$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d9e4575-9a0e-3278-a174-31b6667dc9e3.roa File: 4d9e4575-9a0e-3278-a174-31b6667dc9e3.roa (raw, json) Hash identifier: RNbQZsx+i/vdht98XJVCbO2oH1UNtDX1tdK6iHZTbis= Subject key identifier: 4D:4B:03:8D:DA:99:86:C7:2F:67:8E:02:45:2F:40:92:6B:01:A3:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539DA65460551A7095CECF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d9e4575-9a0e-3278-a174-31b6667dc9e3.roa Signing time: Mon 28 Sep 2026 16:25:11 +0000 ROA not before: Mon 28 Sep 2026 16:25:11 +0000 ROA not after: Sun 27 Dec 2026 17:25:11 +0000 asID: 17903 IP address blocks: 174.70.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:a6:54:60:55:1a:70:95:ce:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:11 2026 GMT Not After : Dec 27 17:25:11 2026 GMT Subject: CN=99a24a68-005d-4dff-b2a9-4ea873806c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:87:f3:f3:38:2b:c6:2e:4e:40:ea:86:04: b7:56:53:d0:75:b6:41:d8:6e:a0:7e:89:aa:89:32: f7:9a:ab:44:be:d1:d2:47:8e:11:d0:2f:0f:42:aa: 16:da:b1:22:a1:8b:c6:be:4f:d1:3c:cb:b6:e1:f5: 99:33:3b:76:c2:04:d1:91:d7:bb:c3:0f:d0:99:81: 1d:7b:4b:11:70:f9:a1:e9:cb:ce:c6:db:8d:76:03: 82:87:f6:f4:ac:97:e9:16:57:aa:dc:42:32:91:58: 64:5e:53:29:29:40:9c:63:f2:1b:a6:a4:5e:ad:44: 02:11:6a:0f:51:80:3c:a8:e1:d3:2f:35:fa:4d:47: dc:11:3b:76:ef:79:19:5d:63:79:af:12:ca:6b:16: 77:46:20:d8:90:37:79:6f:62:31:14:b7:a4:b9:46: 9d:03:c5:38:3b:62:8d:df:6f:a0:7b:d1:94:e2:4c: 0c:0a:85:39:13:25:06:e4:ae:94:ba:3b:c8:7b:63: f2:b1:36:64:ed:f6:cd:bd:b0:12:7a:c8:8b:70:fc: 96:3a:39:08:da:2d:71:3f:09:b5:2b:49:4a:2d:16: 2c:9b:a8:ba:3a:f7:0e:b8:45:6f:42:7b:45:f9:b5: d9:b8:e2:f0:b7:b1:62:49:bc:a8:30:dd:4f:8a:53: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:03:8D:DA:99:86:C7:2F:67:8E:02:45:2F:40:92:6B:01:A3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d9e4575-9a0e-3278-a174-31b6667dc9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.70.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3e:a6:2f:68:65:7d:d4:c2:ed:38:f1:5f:4e:cb:9a:90:aa: 53:db:43:31:5a:3d:f0:2f:90:ef:2c:41:93:5c:bb:01:43:ba: 69:73:1a:71:b2:ce:7b:8e:ea:9a:38:00:01:bf:f7:b6:1b:45: 97:77:5c:49:3c:74:11:f0:d3:17:d1:a4:7e:be:ed:1b:2e:d5: 39:f3:37:96:96:9f:d0:cd:08:53:b0:e8:3b:c1:66:93:f8:fa: 50:69:62:f1:09:11:60:85:82:bc:60:93:bb:ab:11:93:5e:48: c4:0d:8c:2e:97:1e:4b:31:8c:9a:e6:03:06:00:7e:2e:6f:34: a4:25:00:25:b2:b3:be:6f:7e:7c:ba:18:f7:c4:94:44:cd:4b: cd:5a:2c:ef:1a:7b:74:51:55:59:ea:84:b2:41:be:15:73:2e: 4d:b0:40:3b:a1:0d:7b:e8:3c:e9:e8:f4:34:a5:17:69:d0:cf: ec:e4:7c:cf:9a:74:8f:e8:98:ff:75:ac:38:06:82:09:8e:14: 58:de:b4:8d:3c:ca:ac:57:2e:8b:b2:a5:2d:41:f8:0a:59:fa: d9:1a:57:fa:0d:bc:47:c6:b4:d6:95:77:71:bd:cb:f4:f1:ca: 40:fc:6d:2f:36:b0:74:6a:5e:69:ec:77:ca:18:cc:e0:c2:10: 18:8b:a9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnaZUYFUacJXOz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUxMVoXDTI2MTIyNzE3MjUxMVowLzEtMCsGA1UEAxMk OTlhMjRhNjgtMDA1ZC00ZGZmLWIyYTktNGVhODczODA2YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcuH8/M4K8YuTkDqhgS3VlPQdbZB2G6gfomq iTL3mqtEvtHSR44R0C8PQqoW2rEioYvGvk/RPMu24fWZMzt2wgTRkde7ww/QmYEd e0sRcPmh6cvOxtuNdgOCh/b0rJfpFleq3EIykVhkXlMpKUCcY/IbpqRerUQCEWoP UYA8qOHTLzX6TUfcETt273kZXWN5rxLKaxZ3RiDYkDd5b2IxFLekuUadA8U4O2KN 32+ge9GU4kwMCoU5EyUG5K6UujvIe2PysTZk7fbNvbASesiLcPyWOjkI2i1xPwm1 K0lKLRYsm6i6OvcOuEVvQntF+bXZuOLwt7FiSbyoMN1PilPCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1LA43amYbHL2eOAkUvQJJrAaMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQ5ZTQ1NzUtOWEwZS0z Mjc4LWExNzQtMzFiNjY2N2RjOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk+pi9oZX3Uwu048V9Oy5qQqlPbQzFaPfAvkO8sQZNcuwFDumlzGnGy znuO6po4AAG/97YbRZd3XEk8dBHw0xfRpH6+7Rsu1TnzN5aWn9DNCFOw6DvBZpP4 +lBpYvEJEWCFgrxgk7urEZNeSMQNjC6XHksxjJrmAwYAfi5vNKQlACWys75vfny6 GPfElETNS81aLO8ae3RRVVnqhLJBvhVzLk2wQDuhDXvoPOno9DSlF2nQz+zkfM+a dI/omP91rDgGggmOFFjetI08yqxXLouypS1B+ApZ+tkaV/oNvEfGtNaVd3G9y/Tx ykD8bS82sHRqXmnsd8oYzODCEBiLqbA= -----END CERTIFICATE-----Generated at Tue Oct 6 15:59:11 2026 by rpki-client