$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa File: bf6716a4-54e2-38f3-8051-105ae86b25fe.roa (raw, json) Hash identifier: 4C2cP6b7NPA54ujiyDECdM1uxCj+2wZ7wFOOL+QTWGg= Subject key identifier: E2:BF:7C:31:E8:D3:5C:AA:A8:A6:6E:0C:EF:D1:A2:7D:05:F3:A2:7B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC00BBBB92DDDED84BE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.161.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c0:0b:bb:b9:2d:dd:ed:84:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b75bb545-0725-49b8-af39-966e45813bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:d3:48:ae:5a:68:76:b0:43:31:e5:45:df: a7:22:69:80:41:6d:4f:f4:14:10:e4:47:5d:81:71: c1:59:33:f8:ad:52:58:61:44:5b:28:fa:13:40:18: 54:95:1c:6b:a5:67:5c:7c:ba:9f:57:9f:39:00:45: 47:d2:67:8d:23:68:e7:b8:09:43:de:b2:9a:f1:c8: 0f:c1:ae:59:3b:96:05:94:c7:40:83:1c:ef:90:0d: 0f:f1:a9:4a:60:61:12:d9:e8:8b:76:fc:5f:86:66: 0d:aa:9b:e5:78:d4:0f:24:28:a2:ff:13:fb:5f:cb: 45:33:2a:ca:c4:c7:8d:ff:63:ab:5f:fb:63:25:18: 14:0e:e1:77:53:a4:cd:53:07:2d:ae:97:6c:b2:7d: 0a:87:f7:06:bb:dd:e3:ad:6f:81:96:e8:1f:e5:ce: 3d:60:45:eb:a8:1e:e4:68:5f:e3:27:f8:6f:d6:67: 6e:db:78:93:db:fd:98:fb:84:ff:11:0b:25:8a:42: 5d:03:35:21:2f:b0:66:fe:47:ff:25:7b:e3:eb:22: d2:b1:da:d9:22:e9:72:08:1d:37:33:89:92:eb:1a: 3d:44:1a:20:2a:1c:95:e5:f7:ae:f2:36:75:20:da: d3:78:45:9e:11:f9:2a:de:19:16:9c:42:61:7e:ae: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:7C:31:E8:D3:5C:AA:A8:A6:6E:0C:EF:D1:A2:7D:05:F3:A2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf6716a4-54e2-38f3-8051-105ae86b25fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4a:83:7f:27:d3:37:83:ad:8d:b8:0a:6c:11:33:53:3e:ee: 96:ca:a0:16:01:84:65:18:04:5f:10:37:75:e1:b0:9c:3c:fd: ed:b5:2c:75:2b:34:ab:f7:c7:4e:29:f5:9b:19:ca:4f:2a:73: 47:70:50:cf:b0:2c:79:4e:7e:50:43:4e:82:67:e4:dc:bd:de: 8e:a8:b6:39:05:91:f5:74:87:60:db:75:da:28:13:c1:96:8f: 33:59:63:50:69:39:a5:63:22:40:23:94:18:f0:bc:8f:84:be: b0:72:0e:86:6e:8d:e1:9c:6b:e5:a4:dc:2b:cf:90:55:03:68: f2:e5:8c:f4:ea:c4:b4:ea:d9:75:ba:2d:dc:4e:e5:5f:b1:72: 85:d4:bd:86:fa:7a:6c:d2:ac:88:34:a6:90:05:87:23:92:cf: 9e:50:70:eb:d9:5d:01:8d:fe:43:80:a8:7b:0a:96:51:a6:e0: ca:ef:1b:f6:85:46:35:ff:c9:41:53:78:8c:28:f6:7b:7c:f9: 45:31:57:95:b6:33:3f:27:af:91:0f:1b:34:de:be:41:c1:9c: c2:6c:69:8b:dc:c2:ee:41:88:f9:f0:e8:3e:3a:97:01:58:5e: 3d:e0:80:33:2c:c1:7c:bd:29:6d:e6:8c:76:ee:92:96:65:52: 00:19:e7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8ALu7kt3e2EvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Yjc1YmI1NDUtMDcyNS00OWI4LWFmMzktOTY2ZTQ1ODEzYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIDTSK5aaHawQzHlRd+nImmAQW1P9BQQ5Edd gXHBWTP4rVJYYURbKPoTQBhUlRxrpWdcfLqfV585AEVH0meNI2jnuAlD3rKa8cgP wa5ZO5YFlMdAgxzvkA0P8alKYGES2eiLdvxfhmYNqpvleNQPJCii/xP7X8tFMyrK xMeN/2OrX/tjJRgUDuF3U6TNUwctrpdssn0Kh/cGu93jrW+Blugf5c49YEXrqB7k aF/jJ/hv1mdu23iT2/2Y+4T/EQslikJdAzUhL7Bm/kf/JXvj6yLSsdrZIulyCB03 M4mS6xo9RBogKhyV5feu8jZ1INrTeEWeEfkq3hkWnEJhfq6tvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK/fDHo01yqqKZuDO/Ron0F86J7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY2NzE2YTQtNTRlMi0z OGYzLTgwNTEtMTA1YWU4NmIyNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Kg38n0zeDrY24CmwRM1M+7pbKoBYBhGUYBF8QN3XhsJw8/e21LHUr NKv3x04p9ZsZyk8qc0dwUM+wLHlOflBDToJn5Ny93o6otjkFkfV0h2DbddooE8GW jzNZY1BpOaVjIkAjlBjwvI+EvrByDoZujeGca+Wk3CvPkFUDaPLljPTqxLTq2XW6 LdxO5V+xcoXUvYb6emzSrIg0ppAFhyOSz55QcOvZXQGN/kOAqHsKllGm4MrvG/aF RjX/yUFTeIwo9nt8+UUxV5W2Mz8nr5EPGzTevkHBnMJsaYvcwu5BiPnw6D46lwFY Xj3ggDMswXy9KW3mjHbukpZlUgAZ50g= -----END CERTIFICATE-----Generated at Sun Mar 22 06:59:33 2026 by rpki-client