$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e5c658b-3700-340a-950b-4e77e44258ed.roa File: 4e5c658b-3700-340a-950b-4e77e44258ed.roa (raw, json) Hash identifier: oIaGJABhXfeJPXfU8Wxb4PDR9VCV7KlcnnaJHLWaB9w= Subject key identifier: DF:57:B9:D3:1A:63:2D:BC:E6:D4:31:63:26:90:CE:95:88:AB:21:3F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A330D81EC7E66623DBD4C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e5c658b-3700-340a-950b-4e77e44258ed.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.161.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:0d:81:ec:7e:66:62:3d:bd:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=7dc66a1b-4d7d-47ae-9853-105c143f0f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:81:ee:2c:7d:3e:67:5b:75:1e:e4:cc:fd: a5:1e:12:60:46:52:e6:33:17:6c:68:e4:3c:b8:26: 3b:20:d5:e5:53:62:c1:2d:c5:a6:4e:23:a2:04:1e: 48:67:85:01:d3:4a:e7:09:3a:4b:7f:24:51:2e:4f: 04:d8:88:f2:ab:83:92:bf:3e:e0:40:e1:85:1b:d4: ba:46:74:a6:5f:43:3d:fa:73:1a:01:5c:a8:55:75: 8b:d3:20:a8:1a:28:7a:ca:24:fd:98:56:d3:21:be: cb:f8:8a:fc:39:5a:53:f9:f4:30:7a:25:78:b1:ff: 68:11:64:dd:14:eb:55:54:74:2e:74:d6:62:b4:87: 83:34:9d:74:31:23:69:0b:87:a2:02:c8:c4:6e:df: cd:dc:0f:44:96:76:9a:a2:98:50:fa:dd:73:a6:66: 61:0f:fa:60:cd:66:50:6c:db:84:a6:ea:4f:bd:17: 16:9e:49:f6:1c:7e:71:fb:54:b9:12:84:25:e4:0f: 6e:3b:9b:82:5f:1c:e6:bd:2c:f4:1c:51:85:9a:fa: b2:bc:38:d5:7f:b5:cd:4a:09:de:db:1c:64:63:ca: 79:7a:99:3a:27:8f:20:9e:fb:10:13:3e:51:a7:9d: 01:ab:80:b5:c1:86:ab:f1:6b:75:75:65:b6:d3:ce: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:B9:D3:1A:63:2D:BC:E6:D4:31:63:26:90:CE:95:88:AB:21:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e5c658b-3700-340a-950b-4e77e44258ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:20:61:ea:9a:40:6a:0b:34:80:d9:c6:dd:e8:2c:f2:22:3d: 09:6c:59:08:93:e2:ba:05:96:3d:f0:f1:55:9b:28:e4:74:86: 5e:35:43:48:d1:5c:03:3e:c7:68:18:a4:cb:17:d1:1b:07:48: 08:a7:1e:f4:37:2b:a0:ee:f1:d0:ba:ed:aa:31:02:86:0f:6d: d5:09:8e:f2:14:29:c6:ea:30:13:c8:65:09:e9:36:f0:e0:d1: eb:aa:d6:93:47:33:99:4c:6d:84:88:42:fb:25:11:43:5f:10: df:31:20:3a:05:ae:60:b5:cc:d2:67:27:20:e8:21:a4:a8:d2: a1:0c:2f:f8:50:1f:20:6e:a5:0a:c3:ce:a5:44:12:9e:2f:4e: a1:96:9c:92:ce:b6:67:44:66:57:67:0e:e6:05:8a:95:0b:a0: ad:10:71:ae:e1:ab:16:b8:3a:6b:c1:02:cf:04:b5:13:db:70: 26:d8:02:74:f1:d5:6d:de:01:0d:8c:01:21:ab:c0:d9:b0:f9: c3:26:b1:42:1e:a4:4f:f7:21:c1:04:8b:44:7b:2a:81:75:21: d3:ab:5e:93:6c:5c:fe:7e:9c:09:51:a0:e3:44:f4:8d:5b:e1: 8d:28:41:07:72:e3:4a:58:5b:20:1a:16:32:66:e0:22:31:61: af:a3:75:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMw2B7H5mYj29TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2RjNjZhMWItNGQ3ZC00N2FlLTk4NTMtMTA1YzE0M2YwZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihqB7ix9PmdbdR7kzP2lHhJgRlLmMxdsaOQ8 uCY7INXlU2LBLcWmTiOiBB5IZ4UB00rnCTpLfyRRLk8E2Ijyq4OSvz7gQOGFG9S6 RnSmX0M9+nMaAVyoVXWL0yCoGih6yiT9mFbTIb7L+Ir8OVpT+fQweiV4sf9oEWTd FOtVVHQudNZitIeDNJ10MSNpC4eiAsjEbt/N3A9ElnaaophQ+t1zpmZhD/pgzWZQ bNuEpupPvRcWnkn2HH5x+1S5EoQl5A9uO5uCXxzmvSz0HFGFmvqyvDjVf7XNSgne 2xxkY8p5epk6J48gnvsQEz5Rp50Bq4C1wYar8Wt1dWW2086wlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9XudMaYy285tQxYyaQzpWIqyE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGU1YzY1OGItMzcwMC0z NDBhLTk1MGItNGU3N2U0NDI1OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMgYeqaQGoLNIDZxt3oLPIiPQlsWQiT4roFlj3w8VWbKOR0hl41Q0jR XAM+x2gYpMsX0RsHSAinHvQ3K6Du8dC67aoxAoYPbdUJjvIUKcbqMBPIZQnpNvDg 0euq1pNHM5lMbYSIQvslEUNfEN8xIDoFrmC1zNJnJyDoIaSo0qEML/hQHyBupQrD zqVEEp4vTqGWnJLOtmdEZldnDuYFipULoK0Qca7hqxa4OmvBAs8EtRPbcCbYAnTx 1W3eAQ2MASGrwNmw+cMmsUIepE/3IcEEi0R7KoF1IdOrXpNsXP5+nAlRoONE9I1b 4Y0oQQdy40pYWyAaFjJm4CIxYa+jdQ8= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:16 2026 by rpki-client