$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcdf18bf-3646-3a60-9458-c6adda7d01a3.roa File: bcdf18bf-3646-3a60-9458-c6adda7d01a3.roa (raw, json) Hash identifier: 9rNesCwKMgpLtjQ+TccqENkWZ4H0/UsqYIQvIhaDYJs= Subject key identifier: B0:3E:AA:90:42:E4:5A:56:01:34:58:92:03:F1:6E:F7:0B:9C:45:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D1707B937F7A013E1CA047B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcdf18bf-3646-3a60-9458-c6adda7d01a3.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 22773 IP address blocks: 70.164.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:b9:37:f7:a0:13:e1:ca:04:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=6025407b-f0b5-493a-aca3-c7f3bb151a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:b7:35:41:ab:3c:37:31:4c:8d:64:ec:d4: ab:14:f1:82:ef:60:ca:ac:05:1f:c0:82:9e:0b:1e: da:fa:e2:14:62:97:54:0f:3c:53:11:1e:65:9d:fa: 10:6c:67:17:5b:4a:92:e3:82:5d:9e:d0:5a:8c:00: 6c:4d:ec:33:26:d9:53:8c:35:3c:ce:15:d9:0c:f7: 5c:8f:49:f3:9f:ab:af:2c:e5:89:41:6f:8f:c3:b6: 6f:26:82:9f:7e:ca:df:03:71:5a:bd:4d:60:81:ea: e1:70:e4:f3:73:b0:f1:5f:f3:af:78:c3:80:1d:49: 60:db:85:1c:6f:31:bc:d1:10:1f:01:68:c5:b6:1c: a1:41:31:e9:ae:32:2e:e9:da:00:c9:85:45:16:bc: 5d:ba:7e:29:bb:23:ba:17:3f:0e:b9:77:6c:0d:e3: c3:68:c6:24:db:5e:ab:0c:c1:1b:98:23:37:98:6a: e3:c4:e3:33:88:d5:08:52:87:92:03:ba:78:12:0c: e6:bf:68:72:b6:81:31:b7:28:55:ea:b7:a2:10:cd: 59:5d:8d:61:30:08:41:6c:63:17:80:a4:e7:b2:44: 04:65:3b:03:6a:84:36:18:f7:e1:ef:3a:a2:10:85: 3d:b8:2d:18:c9:d0:7d:a5:3f:cb:79:3d:73:d0:0c: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:AA:90:42:E4:5A:56:01:34:58:92:03:F1:6E:F7:0B:9C:45:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcdf18bf-3646-3a60-9458-c6adda7d01a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.164.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:46:43:f7:23:4b:3d:d1:a7:bb:f9:2f:64:20:a2:df:7a:da: 5e:d5:49:ce:33:b8:96:fe:39:fb:8d:68:d5:15:8a:4b:71:53: 7d:64:cc:06:9e:5f:02:e3:cf:f2:c1:36:2b:c2:a6:8e:9a:b0: 1e:2a:6a:24:85:4f:9e:c7:cc:7b:91:4f:0a:32:c3:a4:be:2d: 65:1b:94:95:74:7e:5a:0b:51:d7:7b:f9:e4:40:39:ad:bb:1c: f4:08:fe:ac:6d:1b:4d:d1:76:e9:3b:f7:95:56:fb:7a:a2:0a: 6b:d9:6e:e4:3d:0c:a1:de:d5:b6:9c:4e:a7:fa:fc:f5:59:65: b5:e4:5e:8a:3e:d9:21:86:6a:b0:b1:85:92:c7:0c:ad:7e:37: ea:6d:c1:44:5d:d4:09:c9:f3:10:40:de:b4:1c:4e:61:82:98: c7:2e:c5:0e:6a:42:6b:c5:36:00:23:e5:63:3a:23:de:43:13: a4:cc:d5:25:28:bc:a4:01:6b:12:3f:2e:b7:05:3a:52:cf:9b: 39:f1:a5:82:d1:91:69:73:0f:ee:de:2c:d5:eb:1a:02:89:68: e2:c4:31:52:df:79:46:21:10:ba:fa:74:cd:13:3d:5e:ee:94: 92:c5:4b:5a:26:ec:da:70:c3:d5:9e:31:26:99:5f:e8:1a:96: 22:8c:a9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB7k396AT4coEewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NjAyNTQwN2ItZjBiNS00OTNhLWFjYTMtYzdmM2JiMTUxYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Am3NUGrPDcxTI1k7NSrFPGC72DKrAUfwIKe Cx7a+uIUYpdUDzxTER5lnfoQbGcXW0qS44JdntBajABsTewzJtlTjDU8zhXZDPdc j0nzn6uvLOWJQW+Pw7ZvJoKffsrfA3FavU1ggerhcOTzc7DxX/OveMOAHUlg24Uc bzG80RAfAWjFthyhQTHprjIu6doAyYVFFrxdun4puyO6Fz8OuXdsDePDaMYk216r DMEbmCM3mGrjxOMziNUIUoeSA7p4Egzmv2hytoExtyhV6reiEM1ZXY1hMAhBbGMX gKTnskQEZTsDaoQ2GPfh7zqiEIU9uC0YydB9pT/LeT1z0Az/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA+qpBC5FpWATRYkgPxbvcLnEW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmNkZjE4YmYtMzY0Ni0z YTYwLTk0NTgtYzZhZGRhN2QwMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdGQ/cjSz3Rp7v5L2Qgot962l7VSc4zuJb+OfuNaNUViktxU31kzAae XwLjz/LBNivCpo6asB4qaiSFT57HzHuRTwoyw6S+LWUblJV0floLUdd7+eRAOa27 HPQI/qxtG03Rduk795VW+3qiCmvZbuQ9DKHe1bacTqf6/PVZZbXkXoo+2SGGarCx hZLHDK1+N+ptwURd1AnJ8xBA3rQcTmGCmMcuxQ5qQmvFNgAj5WM6I95DE6TM1SUo vKQBaxI/LrcFOlLPmznxpYLRkWlzD+7eLNXrGgKJaOLEMVLfeUYhELr6dM0TPV7u lJLFS1om7Npww9WeMSaZX+galiKMqUQ= -----END CERTIFICATE-----Generated at Sun Mar 22 06:59:00 2026 by rpki-client