$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa File: 33c09272-8427-30f7-a283-fc6c477dfa42.roa (raw, json) Hash identifier: bQtXT2snYCuutBBeZQX/TSjzXIsAnTuIRvy0mkiXB5U= Subject key identifier: 7B:1E:C8:05:E9:10:22:40:CA:90:83:F6:99:F6:1B:11:FB:3F:1A:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD06626F8A9105DF3788F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 70.180.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:66:26:f8:a9:10:5d:f3:78:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=c40a4c2a-dccd-4e5c-803e-1c6868a4983c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:af:06:46:e4:0d:0f:f2:43:d0:f6:60:21:34: ab:9b:c4:62:fd:78:db:76:ac:b0:28:e4:4d:76:d0: 89:2d:ec:5f:2f:f9:a5:ca:9a:39:48:7a:31:51:32: 41:76:fa:9e:b7:cd:01:00:7b:97:f7:c3:4c:4d:b4: 17:da:39:6a:27:59:0c:98:69:98:e8:d3:7e:60:fb: 33:8d:1d:2a:fb:8c:f4:f9:75:b2:13:20:31:c9:1e: 05:8c:68:bc:d9:a9:33:33:0c:aa:2d:b4:32:bf:3a: 95:a2:1b:24:a2:dd:98:5d:d5:32:ea:6c:b5:ef:85: 1d:3e:7e:ed:ab:7f:f9:b5:96:be:b2:09:9b:09:a5: 33:a2:c3:a9:4d:f7:41:de:dd:9f:f2:d0:71:84:6e: 80:17:5d:d4:97:57:92:78:a9:37:6d:b7:a7:94:a9: f3:34:5f:e7:ed:2b:96:49:19:43:8d:0d:b0:e3:87: b6:10:cd:90:89:fd:8a:75:d0:49:4e:95:af:c5:34: 92:a3:51:ee:2b:e3:e4:7c:da:19:48:15:46:5d:1c: 8d:01:1c:8e:01:86:0a:e0:fc:71:9e:6f:ae:0b:44: 62:0f:75:0a:5c:75:7f:2d:97:bf:7f:5f:18:b6:ee: de:19:7b:f2:71:7b:2e:e5:9a:2d:84:9c:33:4e:66: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1E:C8:05:E9:10:22:40:CA:90:83:F6:99:F6:1B:11:FB:3F:1A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:eb:6d:d5:6b:c7:dd:60:c1:c0:a4:d6:5a:71:5a:38:a3:e8: 09:74:f2:8c:ec:68:cc:27:b5:9d:89:fe:d0:9e:c0:f8:4c:7b: 58:04:15:2b:2a:89:a0:56:e2:14:54:6c:55:ac:db:b5:13:b8: b5:b0:7b:0e:0e:b9:2f:44:f7:f6:70:68:07:44:c3:5a:2a:cd: 80:58:e3:b8:64:de:78:1e:49:f5:77:bd:9e:72:a7:55:b8:36: 47:35:e8:74:a3:3c:d5:80:53:a6:66:c7:bb:96:b3:72:75:10: 0f:53:13:25:da:78:0e:ce:12:00:68:c1:51:fb:78:e5:0a:e4: b7:ea:1e:59:ff:9a:5c:af:12:8c:81:2c:5a:2a:2b:0d:5c:ed: 7e:fe:b7:13:c4:51:0e:d6:b5:ce:27:ca:04:67:05:11:a9:09: 23:cc:cc:a0:25:bd:7d:df:54:2d:5e:31:66:66:c4:7d:a5:5d: d6:e0:34:e8:10:59:f8:fd:6c:2a:a5:75:09:3c:8c:6d:e5:ca: 18:6b:24:c9:59:46:9c:ff:e0:38:fb:4e:8a:a4:05:4c:3b:77: 90:77:0d:a0:09:e9:51:32:fe:34:29:49:b4:32:cd:93:93:68: 3f:a1:60:c3:2e:9b:6d:2f:ca:97:49:22:30:3f:81:d9:79:9c: 04:78:d3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0GYm+KkQXfN4j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YzQwYTRjMmEtZGNjZC00ZTVjLTgwM2UtMWM2ODY4YTQ5ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq8GRuQND/JD0PZgITSrm8Ri/XjbdqywKORN dtCJLexfL/mlypo5SHoxUTJBdvqet80BAHuX98NMTbQX2jlqJ1kMmGmY6NN+YPsz jR0q+4z0+XWyEyAxyR4FjGi82akzMwyqLbQyvzqVohskot2YXdUy6my174UdPn7t q3/5tZa+sgmbCaUzosOpTfdB3t2f8tBxhG6AF13Ul1eSeKk3bbenlKnzNF/n7SuW SRlDjQ2w44e2EM2Qif2KddBJTpWvxTSSo1HuK+PkfNoZSBVGXRyNARyOAYYK4Pxx nm+uC0RiD3UKXHV/LZe/f18Ytu7eGXvycXsu5ZothJwzTmY1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHseyAXpECJAypCD9pn2GxH7PxoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNjMDkyNzItODQyNy0z MGY3LWEyODMtZmM2YzQ3N2RmYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbrbdVrx91gwcCk1lpxWjij6Al08ozsaMwntZ2J/tCewPhMe1gEFSsq iaBW4hRUbFWs27UTuLWwew4OuS9E9/ZwaAdEw1oqzYBY47hk3ngeSfV3vZ5yp1W4 Nkc16HSjPNWAU6Zmx7uWs3J1EA9TEyXaeA7OEgBowVH7eOUK5LfqHln/mlyvEoyB LFoqKw1c7X7+txPEUQ7Wtc4nygRnBRGpCSPMzKAlvX3fVC1eMWZmxH2lXdbgNOgQ Wfj9bCqldQk8jG3lyhhrJMlZRpz/4Dj7ToqkBUw7d5B3DaAJ6VEy/jQpSbQyzZOT aD+hYMMum20vypdJIjA/gdl5nAR409A= -----END CERTIFICATE-----Generated at Wed May 13 13:35:02 2026 by rpki-client