$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa File: c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa (raw, json) Hash identifier: QEr7WnHgkHmEzZcAWU2xRtnkeOz6uLlLm5sGUaIy9S8= Subject key identifier: AA:A6:74:BC:0D:73:8F:97:D8:D4:B6:87:CB:F1:62:98:29:3C:75:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FB6E80C15711D50318C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.188.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:b6:e8:0c:15:71:1d:50:31:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ef9290ea-744c-49d0-95d5-3839cae2e500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:72:c1:6b:3f:4e:21:eb:b7:d0:b6:48:03: 64:f8:55:0b:76:d4:fb:8a:32:2e:2f:61:ea:8d:c7: 6f:49:ba:f1:f6:38:c4:f9:4e:fc:26:17:89:eb:76: ed:83:61:06:f1:b9:e9:6f:28:f1:74:c9:bf:e1:e0: c0:fc:ad:e5:89:ec:86:80:98:18:63:54:06:b5:fd: 56:d5:73:80:3e:33:93:1c:89:d6:f8:cf:6f:d7:99: 27:02:bd:10:4f:9c:cd:a2:bb:96:e8:70:25:b0:15: 67:ea:fa:b1:4d:52:7f:c6:79:38:0b:d0:68:a6:96: 02:96:ce:c4:5b:e5:6f:56:eb:61:c3:96:bd:4e:55: e8:0d:c7:69:37:72:4a:6e:57:f5:c6:88:e1:2f:b4: d7:57:c5:dd:50:0a:3b:5d:d8:78:d4:c7:69:07:a3: 66:ba:60:c2:40:de:e9:14:a7:aa:16:97:a8:a7:71: ed:ae:fd:bb:28:96:0c:db:da:d3:02:bb:9f:d3:2e: 36:22:a2:b5:1c:f2:13:91:63:e5:66:cc:69:8a:27: 85:c1:b2:87:41:90:f2:30:35:78:6e:0a:e2:3a:45: f9:e5:02:a6:6c:75:c0:c9:66:9a:0c:57:2e:52:9e: a3:51:37:5c:bc:6e:34:6c:22:91:a8:5d:18:9e:06: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:74:BC:0D:73:8F:97:D8:D4:B6:87:CB:F1:62:98:29:3C:75:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4080fb6-bf26-34ec-9ea8-1db0577c6181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ff:33:b6:c3:4e:9c:79:20:4f:05:37:8b:4a:2f:4c:0e:e3: 40:7a:43:c6:e8:cc:2f:fc:9d:ad:be:9f:32:e8:76:59:75:1d: 6c:7b:a4:a2:df:7f:b5:d7:f7:a3:b7:6f:cd:f2:ed:fd:e5:b3: 50:fd:a9:e7:2e:db:48:56:7f:07:49:f7:e9:a2:45:3d:4f:ce: c6:1c:1e:df:f6:4b:15:c7:d3:68:ef:50:c1:73:d6:e6:82:ee: 8c:bd:53:63:a8:a9:b7:94:6c:1a:96:ad:9e:ce:97:5e:e5:b2: c4:63:08:ed:b9:2e:f9:c8:9a:b1:88:cc:7f:4c:7e:66:e1:8b: 9c:59:0f:0e:42:c0:bb:d6:2a:52:45:9d:b8:32:3c:ff:68:bf: 95:9c:fd:70:27:61:27:7b:45:37:20:e4:e4:27:79:64:be:a4: a2:99:eb:9c:26:0d:5d:f4:16:6a:ff:bd:e2:13:71:bd:0b:85: 3b:e7:2a:ee:f9:ea:eb:89:a9:a2:4c:14:7c:ad:9f:d6:75:87: a3:83:ca:5b:b7:6d:bd:e1:37:30:17:2c:e5:ac:f6:1c:f1:0a: be:8f:a9:32:40:2e:19:d9:0f:d0:29:34:18:3d:d0:6b:2e:ad: 55:46:4c:17:88:89:93:f6:a6:0a:ba:8a:23:cf:3d:85:bf:27: 08:94:e7:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7boDBVxHVAxjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWY5MjkwZWEtNzQ0Yy00OWQwLTk1ZDUtMzgzOWNhZTJlNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7JywWs/TiHrt9C2SANk+FULdtT7ijIuL2Hq jcdvSbrx9jjE+U78JheJ63btg2EG8bnpbyjxdMm/4eDA/K3lieyGgJgYY1QGtf1W 1XOAPjOTHInW+M9v15knAr0QT5zNoruW6HAlsBVn6vqxTVJ/xnk4C9BoppYCls7E W+VvVuthw5a9TlXoDcdpN3JKblf1xojhL7TXV8XdUAo7Xdh41MdpB6NmumDCQN7p FKeqFpeop3Htrv27KJYM29rTAruf0y42IqK1HPITkWPlZsxpiieFwbKHQZDyMDV4 bgriOkX55QKmbHXAyWaaDFcuUp6jUTdcvG40bCKRqF0YngZGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqmdLwNc4+X2NS2h8vxYpgpPHXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzQwODBmYjYtYmYyNi0z NGVjLTllYTgtMWRiMDU3N2M2MTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX/M7bDTpx5IE8FN4tKL0wO40B6Q8bozC/8na2+nzLodll1HWx7pKLf f7XX96O3b83y7f3ls1D9qecu20hWfwdJ9+miRT1PzsYcHt/2SxXH02jvUMFz1uaC 7oy9U2OoqbeUbBqWrZ7Ol17lssRjCO25LvnImrGIzH9Mfmbhi5xZDw5CwLvWKlJF nbgyPP9ov5Wc/XAnYSd7RTcg5OQneWS+pKKZ65wmDV30Fmr/veITcb0LhTvnKu75 6uuJqaJMFHytn9Z1h6ODylu3bb3hNzAXLOWs9hzxCr6PqTJALhnZD9ApNBg90Gsu rVVGTBeIiZP2pgq6iiPPPYW/JwiU510= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:53 2026 by rpki-client