$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa File: 18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa (raw, json) Hash identifier: hcpVFeKpsGu1dcHXghq4XNmATuOfEyzIdy8VvSqmT9A= Subject key identifier: 5B:C0:C0:EC:5A:7B:7D:69:93:76:E4:A7:17:AD:B6:09:B2:C5:67:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32D5BA7345A7E11C0FA400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d5:ba:73:45:a7:e1:1c:0f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9fc3ae82-c8a2-46a8-93bf-8f168a55b013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ba:2e:7c:36:ce:9e:a4:e7:2b:8b:d0:9a:2d: f9:e5:f4:8b:67:d8:3c:34:a1:a5:ad:97:f1:e1:ac: fc:ca:5b:f4:bc:ec:e1:37:7c:fc:53:33:d0:b0:6f: 93:3c:b4:34:76:ba:89:63:74:5a:fb:33:53:fe:71: cf:b0:49:a5:e4:c6:4e:32:2c:5a:f7:5c:35:e6:9c: 47:5b:c4:16:56:05:92:1b:a6:24:9b:ee:46:10:9b: 47:db:9f:bb:ed:53:a1:3e:0a:4d:d8:1f:59:a0:0f: 3c:6d:04:31:28:a5:6e:1d:5a:29:4a:41:fa:a8:9d: 72:fc:af:c1:7f:34:a8:63:bf:ad:2a:61:eb:1c:59: e1:d7:e9:cc:ba:15:88:45:79:8b:77:62:9f:1d:8b: 46:80:ac:a1:bd:1c:7c:55:df:e2:67:6e:3c:59:a1: cf:b3:05:a3:e3:b6:f8:32:6e:92:db:fb:9b:f6:6e: 0e:b7:07:fe:4b:9d:4c:8a:5d:7d:84:46:3c:e6:58: e7:2d:a7:7e:c2:60:8d:d6:a1:24:7e:7b:7e:4d:32: 7d:42:4d:fd:1b:54:8e:a0:ea:77:29:53:1a:77:09: ad:ac:a3:0f:ba:4c:17:de:a6:55:5b:1e:d3:b9:5f: 25:5e:bc:12:97:68:30:e6:cb:99:50:c9:12:d9:9b: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C0:C0:EC:5A:7B:7D:69:93:76:E4:A7:17:AD:B6:09:B2:C5:67:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:05:3d:eb:1a:93:34:dc:d0:ac:e4:6c:27:b7:c1:09:0d:7d: e4:17:32:a1:15:50:a7:fe:2f:0d:24:09:8a:21:cc:d4:fe:70: f7:ce:e7:29:ba:46:0f:6e:03:7b:5e:cb:cd:64:f6:3f:7c:4a: a2:b0:2f:93:be:5e:54:1a:59:d3:54:e7:6b:e9:ea:b8:08:c6: 7b:a2:e2:f0:b3:d0:8a:95:c3:81:3c:7c:f2:92:50:e1:d6:c5: 30:13:3f:14:c0:9a:25:07:c1:53:19:c6:1c:3e:58:5c:99:b7: e2:51:1e:74:e6:e9:b1:eb:e2:c6:8b:a5:76:03:8f:3c:7c:2c: c2:bf:34:e7:a5:0d:36:20:ac:98:33:ae:45:e7:c8:2c:c8:e0: 25:f7:e1:c0:15:92:6f:9e:36:46:5f:7e:d9:3e:b3:5b:aa:4e: dc:56:7e:5b:1e:d1:8e:6c:9f:ec:c6:4d:84:ca:1a:86:08:0f: f3:e6:dc:48:ac:bd:21:d2:93:72:b2:14:4d:05:f2:79:23:61: 93:2c:fb:7e:d7:5d:09:26:ff:82:76:12:d2:67:50:4b:8e:56: 5e:cb:eb:27:d4:f8:d0:fd:9a:be:5e:0b:a6:9d:68:b0:bf:50: 4e:6d:47:65:33:9a:e8:e3:ae:94:97:8f:b4:1b:8c:1a:3a:11: 0b:74:6f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtW6c0Wn4RwPpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWZjM2FlODItYzhhMi00NmE4LTkzYmYtOGYxNjhhNTViMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhboufDbOnqTnK4vQmi355fSLZ9g8NKGlrZfx 4az8ylv0vOzhN3z8UzPQsG+TPLQ0drqJY3Ra+zNT/nHPsEml5MZOMixa91w15pxH W8QWVgWSG6Ykm+5GEJtH25+77VOhPgpN2B9ZoA88bQQxKKVuHVopSkH6qJ1y/K/B fzSoY7+tKmHrHFnh1+nMuhWIRXmLd2KfHYtGgKyhvRx8Vd/iZ248WaHPswWj47b4 Mm6S2/ub9m4Otwf+S51Mil19hEY85ljnLad+wmCN1qEkfnt+TTJ9Qk39G1SOoOp3 KVMadwmtrKMPukwX3qZVWx7TuV8lXrwSl2gw5suZUMkS2ZvL0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvAwOxae31pk3bkpxettgmyxWeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMThhMGRkYzUtMjQxNC0z NTUzLTgyODQtNWFmOTdhNWQxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUFPesakzTc0KzkbCe3wQkNfeQXMqEVUKf+Lw0kCYohzNT+cPfO5ym6 Rg9uA3tey81k9j98SqKwL5O+XlQaWdNU52vp6rgIxnui4vCz0IqVw4E8fPKSUOHW xTATPxTAmiUHwVMZxhw+WFyZt+JRHnTm6bHr4saLpXYDjzx8LMK/NOelDTYgrJgz rkXnyCzI4CX34cAVkm+eNkZfftk+s1uqTtxWflse0Y5sn+zGTYTKGoYID/Pm3Eis vSHSk3KyFE0F8nkjYZMs+37XXQkm/4J2EtJnUEuOVl7L6yfU+ND9mr5eC6adaLC/ UE5tR2UzmujjrpSXj7QbjBo6EQt0byI= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:25 2026 by rpki-client