$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa File: 024361b1-5f21-3630-820f-7b9d4d345a1f.roa (raw, json) Hash identifier: 2ey8rWg9uhPGECUemu8SvO6RKQXixE9P4BDNkH5QZJw= Subject key identifier: 72:FA:80:2E:1D:F0:7B:A4:3F:F9:2F:66:C1:DA:9A:58:F5:34:04:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A854FCF52EE1187C4000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.176.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a8:54:fc:f5:2e:e1:18:7c:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=152bc43f-3d1f-4320-9dbf-573bbf20b350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:ba:27:9c:2d:12:3c:20:c8:96:f0:0d:71: 95:b3:a0:72:1d:a0:c0:a3:3c:69:20:3f:38:e7:fe: 2d:f0:63:e5:05:d2:f5:27:6e:e2:9a:2c:58:68:41: 9f:ea:e4:b2:11:a2:2a:0e:e2:24:6a:1c:24:b6:07: ad:32:7c:fb:78:98:72:69:68:8f:4c:c1:71:c8:a7: 3a:60:d1:1a:c3:70:81:de:67:b1:7d:1d:c5:aa:de: 01:95:ad:bd:11:6b:32:0b:8a:9f:9f:d8:c4:12:3a: 64:e8:c1:6f:64:46:44:32:74:35:66:b0:1d:53:80: f6:69:63:7b:1e:c4:eb:83:b5:08:35:a9:ae:01:8b: ee:8d:2d:7f:81:30:39:93:03:98:a7:2d:a3:1d:35: 5a:da:5f:c8:ad:a0:ac:c2:d7:8d:fb:32:c3:c4:45: 2d:ca:eb:e8:6a:43:a9:54:03:75:f9:8a:4a:ab:01: 78:97:b8:e5:76:50:af:d5:a5:9e:f7:57:69:a0:53: 2f:fa:f9:d3:32:f0:d4:63:ad:69:d8:86:e8:b5:4c: 68:d2:0d:2a:10:09:00:19:d8:18:4c:cc:7f:1c:41: 72:ba:3d:7d:81:11:02:4b:65:86:36:1f:e2:a4:f7: 1b:c4:91:40:a2:7a:ed:e7:9e:c7:06:65:a7:01:c7: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:80:2E:1D:F0:7B:A4:3F:F9:2F:66:C1:DA:9A:58:F5:34:04:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024361b1-5f21-3630-820f-7b9d4d345a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3c:24:ee:45:b1:c2:4c:91:3a:ce:08:cb:c2:4f:43:21:ec: 86:7a:ac:8a:63:16:4c:0d:c8:1b:cc:bc:44:ce:5c:b3:d8:31: 13:f6:3f:8c:a6:41:73:ed:22:88:27:d4:4f:54:b5:e0:46:28: d6:8e:d9:c2:15:6a:64:39:3c:9f:56:cf:6b:de:91:b7:c5:1d: 9c:1d:ed:d4:af:3c:c5:fb:a2:bc:86:5c:9f:45:d2:b8:b3:8b: 1d:ef:92:fc:94:3a:e8:05:1b:da:f5:58:fa:ed:fd:86:29:6b: a9:85:3c:37:1a:d4:87:ea:60:72:bc:66:ca:22:74:d6:74:24: 13:6f:98:d9:0f:44:da:40:bb:ac:cd:8e:92:cf:04:d0:cd:65: 91:51:f6:6a:8d:5e:71:9e:27:bb:7e:06:51:f6:b4:c5:62:59: 70:49:1e:79:b1:79:95:a0:98:e4:e4:7b:2a:e4:b3:c1:4f:16: 27:9c:54:ea:05:9d:67:3a:56:cc:75:89:56:0e:65:e2:d2:30: 9d:5d:24:eb:f3:b8:93:14:8f:8c:06:24:15:97:14:7f:61:ec: 98:f6:76:76:8e:98:cc:82:3c:1c:06:6f:30:53:23:a4:85:37: c6:58:1e:18:2b:bc:e1:bf:79:b0:3f:06:e9:1d:c8:bd:1b:0b: 39:1f:4f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqhU/PUu4Rh8QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MTUyYmM0M2YtM2QxZi00MzIwLTlkYmYtNTczYmJmMjBiMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDG6J5wtEjwgyJbwDXGVs6ByHaDAozxpID84 5/4t8GPlBdL1J27imixYaEGf6uSyEaIqDuIkahwktgetMnz7eJhyaWiPTMFxyKc6 YNEaw3CB3mexfR3Fqt4Bla29EWsyC4qfn9jEEjpk6MFvZEZEMnQ1ZrAdU4D2aWN7 HsTrg7UINamuAYvujS1/gTA5kwOYpy2jHTVa2l/IraCswteN+zLDxEUtyuvoakOp VAN1+YpKqwF4l7jldlCv1aWe91dpoFMv+vnTMvDUY61p2IbotUxo0g0qEAkAGdgY TMx/HEFyuj19gRECS2WGNh/ipPcbxJFAonrt557HBmWnAce9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL6gC4d8HukP/kvZsHamlj1NAR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI0MzYxYjEtNWYyMS0z NjMwLTgyMGYtN2I5ZDRkMzQ1YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo8JO5FscJMkTrOCMvCT0Mh7IZ6rIpjFkwNyBvMvETOXLPYMRP2P4ym QXPtIogn1E9UteBGKNaO2cIVamQ5PJ9Wz2vekbfFHZwd7dSvPMX7oryGXJ9F0riz ix3vkvyUOugFG9r1WPrt/YYpa6mFPDca1IfqYHK8ZsoidNZ0JBNvmNkPRNpAu6zN jpLPBNDNZZFR9mqNXnGeJ7t+BlH2tMViWXBJHnmxeZWgmOTkeyrks8FPFiecVOoF nWc6Vsx1iVYOZeLSMJ1dJOvzuJMUj4wGJBWXFH9h7Jj2dnaOmMyCPBwGbzBTI6SF N8ZYHhgrvOG/ebA/BukdyL0bCzkfT7A= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:55 2026 by rpki-client