$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa File: 42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa (raw, json) Hash identifier: OFftjJVurniTJ8BkuqOmlARAVB8aqdBEUHGPr+ZyW/M= Subject key identifier: C7:4E:9B:A4:BA:1A:F3:ED:A9:20:33:43:5E:7B:5F:B8:83:03:6E:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112AA657FF9C5B5CEF4C278 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:aa:65:7f:f9:c5:b5:ce:f4:c2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e1aa48d2-fbc6-4a99-a6e9-b19ce62037b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:d2:e8:b1:5b:80:4c:73:e9:61:35:16:43: b6:d6:c2:a5:d3:58:61:64:fe:6e:50:12:f6:68:15: 98:5b:3e:59:19:f7:f7:ab:5e:79:68:ff:d6:cf:0d: 37:19:db:54:9a:5c:b5:a7:2d:6a:e1:28:2a:2c:80: bc:2f:2f:4d:f9:92:7d:b5:0d:44:5f:92:e9:89:df: 9f:56:14:90:e9:f7:91:28:20:78:15:37:6b:de:71: a4:0f:e6:1c:1d:22:bb:ff:a9:c3:16:dc:0b:10:b7: 26:72:3f:ae:8a:2f:bb:45:a6:eb:b5:bb:7c:37:bb: 75:27:66:49:56:bc:7c:e8:2a:c3:2e:f7:c1:45:62: 66:3f:37:0e:0f:ce:e1:36:f4:5a:09:cb:d9:e8:3d: 09:dd:3f:1f:76:08:0a:ce:cf:8c:b5:c3:e8:ba:d6: 0e:9e:c9:14:c1:5e:22:af:9d:22:fb:38:c7:49:58: d5:83:24:6b:20:6a:f0:5c:1f:0e:0b:11:e1:67:19: 91:c9:27:5b:67:38:79:df:bf:34:bd:d4:70:63:88: e9:37:d0:a0:f5:6b:cf:1a:e6:24:ab:e5:1d:67:dd: 7e:af:c9:dd:15:20:45:4a:2f:66:b7:ad:93:aa:96: cc:ad:48:75:e7:73:8f:e6:69:20:fd:2c:95:e0:03: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:9B:A4:BA:1A:F3:ED:A9:20:33:43:5E:7B:5F:B8:83:03:6E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:76:a0:a3:26:7a:a6:4c:2f:20:5a:d8:44:62:5b:01:ca:c8: 1a:46:aa:56:d5:93:9b:f3:c8:c2:f3:8c:1b:e5:7b:c9:46:96: 03:8b:9e:19:35:94:52:5f:6d:46:21:ca:76:3b:56:2a:16:37: bb:ae:1f:57:59:b4:ae:7a:9e:9e:2d:33:21:b7:36:67:12:1a: c3:3c:ff:b8:00:5a:b9:ef:b5:72:22:09:2a:9c:85:a7:ab:69: ca:22:3f:44:1a:64:9a:b2:90:50:63:c2:b9:84:80:01:a1:38: d3:46:36:7a:5a:c7:6c:29:39:c1:a6:46:4e:1e:47:8f:cd:87: a9:d7:09:6e:16:27:a7:24:d2:77:a6:01:4b:24:62:2f:9e:c3: 2a:89:dd:ec:40:be:d5:d6:83:58:1f:e9:0b:26:f7:49:7c:a0: e0:49:0d:11:e4:ec:aa:58:42:03:28:c1:1a:04:5c:bc:32:e4: 54:8a:54:b1:ab:9d:74:af:9e:0a:db:79:bf:fb:37:19:ff:59: 68:3c:03:94:c6:65:ed:0a:c6:70:72:bf:61:1b:18:23:75:bd: 50:02:b4:1a:12:40:7a:50:18:39:55:1e:a7:e7:5b:75:88:48: d1:14:7a:c6:f8:e6:e8:91:df:0e:27:45:1c:c3:a3:2b:dc:46: 87:61:86:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqplf/nFtc70wngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTFhYTQ4ZDItZmJjNi00YTk5LWE2ZTktYjE5Y2U2MjAzN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCbS6LFbgExz6WE1FkO21sKl01hhZP5uUBL2 aBWYWz5ZGff3q155aP/Wzw03GdtUmly1py1q4SgqLIC8Ly9N+ZJ9tQ1EX5Lpid+f VhSQ6feRKCB4FTdr3nGkD+YcHSK7/6nDFtwLELcmcj+uii+7Rabrtbt8N7t1J2ZJ Vrx86CrDLvfBRWJmPzcOD87hNvRaCcvZ6D0J3T8fdggKzs+MtcPoutYOnskUwV4i r50i+zjHSVjVgyRrIGrwXB8OCxHhZxmRySdbZzh53780vdRwY4jpN9Cg9WvPGuYk q+UdZ91+r8ndFSBFSi9mt62TqpbMrUh153OP5mkg/SyV4AObIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdOm6S6GvPtqSAzQ157X7iDA24LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJjMDY3MWItYmM5ZS0z Y2U2LTljMzEtZmVkZGQyNGNmNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF2oKMmeqZMLyBa2ERiWwHKyBpGqlbVk5vzyMLzjBvle8lGlgOLnhk1 lFJfbUYhynY7VioWN7uuH1dZtK56np4tMyG3NmcSGsM8/7gAWrnvtXIiCSqchaer acoiP0QaZJqykFBjwrmEgAGhONNGNnpax2wpOcGmRk4eR4/Nh6nXCW4WJ6ck0nem AUskYi+ewyqJ3exAvtXWg1gf6Qsm90l8oOBJDRHk7KpYQgMowRoEXLwy5FSKVLGr nXSvngrbeb/7Nxn/WWg8A5TGZe0KxnByv2EbGCN1vVACtBoSQHpQGDlVHqfnW3WI SNEUesb45uiR3w4nRRzDoyvcRodhhrs= -----END CERTIFICATE-----Generated at Thu Sep 24 01:05:28 2026 by rpki-client