$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa File: 0cd4101d-7440-3066-bdaa-b77071b5318e.roa (raw, json) Hash identifier: vD5jmGjXzCsE9rF/1KTs2TKvSs+/PZm9f9ugRTTvYRY= Subject key identifier: 31:A2:63:64:37:5B:2F:DE:19:7E:1B:E2:E1:B1:F4:33:DB:9B:27:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFD5C3110180359972AF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 70.172.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:d5:c3:11:01:80:35:99:72:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=e25eeaac-e09a-45d4-b8d4-c5f0cfd6361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:c4:db:f4:a1:b7:60:39:83:3f:a3:68:95: ef:bf:c6:d0:95:6d:b1:88:3c:2b:e4:b5:57:46:59: e9:88:62:f1:91:e3:df:cf:8c:85:e5:4d:7b:e2:fa: 76:32:ae:01:c1:0e:58:52:9f:a0:23:29:0b:8e:bf: 85:14:6f:e9:96:74:c9:46:2f:10:17:67:13:4b:e4: 1d:67:90:1d:3d:bd:b9:cf:7b:c7:54:85:12:a1:f9: 3e:8a:f9:f9:db:5f:6a:bf:d9:1e:83:dc:e2:3a:c8: 45:82:ab:11:52:7b:6c:e3:63:cc:18:25:d6:3b:a9: 1e:ce:12:08:03:07:db:df:bf:ad:a5:b3:7a:ad:79: f2:d0:05:29:53:78:75:8c:ba:0c:d7:dd:ee:96:11: 80:e4:c0:2d:53:48:4c:ca:41:9d:77:55:6e:66:dc: 78:68:3d:90:db:4f:8a:0f:0f:33:a4:50:24:7c:02: bb:e2:49:20:04:fc:eb:bc:34:30:01:f8:e1:4f:a8: d7:b9:98:a5:ae:e7:be:96:7b:d2:80:d4:a2:9b:e3: f4:84:86:24:b8:21:37:d7:44:b5:ee:56:1e:e9:7c: da:76:0f:7d:95:fc:db:97:23:2b:48:2d:80:64:03: 99:bb:fb:ec:d4:be:75:23:2d:31:18:db:c4:b6:2e: d3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:63:64:37:5B:2F:DE:19:7E:1B:E2:E1:B1:F4:33:DB:9B:27:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:b1:30:74:9f:b1:d5:ae:a1:2e:ed:1f:69:6d:12:37:8c: db:1a:3a:96:aa:55:2a:0d:5e:1c:47:a4:42:29:21:de:ad:cb: 85:72:3a:39:18:f2:fd:48:eb:ca:f6:5a:af:0e:70:ad:14:ca: 8b:16:cd:91:f8:09:a1:c7:2a:21:c3:18:f4:46:1f:94:25:19: a8:00:80:ea:15:a0:8e:78:14:5c:95:d2:69:94:84:88:a5:f6: 9f:a7:2b:f6:50:f6:bd:90:52:c0:da:c3:02:11:75:74:70:65: a8:54:97:41:cd:4b:fa:fb:53:8a:a9:7e:5c:60:ee:fd:69:2e: 8d:78:ed:4d:7f:fb:42:9c:7b:61:54:db:4b:23:36:ad:f4:cf: 17:f7:b3:ef:b5:aa:4a:b0:9b:4f:b2:af:8f:e6:5d:a8:54:5c: 28:ac:8a:3b:93:e3:52:3a:75:36:b0:2f:e4:da:5a:02:0d:e4: 54:27:e8:36:9a:a7:73:ca:97:d7:44:1c:90:16:d1:3d:57:fe: ce:af:30:e1:fc:59:64:0c:04:91:0f:7b:ed:3d:4a:80:99:e8: 13:4d:1e:4f:ee:12:a9:9c:23:23:18:a9:1d:10:08:25:8b:3d: 02:79:04:9f:fb:78:fe:89:8e:d4:f4:83:78:d2:b9:d7:cd:bd: 23:d7:90:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9XDEQGANZlyrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTI1ZWVhYWMtZTA5YS00NWQ0LWI4ZDQtYzVmMGNmZDYzNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI3E2/Sht2A5gz+jaJXvv8bQlW2xiDwr5LVX RlnpiGLxkePfz4yF5U174vp2Mq4BwQ5YUp+gIykLjr+FFG/plnTJRi8QF2cTS+Qd Z5AdPb25z3vHVIUSofk+ivn5219qv9keg9ziOshFgqsRUnts42PMGCXWO6kezhII Awfb37+tpbN6rXny0AUpU3h1jLoM193ulhGA5MAtU0hMykGdd1VuZtx4aD2Q20+K Dw8zpFAkfAK74kkgBPzrvDQwAfjhT6jXuZilrue+lnvSgNSim+P0hIYkuCE310S1 7lYe6Xzadg99lfzblyMrSC2AZAOZu/vs1L51Iy0xGNvEti7ToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGiY2Q3Wy/eGX4b4uGx9DPbmycJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNkNDEwMWQtNzQ0MC0z MDY2LWJkYWEtYjc3MDcxYjUzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVSsTB0n7HVrqEu7R9pbRI3jNsaOpaqVSoNXhxHpEIpId6ty4VyOjkY 8v1I68r2Wq8OcK0UyosWzZH4CaHHKiHDGPRGH5QlGagAgOoVoI54FFyV0mmUhIil 9p+nK/ZQ9r2QUsDawwIRdXRwZahUl0HNS/r7U4qpflxg7v1pLo147U1/+0Kce2FU 20sjNq30zxf3s++1qkqwm0+yr4/mXahUXCisijuT41I6dTawL+TaWgIN5FQn6Daa p3PKl9dEHJAW0T1X/s6vMOH8WWQMBJEPe+09SoCZ6BNNHk/uEqmcIyMYqR0QCCWL PQJ5BJ/7eP6JjtT0g3jSudfNvSPXkFY= -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:45 2026 by rpki-client