$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa File: 18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa (raw, json) Hash identifier: Ojdc7NSiZ35MusjNeT18QTEZMsuJFIpMNhczoCn1Jmo= Subject key identifier: A3:FF:20:BE:2C:8D:26:79:9F:66:53:6B:78:2A:7C:8B:9A:30:49:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA2FC77A2CC900E3ECF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.172.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a2:fc:77:a2:cc:90:0e:3e:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=418b0263-a40d-4a98-970a-8eca66f35dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:bd:88:26:2a:cf:96:72:a1:00:86:61:f0: a4:f0:db:f8:58:42:0f:c3:67:c2:e7:9e:57:cf:b4: d5:08:f3:4f:31:b3:62:65:c2:fe:3c:38:dc:db:6d: 27:89:c4:8e:99:60:96:8c:8e:b2:88:17:90:a3:89: 4d:e6:dc:82:0e:c4:fd:a9:6f:e3:9e:c5:2a:22:1f: c1:dc:be:cb:35:ad:2d:b6:67:cc:8b:d3:56:ab:52: 96:a7:ae:5f:20:1f:47:71:66:a2:94:25:b5:97:5d: 37:ee:4a:47:dc:e6:8b:56:ab:53:09:90:6b:67:ba: 02:23:98:50:a8:32:86:93:b8:f7:98:52:5c:60:4f: 4a:24:3f:c2:ac:64:f3:10:92:f6:41:2a:cb:a6:59: b5:c3:01:41:03:75:33:30:99:f4:fd:9c:40:ae:e5: 5e:76:72:da:b0:52:60:57:d8:1b:c1:4b:3f:96:83: de:d3:82:8a:6e:e0:0c:58:31:7b:c0:c4:b2:18:12: 6b:08:4e:c7:f0:aa:0f:74:cb:32:08:d9:40:93:35: c2:0a:12:96:0d:09:23:bf:8d:7a:2e:3b:bb:be:ee: 07:19:cd:0a:5d:fc:e3:c4:89:78:57:32:86:86:47: 94:ae:e5:cb:1b:07:7a:f4:b8:0b:32:82:2b:6c:d5: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:20:BE:2C:8D:26:79:9F:66:53:6B:78:2A:7C:8B:9A:30:49:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d7:7b:d7:68:66:16:dd:eb:89:23:52:e4:99:87:56:20:2f: b6:11:4f:3f:b7:1b:a6:d3:38:97:6e:b2:ee:33:72:dc:c3:7e: cb:ae:34:a5:ab:db:0e:a3:66:0c:b1:97:f4:73:ec:0c:6f:f6: 7a:3c:b6:42:67:cd:ae:0e:f5:88:42:b8:77:e7:02:c6:cd:ea: 13:b3:aa:17:6f:f7:65:53:2b:91:71:6b:8e:16:ab:da:11:99: f5:25:13:43:43:bf:78:e0:e2:9d:59:57:f9:6f:90:14:b0:ec: cd:91:83:9e:24:17:3c:d7:5f:ca:4f:2b:2d:aa:8d:46:64:bf: bc:23:dd:2d:cd:b5:93:e9:29:8b:63:cb:5e:45:99:33:81:86: 65:0b:1b:a2:94:e0:39:8f:49:b7:43:6c:0c:82:fc:3e:ea:16: 19:88:ae:0c:c2:4f:f2:5a:e1:53:e4:b9:c9:79:61:ae:fc:65: d7:7c:ef:90:54:eb:a3:bb:11:4a:b5:18:ce:c0:38:00:ef:71: 47:0d:38:81:02:71:35:a2:a4:f0:61:eb:7a:29:06:3a:99:5a: 1f:1b:d1:67:82:a8:e5:13:27:81:6d:20:f4:2c:cf:d6:a1:e6: e2:96:1c:d1:8e:62:d8:04:16:e7:23:e5:6a:b1:b1:b7:87:e9: 29:34:19:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6L8d6LMkA4+z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDE4YjAyNjMtYTQwZC00YTk4LTk3MGEtOGVjYTY2ZjM1ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl69iCYqz5ZyoQCGYfCk8Nv4WEIPw2fC555X z7TVCPNPMbNiZcL+PDjc220nicSOmWCWjI6yiBeQo4lN5tyCDsT9qW/jnsUqIh/B 3L7LNa0ttmfMi9NWq1KWp65fIB9HcWailCW1l1037kpH3OaLVqtTCZBrZ7oCI5hQ qDKGk7j3mFJcYE9KJD/CrGTzEJL2QSrLplm1wwFBA3UzMJn0/ZxAruVednLasFJg V9gbwUs/loPe04KKbuAMWDF7wMSyGBJrCE7H8KoPdMsyCNlAkzXCChKWDQkjv416 Lju7vu4HGc0KXfzjxIl4VzKGhkeUruXLGwd69LgLMoIrbNVTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP/IL4sjSZ5n2ZTa3gqfIuaMEkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMThhMGRkYzUtMjQxNC0z NTUzLTgyODQtNWFmOTdhNWQxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfXe9doZhbd64kjUuSZh1YgL7YRTz+3G6bTOJdusu4zctzDfsuuNKWr 2w6jZgyxl/Rz7Axv9no8tkJnza4O9YhCuHfnAsbN6hOzqhdv92VTK5Fxa44Wq9oR mfUlE0NDv3jg4p1ZV/lvkBSw7M2Rg54kFzzXX8pPKy2qjUZkv7wj3S3NtZPpKYtj y15FmTOBhmULG6KU4DmPSbdDbAyC/D7qFhmIrgzCT/Ja4VPkucl5Ya78Zdd875BU 66O7EUq1GM7AOADvcUcNOIECcTWipPBh63opBjqZWh8b0WeCqOUTJ4FtIPQsz9ah 5uKWHNGOYtgEFucj5WqxsbeH6Sk0GYE= -----END CERTIFICATE-----Generated at Thu Mar 19 05:42:40 2026 by rpki-client