$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa File: 25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa (raw, json) Hash identifier: wcJNKLWqUq/Widqgy6EgvrRRD36QFdfEfFI1oOFl2kU= Subject key identifier: 1C:F6:52:98:87:B5:EE:E4:89:CF:94:93:55:86:8C:7D:65:0F:BD:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E5BAF5E5952E4322964779B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 22773 IP address blocks: 70.174.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5e:59:52:e4:32:29:64:77:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=2dc7d9d4-5828-441e-8a0e-0214774e1c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:d4:41:c0:f4:02:ac:f8:4d:cd:ec:22:96: ed:d3:b5:0d:51:60:c9:ac:46:df:e3:61:20:06:23: 6f:f6:79:d1:ae:c0:54:ae:ff:fc:40:d4:92:2c:2b: 15:7f:97:a2:4d:5d:cb:44:73:73:51:ce:fe:2a:dd: 42:0f:3b:0a:c0:b0:1c:13:3b:27:fa:b7:70:47:cf: 63:3b:99:50:5c:5d:bd:6c:c0:6e:6b:02:f5:f8:41: b0:95:be:1e:80:6c:ba:27:32:0e:1e:68:c3:45:56: ca:98:dc:fd:7b:e3:cc:94:d0:24:61:86:98:e0:1e: 1f:66:e2:33:80:dc:f6:80:52:5a:65:db:42:b8:ff: 23:7c:42:e2:cb:96:65:bf:7e:d9:28:da:a1:10:00: fc:92:4d:6c:be:24:43:0b:bf:62:c2:09:b8:61:d5: a9:7b:2f:13:38:a1:3a:9b:75:14:12:1d:4e:8a:cd: 69:91:4f:44:51:2b:dd:ca:c4:dd:e6:46:55:2f:b6: 56:b0:84:f6:d6:9f:f7:02:ca:0a:88:ca:3a:9b:0b: 50:18:ab:0f:fc:cc:4e:dc:df:3c:57:94:30:8c:27: 82:23:71:f7:2a:18:df:20:4d:c5:c2:ad:0e:0c:71: bc:b5:17:5c:7f:a2:84:41:03:fc:2d:e2:e1:fa:c8: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:52:98:87:B5:EE:E4:89:CF:94:93:55:86:8C:7D:65:0F:BD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2f:55:2b:1e:9c:83:57:44:8a:b9:3b:53:b7:bc:bb:1b:08: 46:57:7f:1b:66:37:09:0a:d6:c0:91:7c:2a:d0:6a:af:89:9b: 70:c6:94:d9:e6:af:a4:98:2d:8b:25:e1:f2:56:3f:cc:bb:37: d8:80:cd:c6:18:5d:80:35:4f:42:a8:14:34:ef:ea:45:fa:10: d2:33:6d:d3:81:ca:4e:65:f3:cc:05:69:6c:ea:eb:bb:74:e8: 30:91:58:5e:36:66:ce:8c:fb:e6:69:81:21:01:d4:04:dc:6d: 1e:08:af:32:4f:34:64:74:7a:a7:a1:fd:02:48:03:be:9d:7f: ea:21:0d:7e:5c:cb:c7:88:be:b2:50:1b:0a:d2:f9:b2:f6:f1: ba:2f:a8:e9:7d:f9:57:54:3b:df:2b:12:19:6f:16:b4:51:55: 96:ab:7e:b3:4d:33:34:39:c2:c9:e3:e0:10:2d:bc:3d:03:49: 94:e4:51:a1:ae:3b:67:11:b9:23:2c:d9:5d:8e:f8:5d:90:d2: 83:91:a0:e5:e7:7e:fc:8b:28:0c:cd:68:9a:38:0e:fd:bd:58: 09:66:78:e0:4c:e9:73:b3:cf:c1:95:6d:5a:54:d2:ee:88:d7: 2c:25:7b:2b:af:a3:db:7f:91:fb:5d:7c:d8:8e:6d:e3:6b:9b: 49:1c:0c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br15ZUuQyKWR3m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk MmRjN2Q5ZDQtNTgyOC00NDFlLThhMGUtMDIxNDc3NGUxYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2bUQcD0Aqz4Tc3sIpbt07UNUWDJrEbf42Eg BiNv9nnRrsBUrv/8QNSSLCsVf5eiTV3LRHNzUc7+Kt1CDzsKwLAcEzsn+rdwR89j O5lQXF29bMBuawL1+EGwlb4egGy6JzIOHmjDRVbKmNz9e+PMlNAkYYaY4B4fZuIz gNz2gFJaZdtCuP8jfELiy5Zlv37ZKNqhEAD8kk1sviRDC79iwgm4YdWpey8TOKE6 m3UUEh1Ois1pkU9EUSvdysTd5kZVL7ZWsIT21p/3AsoKiMo6mwtQGKsP/MxO3N88 V5QwjCeCI3H3KhjfIE3Fwq0ODHG8tRdcf6KEQQP8LeLh+sirvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz2UpiHte7kic+Uk1WGjH1lD73DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVmY2NjNWItZDU5OS0z YjdlLThhZWUtYjk2OWIwOWNmMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYvVSsenINXRIq5O1O3vLsbCEZXfxtmNwkK1sCRfCrQaq+Jm3DGlNnm r6SYLYsl4fJWP8y7N9iAzcYYXYA1T0KoFDTv6kX6ENIzbdOByk5l88wFaWzq67t0 6DCRWF42Zs6M++ZpgSEB1ATcbR4IrzJPNGR0eqeh/QJIA76df+ohDX5cy8eIvrJQ GwrS+bL28bovqOl9+VdUO98rEhlvFrRRVZarfrNNMzQ5wsnj4BAtvD0DSZTkUaGu O2cRuSMs2V2O+F2Q0oORoOXnfvyLKAzNaJo4Dv29WAlmeOBM6XOzz8GVbVpU0u6I 1ywleyuvo9t/kftdfNiObeNrm0kcDCg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:42:27 2026 by rpki-client