$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa File: c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa (raw, json) Hash identifier: 0stSClsZAu7T9riS6mlZ+s2hX3UZU5+xdk/aVmErilc= Subject key identifier: 49:D3:99:36:5D:52:B3:B8:52:26:1D:99:69:88:9D:7D:58:2B:41:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F75C2D59DFE51171F02C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.174.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:75:c2:d5:9d:fe:51:17:1f:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f1f7f5e6-4056-4a5a-bb7d-53322355640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:35:2c:25:a2:e7:28:8e:39:54:15:df:63: 03:35:86:7e:c3:81:88:23:96:4a:e3:db:ac:63:0e: d0:cc:06:b1:f9:47:ed:d7:7c:41:6a:2e:64:17:02: 2a:df:fc:b9:bf:1c:de:e8:54:33:22:5a:b2:f8:22: 80:6e:f8:e4:6d:2c:e5:33:e9:7f:ad:ae:9d:fc:55: 15:46:b4:b8:81:f4:97:f3:3f:a8:00:78:71:5c:66: 95:83:b6:df:6a:ef:79:d7:7a:e9:76:00:56:8e:40: bb:8b:88:07:b2:fd:44:6e:a4:82:3e:0d:a7:8d:b4: b6:8e:86:a4:73:f9:cc:2b:86:24:cb:72:f1:ae:00: 22:92:9a:b5:f2:24:42:89:86:6d:f6:37:d9:c0:5a: c0:e3:6b:34:80:41:f6:fe:dc:98:7e:10:bc:ca:14: df:2f:bc:21:89:78:55:e8:14:44:b9:43:a8:09:86: af:fa:d8:ce:f2:53:1a:10:6e:64:35:1a:04:a7:64: ec:58:b9:49:12:e9:6d:de:5c:92:bc:51:f7:00:b9: 2b:76:e3:17:3e:18:26:60:13:03:7e:25:0e:7a:5c: 40:5c:34:99:2e:68:e1:e9:df:88:08:b4:f0:06:72: df:86:d9:76:77:05:7c:c1:7e:8e:ff:96:fc:1a:f8: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:99:36:5D:52:B3:B8:52:26:1D:99:69:88:9D:7D:58:2B:41:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:72:81:f5:3c:0f:1a:8a:68:40:b6:ea:7e:33:66:ca:a2:93: 30:f4:89:bb:9d:1a:67:3d:2a:c2:1a:38:33:32:1f:5d:13:29: 03:01:78:92:84:00:d9:fe:88:8d:42:52:5b:57:fc:4d:00:4b: 89:b5:25:79:35:d6:4d:51:7a:a2:a7:77:f3:1e:fa:85:35:07: 65:5d:97:35:27:85:9d:87:58:5c:7f:3c:ce:df:3b:5d:b7:13: 30:aa:4b:b3:b7:67:0f:52:e3:43:04:08:5f:3f:6e:b8:e7:13: 9e:e8:06:fc:3a:43:43:98:d3:cf:a1:fa:b0:ff:6d:21:84:d7: 2b:82:79:db:ef:51:02:0c:ee:e1:24:74:23:8a:4e:d8:f8:f7: 2d:1c:7c:ce:90:a3:ab:15:a7:61:44:4d:57:85:2c:f1:34:01: 58:6f:e6:4d:41:b7:b7:f7:89:a1:b9:f9:90:28:b7:ba:e0:31: f4:c5:03:f9:65:33:fe:49:7d:17:f7:f0:f5:1d:39:f7:8b:d9: 52:50:0c:a7:b0:ab:98:63:dd:64:2f:f6:65:fa:cb:83:e9:8b: d2:ff:d5:2a:98:1a:78:22:ee:94:b1:7c:07:94:cb:91:25:01: e5:04:15:b6:d0:e1:d0:00:68:83:3f:14:02:52:20:3d:10:5d: 9b:d9:d5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n3XC1Z3+URcfAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjFmN2Y1ZTYtNDA1Ni00YTVhLWJiN2QtNTMzMjIzNTU2NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquw1LCWi5yiOOVQV32MDNYZ+w4GII5ZK49us Yw7QzAax+Uft13xBai5kFwIq3/y5vxze6FQzIlqy+CKAbvjkbSzlM+l/ra6d/FUV RrS4gfSX8z+oAHhxXGaVg7bfau9513rpdgBWjkC7i4gHsv1EbqSCPg2njbS2joak c/nMK4Yky3LxrgAikpq18iRCiYZt9jfZwFrA42s0gEH2/tyYfhC8yhTfL7whiXhV 6BREuUOoCYav+tjO8lMaEG5kNRoEp2TsWLlJEult3lySvFH3ALkrduMXPhgmYBMD fiUOelxAXDSZLmjh6d+ICLTwBnLfhtl2dwV8wX6O/5b8GvjZOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnTmTZdUrO4UiYdmWmInX1YK0FLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzI0Y2MzNTEtMTdhYy0z YmU0LWE0ZmUtYjQwYTkwNWQzNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxygfU8DxqKaEC26n4zZsqikzD0ibudGmc9KsIaODMyH10TKQMBeJKE ANn+iI1CUltX/E0AS4m1JXk11k1ReqKnd/Me+oU1B2VdlzUnhZ2HWFx/PM7fO123 EzCqS7O3Zw9S40MECF8/brjnE57oBvw6Q0OY08+h+rD/bSGE1yuCedvvUQIM7uEk dCOKTtj49y0cfM6Qo6sVp2FETVeFLPE0AVhv5k1Bt7f3iaG5+ZAot7rgMfTFA/ll M/5JfRf38PUdOfeL2VJQDKewq5hj3WQv9mX6y4Ppi9L/1SqYGngi7pSxfAeUy5El AeUEFbbQ4dAAaIM/FAJSID0QXZvZ1VY= -----END CERTIFICATE-----Generated at Thu Mar 19 05:38:21 2026 by rpki-client