$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40081d5a-54b6-3691-9373-149e129408eb.roa File: 40081d5a-54b6-3691-9373-149e129408eb.roa (raw, json) Hash identifier: NRmouXJ+8VQp78AApnazC6awmf4Lk8ukClKqqIHLj2A= Subject key identifier: B9:01:3B:CF:B2:33:50:01:5C:93:41:A5:E1:43:CD:DD:63:23:B5:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBD9661DD68486E4D7A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40081d5a-54b6-3691-9373-149e129408eb.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.172.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:bd:96:61:dd:68:48:6e:4d:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=71124955-fa3f-4268-aa9e-0907a30044f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:c3:dc:06:d8:95:12:cc:c8:70:11:fe:0f: ba:5e:9c:f2:6d:e3:0d:08:1a:2c:35:6d:2c:d7:91: 65:e6:0e:93:cf:16:cd:81:e0:a0:d5:f4:fc:28:ea: e8:fa:de:ca:85:8d:c6:7f:6e:d6:62:0e:a2:d6:54: ac:5a:89:bc:bb:81:a3:13:f4:68:72:de:5b:58:61: aa:ec:ea:6b:59:84:75:af:c5:84:80:e8:25:4c:3f: d9:98:5b:d4:5c:c4:df:bc:c1:df:f3:4a:59:95:f0: d7:f6:72:32:ff:73:40:8c:c8:2e:44:1b:b9:e0:ce: 61:bc:9d:90:38:d7:56:34:76:e2:da:59:62:3a:6a: 10:52:cb:d3:64:e9:6b:3b:33:d3:47:0b:60:10:82: 64:80:b2:ed:bb:d9:ff:17:1e:7a:55:b3:4b:ac:e5: db:4f:17:b2:96:ca:90:63:fc:50:ff:0d:d4:95:12: d4:b3:a5:d6:89:c4:86:6e:53:36:0c:30:eb:fb:97: ef:84:33:3d:38:84:7f:2d:e4:4e:bc:9e:f0:44:4c: a6:b6:d9:fb:fc:10:15:81:83:fe:61:5a:2e:31:bc: f4:09:16:cd:27:a3:23:09:ac:c1:66:da:3e:f1:22: af:2d:b3:49:d8:16:80:0f:66:0a:d4:a6:3d:1c:45: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:3B:CF:B2:33:50:01:5C:93:41:A5:E1:43:CD:DD:63:23:B5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40081d5a-54b6-3691-9373-149e129408eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:87:f7:45:14:9f:48:26:f0:a0:ca:76:b8:94:c7:e8:9d:32: 7c:74:78:50:cb:4a:f5:31:52:f8:23:39:83:ef:b5:b6:c3:7d: 2b:59:a4:3e:8c:3d:8c:ff:fc:55:ca:6c:ce:ee:f7:fa:23:bf: 8b:a8:a6:9a:b1:a0:f5:15:1e:25:2f:08:dc:49:31:c1:ae:80: 7f:5f:04:1a:7c:22:09:94:20:ec:ce:7a:a3:11:e6:35:5b:f7: 4b:5c:ff:5f:1e:c1:4a:7c:eb:03:fa:e8:93:e1:fa:a9:d0:3f: 7d:23:4d:58:c8:aa:e4:a6:96:56:95:60:23:a7:25:53:71:ee: d4:2a:30:d9:02:ca:cd:37:35:42:03:b9:ab:02:90:71:0f:00: a8:fa:b2:52:84:9b:ac:86:86:02:c1:0a:6f:63:37:fb:49:04: 8e:36:a9:cd:b5:41:41:fd:f9:fd:32:91:d8:a7:3c:c1:0b:07: 83:6b:1c:ac:c9:c5:5d:11:79:64:88:73:04:36:ad:54:76:6d: 5a:2b:71:7e:f3:f7:b7:4c:bb:e9:93:b8:d3:c4:8b:b0:81:74: 86:87:5b:d2:7f:c9:38:7f:10:62:4f:ba:80:b1:d7:1f:14:b7: 88:9a:cc:4a:5c:71:ec:34:ca:77:5e:91:29:c0:f0:6a:54:e7: 8d:4a:ac:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n72WYd1oSG5NeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NzExMjQ5NTUtZmEzZi00MjY4LWFhOWUtMDkwN2EzMDA0NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyvD3AbYlRLMyHAR/g+6XpzybeMNCBosNW0s 15Fl5g6TzxbNgeCg1fT8KOro+t7KhY3Gf27WYg6i1lSsWom8u4GjE/Roct5bWGGq 7OprWYR1r8WEgOglTD/ZmFvUXMTfvMHf80pZlfDX9nIy/3NAjMguRBu54M5hvJ2Q ONdWNHbi2lliOmoQUsvTZOlrOzPTRwtgEIJkgLLtu9n/Fx56VbNLrOXbTxeylsqQ Y/xQ/w3UlRLUs6XWicSGblM2DDDr+5fvhDM9OIR/LeROvJ7wREymttn7/BAVgYP+ YVouMbz0CRbNJ6MjCazBZto+8SKvLbNJ2BaAD2YK1KY9HEXgnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkBO8+yM1ABXJNBpeFDzd1jI7U2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAwODFkNWEtNTRiNi0z NjkxLTkzNzMtMTQ5ZTEyOTQwOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeH90UUn0gm8KDKdriUx+idMnx0eFDLSvUxUvgjOYPvtbbDfStZpD6M PYz//FXKbM7u9/ojv4uoppqxoPUVHiUvCNxJMcGugH9fBBp8IgmUIOzOeqMR5jVb 90tc/18ewUp86wP66JPh+qnQP30jTVjIquSmllaVYCOnJVNx7tQqMNkCys03NUID uasCkHEPAKj6slKEm6yGhgLBCm9jN/tJBI42qc21QUH9+f0ykdinPMELB4NrHKzJ xV0ReWSIcwQ2rVR2bVorcX7z97dMu+mTuNPEi7CBdIaHW9J/yTh/EGJPuoCx1x8U t4iazEpccew0yndekSnA8GpU541KrNY= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:31 2026 by rpki-client