5:ab:69:77:72:3d:10:02:06:04:20: da:38:99:7b:73:da:4e:ac:7b:16:06:b0:95:33:3f: e4:8c:89:dd:31:fe:06:f1:fd:c3:13:28:f4:1f:da: 23:4c:5f:e9:59:78:70:45:8f:08:25:0a:79:b0:6e: 32:ad:a3:ac:fc:3f:50:b6:53:1a:31:ff:47:3d:6b: e5:8a:4f:f9:6e:21:e9:b6:4b:30:11:23:72:82:00: 37:19:1c:d5:f1:d2:73:3e:ee:10:08:67:a2:b1:81: 88:b6:f5:de:a3:c9:26:4b:09:cf:f0:be:5b:23:47: 42:a4:f4:dd:23:ac:5e:87:e4:df:40:d5:8f:36:83: c7:1b:c5:85:d9:62:03:ee:f0:76:b6:c7:a7:e0:f5: 05:67:52:2a:15:5e:e2:5f:ac:61:b3:da:7e:b3:59: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:18:48:C5:DC:E2:A7:AF:AA:5B:76:1E:2C:92:04:D5:04:28:11:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2432b8e1-c23d-38a4-9b83-986454e0b866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:89:b5:96:c5:15:0f:b8:48:37:fd:11:7c:ef:e8:d5:d8:bb: b7:0e:10:58:e8:d4:3f:04:f6:8b:98:26:0f:b7:b1:fa:c1:6e: 76:30:92:14:5d:0d:4b:e6:52:93:40:fd:c6:f5:b8:c6:fb:a2: c6:7e:bd:c1:59:42:6f:b5:72:12:3d:6d:91:40:2d:66:7c:cb: 06:a3:b0:20:ca:a7:5f:0a:b1:f3:92:ee:55:91:a2:2d:50:35: c9:30:03:d4:44:62:b9:40:5c:ef:20:f6:37:4e:45:3a:99:23: 47:e4:8e:94:9d:39:90:cd:b8:cd:ba:89:2e:fa:f2:8e:0a:ae: ba:ae:92:c3:79:21:64:ef:6e:51:d3:d6:fd:48:69:20:15:3f: 45:6a:2c:fa:aa:1d:76:b2:d8:03:01:b1:ab:0b:fb:f5:d3:9b: 77:83:9a:42:a7:0b:7a:72:20:74:99:62:da:4e:51:ee:84:33: 46:28:c4:49:e7:4e:ec:d2:bd:3d:7f:62:2f:b1:e4:22:7c:71: 76:4a:fd:5f:03:ac:9a:80:95:52:61:be:72:23:36:d4:1b:f1: 5b:13:5d:14:1a:55:01:62:59:23:59:8c:ac:7f:45:6c:ae:81: 84:7b:88:0a:46:92:7a:5a:c2:f0:aa:b8:e2:20:80:1b:b9:93: db:72:55:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay561PVrWR6OMb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDZmNTVmMzYtMGQ1Ny00OTUwLWEwYWEtNzBjZDFmOWEwY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5TzBSdfFA9XfADNDLyWn1K7oWkA1349VoY7 YvfdcoSPgqEtiKEbik7hNRt0NEfpyVne3eNE7S6/ET7eVGr2OE3/V6C5dqPVEZlO 58ddv0MZk7A88Z1grCsBp/TSxatpd3I9EAIGBCDaOJl7c9pOrHsWBrCVMz/kjInd Mf4G8f3DEyj0H9ojTF/pWXhwRY8IJQp5sG4yraOs/D9QtlMaMf9HPWvlik/5biHp tkswESNyggA3GRzV8dJzPu4QCGeisYGItvXeo8kmSwnP8L5bI0dCpPTdI6xeh+Tf QNWPNoPHG8WF2WID7vB2tsen4PUFZ1IqFV7iX6xhs9p+s1l52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsYSMXc4qevqlt2HiySBNUEKBGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQzMmI4ZTEtYzIzZC0z OGE0LTliODMtOTg2NDU0ZTBiODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKJtZbFFQ+4SDf9EXzv6NXYu7cOEFjo1D8E9ouYJg+3sfrBbnYwkhRd DUvmUpNA/cb1uMb7osZ+vcFZQm+1chI9bZFALWZ8ywajsCDKp18KsfOS7lWRoi1Q NckwA9REYrlAXO8g9jdORTqZI0fkjpSdOZDNuM26iS768o4KrrquksN5IWTvblHT 1v1IaSAVP0VqLPqqHXay2AMBsasL+/XTm3eDmkKnC3pyIHSZYtpOUe6EM0YoxEnn TuzSvT1/Yi+x5CJ8cXZK/V8DrJqAlVJhvnIjNtQb8VsTXRQaVQFiWSNZjKx/RWyu gYR7iApGknpawvCquOIggBu5k9tyVVw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:00 2026 by rpki-client