$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa File: 232895c1-2d84-3efd-9f62-0662d974b274.roa (raw, json) Hash identifier: dn9Rrmz42uQ0mJtmIvprknkhEWCg9m0pr/F4Y+H1BH0= Subject key identifier: 8C:BB:BC:2C:44:0A:7A:90:4B:8F:22:78:43:72:86:7B:16:42:5B:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F8899E4660B58F76EA660 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.161.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:88:99:e4:66:0b:58:f7:6e:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=5707908c-f8c7-41d7-9858-859501b098e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:a6:4a:d6:ca:b3:d4:a1:b2:96:a9:65:cf: 0f:32:b8:af:4d:fb:47:8b:a0:f0:f4:4c:7b:f7:db: b9:a2:fd:8d:f5:ec:3d:cc:21:50:d0:60:e2:b6:9e: b6:6c:0c:d0:5d:14:65:76:e0:e8:90:7c:76:2c:c9: bd:6a:76:da:93:88:8c:3b:97:d5:59:75:c6:74:e3: 8c:30:3e:89:5a:6b:27:98:27:e4:ad:d4:b3:af:02: ea:68:c4:41:c7:52:bf:6f:05:1d:ed:1c:6b:d8:ca: dc:dd:af:20:b4:6c:bf:35:61:f2:99:60:d4:70:e9: d2:be:4d:44:76:c4:89:37:47:30:ff:cc:a3:ea:41: d6:36:80:31:37:dd:a9:82:5c:44:52:56:50:46:45: 89:c8:d9:0c:55:40:cb:ed:52:ed:6c:5e:cc:50:1b: 2d:9b:1a:d4:35:7b:9a:ec:c9:5b:e5:ad:90:cf:3c: 73:7c:03:f9:e3:e1:38:59:31:08:dd:34:77:ff:9e: 53:00:f1:73:87:4b:5b:0d:2d:d8:9f:48:47:63:a1: e7:57:32:33:1f:b5:a8:59:1f:4b:77:bf:51:d1:c2: a6:b4:93:eb:cc:bd:fa:15:2f:3a:03:73:aa:37:2d: 34:1d:49:03:34:5c:4d:2f:9c:9d:13:74:28:3d:d1: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:BC:2C:44:0A:7A:90:4B:8F:22:78:43:72:86:7B:16:42:5B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:13:0e:da:34:64:11:16:da:26:15:6d:86:94:b7:9e:86:4e: 19:76:45:36:3b:f9:51:46:fb:ee:5d:ca:cf:91:46:99:e6:32: 2c:ac:f8:bc:fe:47:c8:b0:73:51:57:d4:18:4b:0c:ca:a7:8d: 51:91:b2:c5:52:ca:d8:4b:56:61:5b:2c:60:80:10:55:96:a4: eb:65:96:94:84:3e:69:fa:3b:e4:3f:9b:9b:2e:d6:b8:cc:04: 93:fb:e3:85:d0:3d:5a:ae:50:fc:0b:11:d4:8e:b6:9b:51:22: 3e:3d:b6:3b:52:8e:70:82:06:ce:4a:0b:f4:2f:03:c7:1b:14: c3:c9:b5:53:ff:e3:1c:88:56:7d:26:c7:2b:48:fa:f6:85:15: 1a:4e:5e:3d:62:90:a7:6d:90:f9:7d:72:1f:6d:06:40:92:f4: be:0f:5f:40:77:74:ac:c3:89:eb:fd:c1:db:d3:29:32:08:12: a7:c8:f1:2b:68:4f:8c:7b:2c:30:d6:72:37:c6:67:b6:79:7f: ee:85:2a:1d:8b:66:ea:ac:76:7f:41:8b:4e:27:41:a9:93:8d: 9a:d5:10:c0:50:ac:05:79:91:35:37:3e:2e:cf:6f:a1:7f:12: e3:c2:d8:90:28:a5:ff:72:da:79:d4:60:2d:bb:ca:f5:dc:7e: 28:b8:0f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4iZ5GYLWPdupmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTcwNzkwOGMtZjhjNy00MWQ3LTk4NTgtODU5NTAxYjA5OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+mStbKs9ShspapZc8PMrivTftHi6Dw9Ex7 99u5ov2N9ew9zCFQ0GDitp62bAzQXRRlduDokHx2LMm9anbak4iMO5fVWXXGdOOM MD6JWmsnmCfkrdSzrwLqaMRBx1K/bwUd7Rxr2Mrc3a8gtGy/NWHymWDUcOnSvk1E dsSJN0cw/8yj6kHWNoAxN92pglxEUlZQRkWJyNkMVUDL7VLtbF7MUBstmxrUNXua 7Mlb5a2QzzxzfAP54+E4WTEI3TR3/55TAPFzh0tbDS3Yn0hHY6HnVzIzH7WoWR9L d79R0cKmtJPrzL36FS86A3OqNy00HUkDNFxNL5ydE3QoPdExCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy7vCxECnqQS48ieENyhnsWQlvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMyODk1YzEtMmQ4NC0z ZWZkLTlmNjItMDY2MmQ5NzRiMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJETDto0ZBEW2iYVbYaUt56GThl2RTY7+VFG++5dys+RRpnmMiys+Lz+ R8iwc1FX1BhLDMqnjVGRssVSythLVmFbLGCAEFWWpOtllpSEPmn6O+Q/m5su1rjM BJP744XQPVquUPwLEdSOtptRIj49tjtSjnCCBs5KC/QvA8cbFMPJtVP/4xyIVn0m xytI+vaFFRpOXj1ikKdtkPl9ch9tBkCS9L4PX0B3dKzDiev9wdvTKTIIEqfI8Sto T4x7LDDWcjfGZ7Z5f+6FKh2LZuqsdn9Bi04nQamTjZrVEMBQrAV5kTU3Pi7Pb6F/ EuPC2JAopf9y2nnUYC27yvXcfii4D1c= -----END CERTIFICATE-----Generated at Thu Mar 19 07:01:58 2026 by rpki-client