$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e476d5d-d3ed-3e8a-bffe-0f0da020f4bd.roa File: 0e476d5d-d3ed-3e8a-bffe-0f0da020f4bd.roa (raw, json) Hash identifier: dZ0ZLCd9qgx3i4QYeUZ7HeVWEsytIcxYWNDS4+o/rNU= Subject key identifier: AA:71:79:8B:50:D2:09:13:7E:0A:83:F1:24:23:17:9F:50:35:9E:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32BF0012BE9A050E76B4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e476d5d-d3ed-3e8a-bffe-0f0da020f4bd.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:bf:00:12:be:9a:05:0e:76:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=d2a2315e-ced3-425d-a793-bfb4924d85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:0f:80:68:92:ec:e3:6e:ed:42:72:9f:ca: 7c:71:36:6e:04:96:a5:cc:80:bb:c1:e7:b9:c8:93: e6:4c:e6:29:9b:e4:ec:f8:47:ab:e1:c1:1e:e5:2a: 81:76:71:0f:0d:0d:d2:b4:82:a3:61:d2:68:fb:75: 7d:ec:22:3b:e9:96:0c:ab:49:98:12:0f:8b:2e:67: f7:28:11:6a:84:86:81:df:1d:57:c7:1c:3d:a7:25: 60:61:17:66:ed:1b:d9:2b:47:1a:4c:f7:b1:c8:26: c0:78:06:47:be:06:db:22:5e:b0:97:c8:72:f4:f3: f6:47:a8:64:17:43:13:e7:50:0f:c5:6d:b3:78:a1: 8a:75:e0:41:be:8f:bc:34:a0:f1:3f:0b:cd:76:14: 88:a1:f0:48:72:6b:14:3a:a2:08:bd:80:f2:0a:a7: dc:2b:2a:30:59:27:ec:88:4c:01:75:6d:40:65:6d: 2c:5b:fc:49:57:a0:76:18:4c:fa:30:8a:e1:0f:ce: f0:f8:5f:73:58:89:68:7f:37:ea:23:7f:af:3a:b1: 8d:73:7f:49:de:6c:31:23:be:e0:55:e4:4c:c7:46: 3a:bc:35:1c:06:64:bc:2f:af:f9:07:45:85:11:f7: ff:9d:e9:3e:2e:55:86:8d:c5:0c:bf:79:8f:dd:63: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:79:8B:50:D2:09:13:7E:0A:83:F1:24:23:17:9F:50:35:9E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e476d5d-d3ed-3e8a-bffe-0f0da020f4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b5:0d:0d:f8:d3:aa:ac:c7:87:b0:61:3b:d3:a7:91:fc:e9: 69:a8:90:b3:d8:50:37:16:3f:c4:bb:04:4e:1f:58:37:0c:eb: b9:a3:45:bc:8c:d1:6d:53:0f:65:df:89:6b:ea:6f:de:70:ed: f3:2a:d2:69:da:b7:25:97:bd:16:74:a8:ad:3b:63:1f:9a:18: a1:18:2a:62:b2:a9:47:2f:54:8e:12:81:23:06:90:19:d8:77: f0:4e:e4:92:2e:00:70:67:dd:f6:5a:ef:7b:cf:d1:6a:8f:80: 65:7c:ea:91:99:c0:25:56:2a:ac:41:55:64:59:8a:18:61:0b: ee:3a:2d:b2:2f:61:85:67:51:74:69:3e:25:7a:79:67:a4:e9: 6f:01:c1:c4:ea:34:df:f7:f9:6f:50:cc:11:9d:19:ff:5a:d3: 5b:89:97:ad:fb:44:be:c4:d1:a0:ab:f9:0e:61:af:aa:39:85: a3:ec:f2:2c:21:fe:2a:85:ec:7a:1d:96:e3:5c:89:40:40:c6: 48:22:aa:0f:15:a8:44:2f:e8:24:af:b3:09:a4:68:76:e3:98: ac:e6:5b:76:04:30:9d:d3:96:15:2b:f6:77:fa:77:9b:80:6d: 24:be:28:bc:3d:39:07:d1:8b:ec:bd:8c:12:82:53:d1:1f:4e: f6:a6:70:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMr8AEr6aBQ52tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDJhMjMxNWUtY2VkMy00MjVkLWE3OTMtYmZiNDkyNGQ4NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjAPgGiS7ONu7UJyn8p8cTZuBJalzIC7wee5 yJPmTOYpm+Ts+Eer4cEe5SqBdnEPDQ3StIKjYdJo+3V97CI76ZYMq0mYEg+LLmf3 KBFqhIaB3x1Xxxw9pyVgYRdm7RvZK0caTPexyCbAeAZHvgbbIl6wl8hy9PP2R6hk F0MT51APxW2zeKGKdeBBvo+8NKDxPwvNdhSIofBIcmsUOqIIvYDyCqfcKyowWSfs iEwBdW1AZW0sW/xJV6B2GEz6MIrhD87w+F9zWIlofzfqI3+vOrGNc39J3mwxI77g VeRMx0Y6vDUcBmS8L6/5B0WFEff/nek+LlWGjcUMv3mP3WNHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpxeYtQ0gkTfgqD8SQjF59QNZ5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU0NzZkNWQtZDNlZC0z ZThhLWJmZmUtMGYwZGEwMjBmNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq1DQ3406qsx4ewYTvTp5H86WmokLPYUDcWP8S7BE4fWDcM67mjRbyM 0W1TD2XfiWvqb95w7fMq0mnatyWXvRZ0qK07Yx+aGKEYKmKyqUcvVI4SgSMGkBnY d/BO5JIuAHBn3fZa73vP0WqPgGV86pGZwCVWKqxBVWRZihhhC+46LbIvYYVnUXRp PiV6eWek6W8BwcTqNN/3+W9QzBGdGf9a01uJl637RL7E0aCr+Q5hr6o5haPs8iwh /iqF7HodluNciUBAxkgiqg8VqEQv6CSvswmkaHbjmKzmW3YEMJ3TlhUr9nf6d5uA bSS+KLw9OQfRi+y9jBKCU9EfTvamcNk= -----END CERTIFICATE-----Generated at Wed Nov 4 02:45:25 2026 by rpki-client