$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa File: 4339de50-d6ec-3f49-8167-716050f6f12f.roa (raw, json) Hash identifier: J35kpUqGuPM5fv7pF90P+oYwGe8dBMbbnIOzBON8LeE= Subject key identifier: 93:B2:5F:E1:49:1A:30:9C:62:8B:86:14:E9:B5:F3:CD:59:35:8B:F2 Certificate issuer: /CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Certificate serial: 010D0C9F4328584E6B0A102A115A7E2692B4D700 Authority key identifier: 1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 22649 IP address blocks: 165.140.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:10:2a:11:5a:7e:26:92:b4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=1523031d-1e56-4f74-8775-69d129fb7c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:a1:fe:c0:1a:61:17:ba:e2:69:3f:39:4a: 3e:39:0f:88:ae:72:02:79:65:8e:b2:5c:9a:cb:c2: f3:bb:83:f1:bc:cc:35:69:94:d1:1a:24:d5:d8:e5: ee:07:2f:a9:09:f2:b2:49:b1:f9:20:08:ea:96:76: 03:a8:8f:24:4f:35:b0:02:9a:c0:ce:f7:b7:4e:a5: 3d:22:e2:65:4e:60:a7:56:4b:59:60:81:55:49:ea: 38:85:4b:82:57:c8:3c:81:6e:bd:e7:65:4c:61:7d: 4e:ad:29:b4:41:11:a6:80:6f:87:a2:01:63:9d:76: 5e:46:ab:bb:e1:9b:3a:46:1e:87:fd:c3:06:44:2c: 7a:e2:51:7e:64:ce:cc:35:1e:8b:cf:4f:d5:00:2f: 64:15:f5:bc:3d:ba:d1:ec:9f:6e:08:e9:70:b6:76: 93:00:0f:99:17:b9:15:b4:1b:f9:d0:91:3d:7d:5a: dc:66:ed:ca:3b:05:80:b1:7a:28:d8:97:c3:74:34: 51:3a:4f:04:44:84:77:a2:dc:71:35:02:e9:61:ff: 6e:52:8f:8c:78:b7:c5:3a:9b:32:f9:4e:ef:6d:ed: 52:fa:a4:66:3a:e0:ea:a6:b8:bd:fb:41:6b:7d:18: 58:e9:7a:62:8d:e4:36:dc:e5:0d:c0:88:dc:7e:28: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:5F:E1:49:1A:30:9C:62:8B:86:14:E9:B5:F3:CD:59:35:8B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl X509v3 Authority Key Identifier: keyid:1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c8:3e:cd:82:ea:71:6e:7d:d7:48:06:30:58:4c:6f:58:7a: 9a:30:17:29:5c:b2:8d:22:15:66:97:8b:d5:ec:75:34:e4:86: 9e:44:e3:85:ae:12:1c:85:bc:35:30:c1:24:c6:b3:93:1f:43: 39:9b:ff:bd:c8:de:ba:76:49:7d:72:b9:a0:11:30:dd:54:da: 7f:48:67:29:d2:9d:7b:68:cf:c8:d2:c8:2b:99:84:b7:fb:1e: 61:6e:71:44:4c:29:46:5c:23:82:88:3b:16:fe:07:e5:03:97: dc:17:60:3c:ce:08:c8:cb:be:b3:98:95:c5:b6:0e:8c:b6:3c: 45:d9:3b:90:65:e6:d4:dc:bb:f0:ea:13:d8:25:eb:87:7b:d5: e9:db:7c:10:20:d2:ca:b4:b8:e2:af:39:b2:93:4c:8e:70:bd: 71:a7:3f:b9:c6:44:11:2f:b9:ed:32:2b:f3:3b:38:d4:08:52: 6c:4d:0a:36:29:a7:33:d2:84:ac:31:b6:64:f3:c5:fa:b9:c6: fc:c4:78:c5:c9:c4:0b:e5:bc:ca:97:22:72:49:f5:32:11:7c: c5:52:bc:79:a7:84:5f:59:95:de:25:2d:0e:b7:da:ab:92:30: 7d:06:f2:36:af:28:39:11:f8:2d:dc:13:2c:84:45:fc:f1:01: c4:6f:40:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChAqEVp+JpK01wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBiMzAzYmEtZDJmNC00OTFjLTkwZGItNDg3NWI5ZmZl MDNjMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MTUyMzAzMWQtMWU1Ni00Zjc0LTg3NzUtNjlkMTI5ZmI3YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7qh/sAaYRe64mk/OUo+OQ+IrnICeWWOslya y8Lzu4PxvMw1aZTRGiTV2OXuBy+pCfKySbH5IAjqlnYDqI8kTzWwAprAzve3TqU9 IuJlTmCnVktZYIFVSeo4hUuCV8g8gW6952VMYX1OrSm0QRGmgG+HogFjnXZeRqu7 4Zs6Rh6H/cMGRCx64lF+ZM7MNR6Lz0/VAC9kFfW8PbrR7J9uCOlwtnaTAA+ZF7kV tBv50JE9fVrcZu3KOwWAsXoo2JfDdDRROk8ERIR3otxxNQLpYf9uUo+MeLfFOpsy +U7vbe1S+qRmOuDqpri9+0FrfRhY6XpijeQ23OUNwIjcfig6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOyX+FJGjCcYouGFOm1881ZNYvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGIz MDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1YjlmZmUwM2MvNDMzOWRlNTAtZDZlYy0z ZjQ5LTgxNjctNzE2MDUwZjZmMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBiMzAzYmEtZDJmNC00OTFjLTkw ZGItNDg3NWI5ZmZlMDNjLzkwYjMwM2JhLWQyZjQtNDkxYy05MGRiLTQ4NzViOWZm ZTAzYy5jcmwwHwYDVR0jBBgwFoAUHovl4nx7B1nioUPZzhgV1nlgwb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGIzMDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1 YjlmZmUwM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbIPs2C6nFufddIBjBYTG9YepowFylcso0iFWaXi9XsdTTkhp5E44Wu EhyFvDUwwSTGs5MfQzmb/73I3rp2SX1yuaARMN1U2n9IZynSnXtoz8jSyCuZhLf7 HmFucURMKUZcI4KIOxb+B+UDl9wXYDzOCMjLvrOYlcW2Doy2PEXZO5Bl5tTcu/Dq E9gl64d71enbfBAg0sq0uOKvObKTTI5wvXGnP7nGRBEvue0yK/M7ONQIUmxNCjYp pzPShKwxtmTzxfq5xvzEeMXJxAvlvMqXInJJ9TIRfMVSvHmnhF9Zld4lLQ632quS MH0G8javKDkR+C3cEyyERfzxAcRvQD0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:11:56 2026 by rpki-client