$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa File: 43642964-cbf2-3ca2-9493-2d182d19d342.roa (raw, json) Hash identifier: pxrmtltwqSO8Sjl50NVApyaNa7lByEH8MBxAPLJ8aAc= Subject key identifier: 82:21:A7:EC:AB:BF:67:33:F8:5D:9F:02:6F:6C:89:9F:AF:3B:3A:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E4F1F42A6F8D73502B2F12800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 70.166.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:42:a6:f8:d7:35:02:b2:f1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=dff31de1-4c93-449d-8c7c-cf20b30578c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:3a:43:c9:b4:98:b9:b4:74:f9:71:f1:94: fa:95:8a:27:aa:c8:40:fa:dd:f4:8f:ca:02:5e:a9: d2:69:ba:6e:1c:c2:bf:85:42:95:ec:28:11:be:40: 4a:88:5e:0a:a5:8f:86:9c:58:89:95:25:1d:6c:27: 1a:a7:c9:7d:99:6b:4c:31:7b:60:55:9d:18:61:7a: 4e:fa:85:3c:63:f7:b9:57:14:55:db:31:fc:ea:41: ce:58:86:60:97:f7:3d:b1:88:60:c4:a5:bd:33:3a: 3d:6c:a1:03:30:66:e2:bf:c3:0e:df:e2:59:0a:63: 39:45:75:65:46:fd:74:59:92:23:de:21:a3:d4:0d: 6f:87:f7:6b:bc:4a:f4:3a:e1:60:70:ed:52:6e:e8: ce:13:bd:b0:51:48:ed:7c:68:91:cf:70:3a:1d:92: b6:e0:a3:96:66:1e:10:d6:e5:54:66:fe:52:1f:fe: 07:1e:15:38:b6:7b:a4:bc:91:05:5c:0b:c7:8c:47: f4:7a:7f:95:ad:7e:a2:c1:9d:5a:a0:51:64:ce:ba: 3b:5f:2a:d6:52:34:84:f7:f9:a0:93:66:d4:2a:50: a9:4f:12:7a:3c:27:b5:02:98:e1:c9:20:07:ba:ff: 39:13:67:3c:1e:b6:68:84:ba:64:33:e6:fc:7f:ff: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:21:A7:EC:AB:BF:67:33:F8:5D:9F:02:6F:6C:89:9F:AF:3B:3A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.166.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:df:28:33:29:cf:d4:a8:69:84:a3:b6:f2:e5:46:cc:ef:d8: f0:60:c1:a6:89:be:bc:8d:38:0b:3e:c3:fd:c5:2c:9f:c4:3c: 85:83:e7:13:c6:1b:d6:8a:07:69:57:27:07:0e:7a:01:e4:4f: 75:1b:1f:6c:79:34:42:56:ce:33:66:2a:af:bf:62:a1:6c:2d: 19:50:e0:b1:db:5f:e2:80:bc:ce:c5:52:d0:3a:dd:49:ca:85: f7:ae:16:a8:bc:18:1b:39:22:7e:12:42:6f:a7:4c:af:6c:97: b6:1c:8d:02:e3:5e:f7:09:bd:7c:26:97:40:c8:3f:0d:34:51: d2:b5:16:ce:5d:3e:24:30:e1:b2:79:69:38:28:56:53:79:00: 87:99:6c:1a:a0:99:46:7e:5a:8f:4a:d9:90:2b:86:d1:3c:cf: a6:9e:d2:a8:4f:43:64:db:ad:1c:e6:29:ef:15:c0:31:39:93: 95:72:b1:0f:9d:47:79:33:a6:5a:91:ba:86:41:48:f4:20:dd: b2:73:07:84:40:70:83:08:c7:43:40:e0:23:3c:17:e5:eb:c9: 1e:71:c2:5f:cf:0e:d5:19:b4:f6:bf:0f:89:e6:fb:4c:59:f8: 75:e9:03:1c:df:91:1c:b9:6c:7d:11:ef:3c:9b:73:c0:c6:42: f8:89:9c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PH0Km+Nc1ArLxKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZGZmMzFkZTEtNGM5My00NDlkLThjN2MtY2YyMGIzMDU3OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMs6Q8m0mLm0dPlx8ZT6lYonqshA+t30j8oC XqnSabpuHMK/hUKV7CgRvkBKiF4KpY+GnFiJlSUdbCcap8l9mWtMMXtgVZ0YYXpO +oU8Y/e5VxRV2zH86kHOWIZgl/c9sYhgxKW9Mzo9bKEDMGbiv8MO3+JZCmM5RXVl Rv10WZIj3iGj1A1vh/drvEr0OuFgcO1SbujOE72wUUjtfGiRz3A6HZK24KOWZh4Q 1uVUZv5SH/4HHhU4tnukvJEFXAvHjEf0en+VrX6iwZ1aoFFkzro7XyrWUjSE9/mg k2bUKlCpTxJ6PCe1ApjhySAHuv85E2c8HrZohLpkM+b8f//nrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIhp+yrv2cz+F2fAm9siZ+vOzq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2NDI5NjQtY2JmMi0z Y2EyLTk0OTMtMmQxODJkMTlkMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInfKDMpz9SoaYSjtvLlRszv2PBgwaaJvryNOAs+w/3FLJ/EPIWD5xPG G9aKB2lXJwcOegHkT3UbH2x5NEJWzjNmKq+/YqFsLRlQ4LHbX+KAvM7FUtA63UnK hfeuFqi8GBs5In4SQm+nTK9sl7YcjQLjXvcJvXwml0DIPw00UdK1Fs5dPiQw4bJ5 aTgoVlN5AIeZbBqgmUZ+Wo9K2ZArhtE8z6ae0qhPQ2TbrRzmKe8VwDE5k5VysQ+d R3kzplqRuoZBSPQg3bJzB4RAcIMIx0NA4CM8F+XryR5xwl/PDtUZtPa/D4nm+0xZ +HXpAxzfkRy5bH0R7zybc8DGQviJnOc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:29:23 2026 by rpki-client