$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6db58301-c496-3740-a6b2-e3fd038a3ec3.roa File: 6db58301-c496-3740-a6b2-e3fd038a3ec3.roa (raw, json) Hash identifier: x75lweXltU7entSMLh+lzTEl1n7S0Yvib6hHo/OOvpk= Subject key identifier: 6A:35:3C:D8:8B:1B:05:EE:40:F2:87:92:14:BA:94:82:E4:C8:A2:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53AD64E4C022259342C21080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6db58301-c496-3740-a6b2-e3fd038a3ec3.roa Signing time: Mon 28 Sep 2026 16:56:55 +0000 ROA not before: Mon 28 Sep 2026 16:56:55 +0000 ROA not after: Sun 27 Dec 2026 17:56:55 +0000 asID: 36680 IP address blocks: 70.168.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:64:e4:c0:22:25:93:42:c2:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:56:55 2026 GMT Not After : Dec 27 17:56:55 2026 GMT Subject: CN=99a5c613-5bdc-4164-80cb-ed4453f7b942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:59:44:71:ca:08:be:19:17:ac:14:83:72: c6:ef:13:49:b9:1f:81:14:4e:5a:e4:38:5d:63:51: 0c:3e:40:7f:11:1a:a3:39:18:fe:bb:72:f7:07:86: 4a:ed:ad:0d:14:92:0c:e2:c0:b7:27:5b:bb:2d:93: e4:0e:60:77:fc:fa:0b:dd:45:41:82:ea:2e:19:cc: a2:af:e5:0f:7d:cd:40:0c:21:3e:3d:7e:3a:c8:4f: 3c:e4:55:31:14:95:6e:bb:6a:f9:9c:b0:9c:c1:03: 2f:f9:41:12:7d:80:7a:27:0e:0d:53:b7:e5:a1:f8: 71:dd:5e:02:5d:1e:08:11:6e:69:12:7e:d8:a1:f7: e0:c6:4e:bc:a0:a1:3c:81:50:38:99:91:b7:e7:38: a4:0b:a5:04:bf:5b:06:8a:c2:f2:4f:2a:74:35:6f: 56:d0:d2:11:83:bd:56:53:a1:67:e6:f0:39:60:5b: 97:2b:5b:8e:17:70:0d:ea:0d:24:ad:36:34:a7:b0: 40:8a:bd:da:d4:2d:09:fb:8d:58:45:c5:90:2a:63: da:f7:63:1b:73:89:55:9a:69:89:25:93:59:9f:2f: 61:78:5d:00:2b:3a:33:81:6b:54:7e:98:8f:67:0a: f1:d1:23:90:2b:d2:40:61:ac:18:02:3e:2b:3e:c2: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:3C:D8:8B:1B:05:EE:40:F2:87:92:14:BA:94:82:E4:C8:A2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6db58301-c496-3740-a6b2-e3fd038a3ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c4:dc:84:22:1c:87:72:81:8d:04:81:c0:1a:34:24:fb:b2: 8c:a5:8f:bd:0c:75:00:e2:83:49:21:93:bd:aa:2f:6b:8d:c1: c8:5e:75:3a:c6:bf:06:12:c2:b6:0a:ad:69:b2:78:e9:d2:38: 68:d8:a1:51:82:ee:2a:b5:46:af:9c:ee:4c:c4:01:31:cc:28: 24:fa:4a:3a:1d:89:9f:66:11:83:e7:de:ba:49:b4:c7:29:f4: 3a:ac:10:60:69:37:0a:0a:64:a4:7a:63:c2:a2:0c:f2:88:f3: 8f:31:64:c5:90:b1:81:2a:05:2b:23:74:22:a8:85:df:8e:f8: a7:17:cd:dc:cb:16:69:32:da:9c:aa:83:b3:63:c0:9e:b7:22: 40:c5:8b:35:87:90:de:ec:cf:34:c0:4d:34:f4:7b:e0:cd:37: 51:85:56:e1:46:1c:e1:89:23:53:bb:44:2f:2f:9e:78:46:a0: 33:3c:b7:6e:7c:c2:84:56:c5:d1:ec:db:58:be:12:07:cc:d1: 51:16:53:4b:91:ad:37:df:b0:89:f2:be:b0:f7:ad:a1:66:07: de:ac:73:80:3a:42:0e:2f:27:bc:58:db:e1:b9:a8:f7:91:c1: 41:47:e9:7e:1c:b6:8c:b9:45:ec:ea:fb:43:e3:b8:fb:ba:cf: 4c:78:42:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TrWTkwCIlk0LCEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTY1NVoXDTI2MTIyNzE3NTY1NVowLzEtMCsGA1UEAxMk OTlhNWM2MTMtNWJkYy00MTY0LTgwY2ItZWQ0NDUzZjdiOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbRZRHHKCL4ZF6wUg3LG7xNJuR+BFE5a5Dhd Y1EMPkB/ERqjORj+u3L3B4ZK7a0NFJIM4sC3J1u7LZPkDmB3/PoL3UVBguouGcyi r+UPfc1ADCE+PX46yE885FUxFJVuu2r5nLCcwQMv+UESfYB6Jw4NU7flofhx3V4C XR4IEW5pEn7Yoffgxk68oKE8gVA4mZG35zikC6UEv1sGisLyTyp0NW9W0NIRg71W U6Fn5vA5YFuXK1uOF3AN6g0krTY0p7BAir3a1C0J+41YRcWQKmPa92Mbc4lVmmmJ JZNZny9heF0AKzozgWtUfpiPZwrx0SOQK9JAYawYAj4rPsKuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo1PNiLGwXuQPKHkhS6lILkyKLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmRiNTgzMDEtYzQ5Ni0z NzQwLWE2YjItZTNmZDAzOGEzZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETE3IQiHIdygY0EgcAaNCT7soylj70MdQDig0khk72qL2uNwchedTrG vwYSwrYKrWmyeOnSOGjYoVGC7iq1Rq+c7kzEATHMKCT6SjodiZ9mEYPn3rpJtMcp 9DqsEGBpNwoKZKR6Y8KiDPKI848xZMWQsYEqBSsjdCKohd+O+KcXzdzLFmky2pyq g7NjwJ63IkDFizWHkN7szzTATTT0e+DNN1GFVuFGHOGJI1O7RC8vnnhGoDM8t258 woRWxdHs21i+EgfM0VEWU0uRrTffsInyvrD3raFmB96sc4A6Qg4vJ7xY2+G5qPeR wUFH6X4ctoy5Rezq+0PjuPu6z0x4QjY= -----END CERTIFICATE-----Generated at Sun Oct 4 01:10:33 2026 by rpki-client