$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3981faf7-5224-3f1f-bee0-d9b234b192b4.roa File: 3981faf7-5224-3f1f-bee0-d9b234b192b4.roa (raw, json) Hash identifier: cTbhMblnX/LKcnQwYI66/p+XEXyqX0JRXs4okizTPyc= Subject key identifier: F7:0C:45:FA:AA:08:65:21:14:E5:0F:D6:D7:18:9C:BB:D5:BB:ED:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112C1E6D54BE7C15FF67000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3981faf7-5224-3f1f-bee0-d9b234b192b4.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.176.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c1:e6:d5:4b:e7:c1:5f:f6:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=ee1fcff4-1fcb-40db-828c-ffbc9b7440d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:2c:0f:ff:9e:05:5c:3c:a9:dd:3c:c0:4c: 67:d5:10:44:c2:92:77:74:97:19:6a:7a:b4:a4:97: 6a:5b:17:e8:28:ae:8a:09:5b:fe:65:f7:bf:91:48: 6f:40:9a:f1:59:0d:f1:a4:09:0c:aa:43:49:10:23: 65:a5:a1:a8:4b:49:ad:b8:5c:bd:fc:d4:c5:a2:4e: 3c:7c:f3:95:d5:0b:a6:ae:d0:46:b1:7b:8a:e7:17: aa:b4:8f:da:a8:53:90:06:e2:ba:2f:4f:f2:e8:ea: b7:03:ad:f5:85:43:db:c4:66:a7:31:e0:c1:65:84: e5:14:5f:51:fd:db:d3:d5:b4:4e:45:72:18:e5:4b: 57:7e:3e:24:9d:52:a9:04:71:e6:4e:42:49:ca:e4: d7:b0:99:75:66:72:af:c0:68:0f:63:fb:6f:a2:fd: 7d:aa:67:27:6c:f0:48:25:96:5a:0a:57:e8:f2:09: c9:7a:21:4a:c5:02:55:9d:57:82:21:d8:79:67:79: 39:76:85:c3:cf:cb:1f:fa:a3:55:65:a4:00:33:3d: 2c:55:02:b1:8c:9d:23:f6:3c:69:14:f2:45:47:80: cf:9b:ac:94:28:9c:da:8e:83:e3:97:51:f6:67:21: a5:59:02:f5:74:4d:fa:4a:58:6f:87:2e:b1:21:a0: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:45:FA:AA:08:65:21:14:E5:0F:D6:D7:18:9C:BB:D5:BB:ED:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3981faf7-5224-3f1f-bee0-d9b234b192b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:65:62:ce:49:d1:b2:9a:38:5d:0b:75:4b:97:0a:d5:ff: 7a:9d:d6:b6:47:95:28:ec:25:b7:f0:51:c1:59:c7:6b:df:9d: 18:8d:83:fa:41:31:61:39:07:63:12:e0:e4:5c:55:d3:cd:94: 8d:c9:e4:84:cf:5c:60:05:17:34:83:96:b6:6e:b7:d5:9e:14: b2:11:c5:af:3e:a7:40:f4:d7:0a:e9:16:2e:0a:98:c6:24:cd: 84:60:5d:89:4b:76:97:1a:0b:d2:f4:8d:d4:38:2c:48:97:7c: bc:d8:20:37:38:41:f7:c1:18:48:6a:d5:18:c7:65:09:7b:63: 40:ec:5c:5e:1b:4e:dc:bf:f9:41:4a:67:c5:c6:30:11:cd:26: 15:a6:0e:7c:b6:eb:1d:9d:52:da:3d:d2:ac:04:9b:90:9d:f3: 74:52:0a:13:f8:76:28:de:1f:50:97:14:fb:f7:07:5b:28:03: e4:7a:d9:c8:21:e1:44:28:fc:0f:7b:fe:dd:38:4b:75:28:76: 0d:db:5d:31:8e:29:b8:6d:8c:ff:4d:49:7f:ba:c8:68:2c:89: 33:1c:0f:41:cf:17:56:5f:b6:91:75:3e:e9:f2:9b:80:13:a1: 22:4d:a0:52:31:c6:0f:ab:e0:a6:bb:3c:3d:56:55:9c:9a:e3: 94:d2:ba:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsHm1UvnwV/2cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWUxZmNmZjQtMWZjYi00MGRiLTgyOGMtZmZiYzliNzQ0MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AgsD/+eBVw8qd08wExn1RBEwpJ3dJcZanq0 pJdqWxfoKK6KCVv+Zfe/kUhvQJrxWQ3xpAkMqkNJECNlpaGoS0mtuFy9/NTFok48 fPOV1QumrtBGsXuK5xeqtI/aqFOQBuK6L0/y6Oq3A631hUPbxGanMeDBZYTlFF9R /dvT1bRORXIY5UtXfj4knVKpBHHmTkJJyuTXsJl1ZnKvwGgPY/tvov19qmcnbPBI JZZaClfo8gnJeiFKxQJVnVeCIdh5Z3k5doXDz8sf+qNVZaQAMz0sVQKxjJ0j9jxp FPJFR4DPm6yUKJzajoPjl1H2ZyGlWQL1dE36Slhvhy6xIaCtIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcMRfqqCGUhFOUP1tcYnLvVu+3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzk4MWZhZjctNTIyNC0z ZjFmLWJlZTAtZDliMjM0YjE5MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACalZWLOSdGymjhdC3VLlwrV/3qd1rZHlSjsJbfwUcFZx2vfnRiNg/pB MWE5B2MS4ORcVdPNlI3J5ITPXGAFFzSDlrZut9WeFLIRxa8+p0D01wrpFi4KmMYk zYRgXYlLdpcaC9L0jdQ4LEiXfLzYIDc4QffBGEhq1RjHZQl7Y0DsXF4bTty/+UFK Z8XGMBHNJhWmDny26x2dUto90qwEm5Cd83RSChP4dijeH1CXFPv3B1soA+R62cgh 4UQo/A97/t04S3Uodg3bXTGOKbhtjP9NSX+6yGgsiTMcD0HPF1ZftpF1Punym4AT oSJNoFIxxg+r4Ka7PD1WVZya45TSunc= -----END CERTIFICATE-----Generated at Wed Sep 23 19:59:20 2026 by rpki-client