$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43eae3af-1c5b-3e63-9a77-025d3db88e7a.roa File: 43eae3af-1c5b-3e63-9a77-025d3db88e7a.roa (raw, json) Hash identifier: H9ZzOaLuX4yVrrGb8GdwA2XsA7zhY2lZL4OtJJJEL6g= Subject key identifier: 13:27:EF:D4:E0:60:E9:5F:65:91:AE:79:43:52:51:01:CA:E1:3F:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD67F02D15842936733180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43eae3af-1c5b-3e63-9a77-025d3db88e7a.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.191.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:67:f0:2d:15:84:29:36:73:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=9d30c1bd-018e-426d-8cd8-cb56011f2604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:2b:04:69:89:da:4e:cd:84:5b:80:eb:c9: 0a:4f:a5:12:6f:1e:b7:16:bf:d6:63:28:cb:aa:65: 32:5e:56:fc:f2:0b:2f:d3:37:7f:b9:9b:73:10:6f: 00:99:85:a0:f3:2c:f7:82:f4:5f:3b:da:01:a1:a5: ea:6c:e1:2e:f5:2c:39:be:07:08:97:a8:d9:c3:c2: f6:9b:00:7d:7d:0b:86:88:ef:1f:1e:df:89:81:0d: cc:3c:9f:29:e9:4d:a3:8a:b5:be:f9:2b:fd:75:27: 16:ec:ef:6b:11:58:ec:5c:19:28:9c:de:43:31:08: 67:c8:3b:f6:12:12:0a:11:e8:e2:28:f4:8e:33:40: 88:41:7a:f6:1e:cd:bf:64:a6:8c:01:7b:c6:02:87: 4a:88:33:f2:ee:7a:ab:54:84:d8:40:36:1f:0d:61: bf:e8:8b:9b:4c:c6:24:ce:06:4e:81:df:31:11:21: 81:eb:e9:87:a6:5b:b4:b3:fd:c0:39:90:13:8f:74: 43:2d:7f:9b:97:3e:86:8c:4e:d7:50:5a:9c:5c:06: 09:07:36:d1:4c:81:1d:ec:a3:ea:e9:39:0b:52:82: 2b:3d:28:71:23:ee:9c:61:36:ca:93:1b:76:8c:98: bf:cf:8b:62:56:5a:96:09:16:81:90:7b:09:9b:9e: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:27:EF:D4:E0:60:E9:5F:65:91:AE:79:43:52:51:01:CA:E1:3F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43eae3af-1c5b-3e63-9a77-025d3db88e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.191.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:45:98:dc:50:36:64:d2:a0:aa:af:0c:37:27:ff:71:15:95: c1:f5:d4:1a:31:54:3f:be:67:4a:c9:a6:a2:b4:90:06:97:26: 17:89:fe:43:34:f7:15:7e:87:e8:9d:9d:9a:9b:7e:58:20:76: e6:8b:28:03:4b:8e:59:e5:13:65:9e:e6:14:e4:28:0f:08:1b: c9:be:21:06:dd:d1:07:92:6c:6d:fe:4a:dd:1b:91:1d:7f:92: 67:70:49:58:41:49:66:6a:de:10:65:cc:0f:5f:41:cc:d5:96: f9:45:d4:ee:ee:4c:8c:ab:d5:24:78:e3:bb:25:bb:47:ea:35: 93:c6:5b:a7:d2:66:a2:23:ad:d7:83:93:ab:97:e2:9d:f8:74: 6a:28:34:b1:f6:e0:f3:ce:34:ee:ef:02:bb:a8:2d:d7:e0:42: 71:03:a6:87:e7:6e:11:d1:a2:7b:88:7b:28:59:c1:2b:ee:95: d2:ad:06:d9:01:a8:98:8a:de:0c:a5:f0:5e:34:42:76:97:60: 8d:56:20:9d:3e:c8:0a:ec:70:9b:05:df:de:8f:d4:c9:9a:ef: 8a:d5:5c:cf:23:39:0d:d7:81:16:55:d9:95:02:01:50:97:bd: 10:b9:50:4b:ea:c4:b6:df:d6:91:b6:8e:39:01:1a:6d:c8:2c: 19:4d:f4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WfwLRWEKTZzMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWQzMGMxYmQtMDE4ZS00MjZkLThjZDgtY2I1NjAxMWYyNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIrBGmJ2k7NhFuA68kKT6USbx63Fr/WYyjL qmUyXlb88gsv0zd/uZtzEG8AmYWg8yz3gvRfO9oBoaXqbOEu9Sw5vgcIl6jZw8L2 mwB9fQuGiO8fHt+JgQ3MPJ8p6U2jirW++Sv9dScW7O9rEVjsXBkonN5DMQhnyDv2 EhIKEejiKPSOM0CIQXr2Hs2/ZKaMAXvGAodKiDPy7nqrVITYQDYfDWG/6IubTMYk zgZOgd8xESGB6+mHplu0s/3AOZATj3RDLX+blz6GjE7XUFqcXAYJBzbRTIEd7KPq 6TkLUoIrPShxI+6cYTbKkxt2jJi/z4tiVlqWCRaBkHsJm57XSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMn79TgYOlfZZGueUNSUQHK4T9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNlYWUzYWYtMWM1Yi0z ZTYzLTlhNzctMDI1ZDNkYjg4ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr8eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtFmNxQNmTSoKqvDDcn/3EVlcH11BoxVD++Z0rJpqK0kAaXJheJ/kM0 9xV+h+idnZqbflggduaLKANLjlnlE2We5hTkKA8IG8m+IQbd0QeSbG3+St0bkR1/ kmdwSVhBSWZq3hBlzA9fQczVlvlF1O7uTIyr1SR447slu0fqNZPGW6fSZqIjrdeD k6uX4p34dGooNLH24PPONO7vAruoLdfgQnEDpofnbhHRonuIeyhZwSvuldKtBtkB qJiK3gyl8F40QnaXYI1WIJ0+yArscJsF396P1Mma74rVXM8jOQ3XgRZV2ZUCAVCX vRC5UEvqxLbf1pG2jjkBGm3ILBlN9CM= -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:50 2026 by rpki-client