$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3577b835-c374-334c-bfa1-45f99c684512.roa File: 3577b835-c374-334c-bfa1-45f99c684512.roa (raw, json) Hash identifier: sEV34Z3utKv6NdjP+1YsrX6/GG+lxv1mAbkWHOqCeIQ= Subject key identifier: 16:DA:5B:CA:6B:2E:12:85:03:E3:60:55:C0:5B:FF:C7:21:34:75:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD45116170A680B5B3E940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3577b835-c374-334c-bfa1-45f99c684512.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.189.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:45:11:61:70:a6:80:b5:b3:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=4072246d-fc3e-4ff3-bfbd-407016eca12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:f6:14:87:a3:ed:61:f7:17:9e:3b:e8:14: 1a:bf:95:1a:9f:54:f4:98:b7:ac:ba:fa:07:ee:97: b6:b0:bf:da:26:29:93:62:50:08:06:87:10:6a:44: 0c:47:cd:36:a8:2c:fe:e3:ae:07:be:42:f1:7a:2a: f8:9b:7e:48:96:3f:e2:9d:d3:b2:ea:20:10:9b:0a: ff:fa:0c:93:9d:f0:80:c0:18:94:90:d4:ec:fb:e0: 0e:b2:3d:a1:9d:1f:15:bf:8a:dc:87:41:b9:99:91: c4:c4:0b:80:b7:66:d8:71:56:d7:b0:7b:86:15:96: 39:b5:37:df:23:27:ea:0e:21:f7:b8:51:52:24:32: 46:2b:62:fc:de:a7:19:0a:e5:fd:0f:a6:ef:ce:f6: 3f:3a:0d:d8:e1:ca:a4:87:90:0b:0d:e1:af:59:75: a8:20:c2:fd:e7:b9:cb:98:96:92:7a:a6:44:12:83: c7:8f:b2:ba:7c:22:e7:74:f4:2d:da:8b:a7:86:ab: 36:bd:f6:99:17:c0:b9:a9:c1:5b:4e:e5:8f:5c:b6: 6e:59:1a:be:90:03:b6:d1:af:7f:2a:59:cc:25:75: 97:40:33:13:77:a3:0a:77:c5:f7:59:2e:e4:58:f2: 78:15:b8:b8:7c:e6:ea:bd:4f:f9:85:ce:bc:57:53: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DA:5B:CA:6B:2E:12:85:03:E3:60:55:C0:5B:FF:C7:21:34:75:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3577b835-c374-334c-bfa1-45f99c684512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:43:c6:2c:13:11:00:d9:5f:4f:ea:f7:bc:82:f9:65:5a:73: ca:7d:a9:aa:a1:4a:0c:87:6d:f5:dd:07:60:68:e7:5a:22:85: d8:e0:46:8a:52:3f:1d:99:79:16:72:e8:26:d3:3b:9c:93:ab: 36:95:e7:e8:f0:50:2f:0e:7b:c1:f5:1c:b0:f4:bb:f6:69:a7: ea:28:80:b0:62:e6:9e:e6:9d:bb:5e:76:bd:2e:63:e8:e5:8b: e6:eb:81:5a:58:ee:c1:41:b2:d1:7a:82:98:0c:88:cf:e4:58: ad:81:34:c7:db:07:f9:32:83:99:a3:d9:16:5f:1f:5e:42:f2: f2:a1:5b:d0:6b:6d:5f:ff:2a:3b:39:16:c8:b0:3a:96:f2:0e: 28:58:7e:87:94:c5:8e:bb:93:9c:bc:3e:62:05:48:bf:c1:bf: 7f:82:12:0e:14:08:9e:b6:fb:1a:66:b1:41:61:cd:96:0a:56: be:58:0c:ec:24:a4:cd:2e:ab:8f:00:75:21:45:9e:c7:88:7a: 60:b0:ea:55:13:8b:53:6b:c4:60:f6:bf:e5:9b:69:c4:25:cc: bd:57:be:ae:b3:43:c0:cd:7d:83:3f:15:5e:4c:c5:40:4e:68: b2:93:ba:f0:01:dd:48:48:82:d8:fd:b1:0f:28:98:4b:68:22: f5:aa:86:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UURYXCmgLWz6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NDA3MjI0NmQtZmMzZS00ZmYzLWJmYmQtNDA3MDE2ZWNhMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwL2FIej7WH3F5476BQav5Uan1T0mLesuvoH 7pe2sL/aJimTYlAIBocQakQMR802qCz+464HvkLxeir4m35Ilj/indOy6iAQmwr/ +gyTnfCAwBiUkNTs++AOsj2hnR8Vv4rch0G5mZHExAuAt2bYcVbXsHuGFZY5tTff IyfqDiH3uFFSJDJGK2L83qcZCuX9D6bvzvY/Og3Y4cqkh5ALDeGvWXWoIML957nL mJaSeqZEEoPHj7K6fCLndPQt2ounhqs2vfaZF8C5qcFbTuWPXLZuWRq+kAO20a9/ KlnMJXWXQDMTd6MKd8X3WS7kWPJ4Fbi4fObqvU/5hc68V1OXswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbaW8prLhKFA+NgVcBb/8chNHUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzU3N2I4MzUtYzM3NC0z MzRjLWJmYTEtNDVmOTljNjg0NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdDxiwTEQDZX0/q97yC+WVac8p9qaqhSgyHbfXdB2Bo51oihdjgRopS Px2ZeRZy6CbTO5yTqzaV5+jwUC8Oe8H1HLD0u/Zpp+oogLBi5p7mnbtedr0uY+jl i+brgVpY7sFBstF6gpgMiM/kWK2BNMfbB/kyg5mj2RZfH15C8vKhW9BrbV//Kjs5 FsiwOpbyDihYfoeUxY67k5y8PmIFSL/Bv3+CEg4UCJ62+xpmsUFhzZYKVr5YDOwk pM0uq48AdSFFnseIemCw6lUTi1NrxGD2v+WbacQlzL1Xvq6zQ8DNfYM/FV5MxUBO aLKTuvAB3UhIgtj9sQ8omEtoIvWqhqM= -----END CERTIFICATE-----Generated at Thu Sep 24 05:43:33 2026 by rpki-client