$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9497-c9b6-390b-99eb-c070b389e430.roa File: bd2a9497-c9b6-390b-99eb-c070b389e430.roa (raw, json) Hash identifier: DgSAeAzJRSjUQvcd+xZWe7TXATacKg+naMtsiF2JoUo= Subject key identifier: DE:E1:5B:0D:1C:41:8E:18:43:B4:1A:1D:24:D6:5F:DE:5B:96:8F:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FD0E280B532849AD67908 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9497-c9b6-390b-99eb-c070b389e430.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.174.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d0:e2:80:b5:32:84:9a:d6:79:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b6149f65-012c-4e20-abc3-e0529093dfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:ac:ba:5e:bd:dd:ee:95:3e:24:50:54:74: 66:b6:7d:58:a8:7a:70:5c:4a:9b:9e:c8:7e:ae:e0: 5d:d1:35:9e:a6:a6:64:93:d3:01:81:f9:8c:08:da: c9:7b:78:01:88:50:22:46:e2:b6:d4:43:09:f3:88: 80:f2:66:f3:bb:38:d7:af:15:41:15:a5:9b:e1:6b: c9:20:64:3b:6a:16:35:5c:13:bc:d6:bf:b9:48:db: d2:58:bd:0a:7e:25:3d:e9:c4:3e:ec:15:b4:9c:0b: 4a:38:00:17:7a:79:b7:0d:7d:b9:b5:fa:a3:82:93: 5d:40:60:93:6c:1b:aa:b7:52:d4:9e:28:84:99:eb: 00:28:28:70:35:47:f1:7a:f3:c0:49:99:27:10:81: ae:db:7f:d9:99:20:b7:81:a3:cb:28:9e:50:b7:69: 78:cb:c7:05:f5:4a:f5:a4:ce:02:89:d5:25:c0:d8: db:60:49:0d:45:73:8c:a4:62:e8:d8:8c:e9:db:2c: 07:ad:26:8a:d9:d6:92:a4:aa:d8:93:b7:92:ab:e0: 17:c7:22:49:61:89:b4:65:e9:65:99:98:c4:66:8c: 62:89:81:ad:f7:89:52:c9:76:90:2e:a0:dc:31:33: 26:a0:82:ac:27:9e:c8:92:9b:84:eb:85:2d:10:a1: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:5B:0D:1C:41:8E:18:43:B4:1A:1D:24:D6:5F:DE:5B:96:8F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9497-c9b6-390b-99eb-c070b389e430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:66:48:dc:84:ed:ff:5b:58:f6:04:63:fc:d8:ba:f8:60: cd:be:ec:7e:ae:0d:bf:b5:b5:8e:b4:fa:0f:2b:10:44:3e:a2: 60:9a:a1:35:8b:3c:3a:c0:8e:78:15:43:27:00:58:9f:8f:41: aa:17:67:e4:2d:22:bf:85:4a:af:c9:f7:59:be:5f:dd:52:df: d5:74:b2:ac:d3:62:e1:7f:2a:66:7a:ab:b2:e8:88:43:2f:36: 08:63:0e:56:7a:a4:d9:32:15:34:1b:37:af:24:43:72:f8:81: d3:dc:ea:bc:df:37:61:42:ec:d9:75:c8:49:4b:0f:a5:19:fe: 6d:b3:5e:3f:17:e9:0b:88:ca:f9:86:de:79:99:8a:ee:7c:28: c4:58:f8:c1:97:16:50:fd:97:27:c7:ea:27:9b:7c:45:d5:c8: 5d:11:cd:36:5e:ae:7a:c4:ce:e9:8c:53:51:ec:55:59:77:84: e2:93:59:ce:fc:d0:8b:4c:07:39:90:a4:00:85:34:b7:fe:73: e8:34:75:a3:1c:9d:d6:e6:ad:32:b3:0a:dd:ac:53:be:07:2b: dc:09:3c:7c:de:8a:ad:8f:11:2b:62:cb:10:8c:5b:45:a4:5c: 6d:a6:25:e3:e6:f7:d6:e7:12:09:e6:76:99:07:0c:bd:4b:19: b8:20:b2:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9DigLUyhJrWeQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjYxNDlmNjUtMDEyYy00ZTIwLWFiYzMtZTA1MjkwOTNkZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nesul693e6VPiRQVHRmtn1YqHpwXEqbnsh+ ruBd0TWepqZkk9MBgfmMCNrJe3gBiFAiRuK21EMJ84iA8mbzuzjXrxVBFaWb4WvJ IGQ7ahY1XBO81r+5SNvSWL0KfiU96cQ+7BW0nAtKOAAXenm3DX25tfqjgpNdQGCT bBuqt1LUniiEmesAKChwNUfxevPASZknEIGu23/ZmSC3gaPLKJ5Qt2l4y8cF9Ur1 pM4CidUlwNjbYEkNRXOMpGLo2Izp2ywHrSaK2daSpKrYk7eSq+AXxyJJYYm0Zell mZjEZoxiiYGt94lSyXaQLqDcMTMmoIKsJ57IkpuE64UtEKGMqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7hWw0cQY4YQ7QaHSTWX95blo9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQyYTk0OTctYzliNi0z OTBiLTk5ZWItYzA3MGIzODllNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5FZkjchO3/W1j2BGP82Lr4YM2+7H6uDb+1tY60+g8rEEQ+omCaoTWL PDrAjngVQycAWJ+PQaoXZ+QtIr+FSq/J91m+X91S39V0sqzTYuF/KmZ6q7LoiEMv NghjDlZ6pNkyFTQbN68kQ3L4gdPc6rzfN2FC7Nl1yElLD6UZ/m2zXj8X6QuIyvmG 3nmZiu58KMRY+MGXFlD9lyfH6iebfEXVyF0RzTZernrEzumMU1HsVVl3hOKTWc78 0ItMBzmQpACFNLf+c+g0daMcndbmrTKzCt2sU74HK9wJPHzeiq2PEStiyxCMW0Wk XG2mJePm99bnEgnmdpkHDL1LGbggsh8= -----END CERTIFICATE-----Generated at Thu Mar 19 05:41:21 2026 by rpki-client