$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16c24319-3b97-3242-b7f2-a43f51377f9b.roa File: 16c24319-3b97-3242-b7f2-a43f51377f9b.roa (raw, json) Hash identifier: OZviMAlrdab+OYw/AFUtr1iob67grTFRih6oZNWAbpI= Subject key identifier: F2:12:68:9C:86:11:CE:68:F6:A5:73:35:43:EC:6B:FC:0E:4C:8A:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112AE2F5B9FC914CA5B9380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16c24319-3b97-3242-b7f2-a43f51377f9b.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.176.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:ae:2f:5b:9f:c9:14:ca:5b:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=17b410c6-76d5-4971-b9bf-ad408a633c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:27:2c:43:14:27:3e:8d:44:b3:11:aa:7e: c2:63:de:4b:8e:92:5b:e9:d3:42:ed:4e:be:ab:ba: b1:59:be:dc:6e:c2:45:c4:9d:34:79:61:f4:18:95: ce:96:c3:05:0f:67:66:8f:06:04:a8:8d:43:58:d0: 18:e2:e5:59:bb:04:ee:c4:98:ae:fa:1b:ad:86:e4: ae:50:46:75:61:e9:03:24:ad:d6:70:78:f2:bd:b3: 87:f2:2e:a0:3f:5b:9a:00:76:2d:12:59:db:35:ee: eb:20:11:4f:27:ce:f0:e0:17:a4:1d:ec:58:b4:57: 2e:93:51:9a:1d:2e:43:22:14:df:90:2d:25:cd:c0: 8a:4a:e3:96:2b:56:9f:ff:b3:c8:39:4d:f7:32:c5: b5:21:47:eb:ba:b3:4a:a0:0b:9e:58:d1:ab:31:42: 5f:9c:c3:69:db:1d:30:02:4c:f7:4e:3c:86:41:26: b5:32:51:de:53:d7:c9:06:72:a6:c7:3b:ba:06:7d: 50:b4:68:ff:45:f8:ae:7f:9f:33:cf:0c:e1:4a:68: 6e:92:f8:38:93:2f:14:c1:b9:1b:30:81:af:6e:17: 9e:79:59:13:34:37:59:9d:ce:e6:9c:8e:2c:cb:07: 67:e3:d4:ee:bf:16:28:14:54:29:cf:8e:d9:fb:b6: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:68:9C:86:11:CE:68:F6:A5:73:35:43:EC:6B:FC:0E:4C:8A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16c24319-3b97-3242-b7f2-a43f51377f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a8:73:95:aa:5e:a2:42:b4:eb:94:c8:07:bf:61:7c:b1:ff: ad:72:78:09:21:9d:93:13:28:79:4d:26:5a:77:bd:59:54:22: 1c:ec:7b:dc:f9:74:1f:37:88:62:b6:70:39:84:dd:12:3e:cb: a7:8c:fd:13:1e:f4:fe:ae:72:68:f9:26:00:c5:f0:ca:84:84: 9d:10:71:e5:8e:54:8d:e1:fd:63:71:41:e0:dc:b0:64:9f:ba: ad:f7:2f:be:54:38:57:7c:27:08:06:44:02:8f:cc:aa:c2:f7: f0:cb:f1:e7:f3:99:81:7e:56:1d:a5:e3:7d:b7:25:17:e6:1a: a1:1c:51:fe:d4:23:fd:35:fc:4c:94:d5:3f:a7:d4:06:08:38: 8c:17:42:9d:1f:b3:0e:12:55:14:ab:29:ca:0e:70:2b:47:ff: 8f:8a:92:91:3f:14:51:51:ce:1e:d8:ab:b6:53:81:33:96:5b: c6:f4:fd:62:18:dc:a0:c6:e5:f3:93:48:89:f8:0a:a5:93:34: 2e:f6:1b:32:93:fb:f6:39:dc:bf:a7:cf:57:68:d6:4c:01:bd: bc:96:d2:18:6a:44:1a:50:69:35:86:4e:72:e4:20:ff:9f:c2: 6f:71:b3:f3:22:eb:c4:2c:74:d3:a6:a2:3a:25:ab:ef:61:da: 23:7c:74:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEq4vW5/JFMpbk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MTdiNDEwYzYtNzZkNS00OTcxLWI5YmYtYWQ0MDhhNjMzYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKwnLEMUJz6NRLMRqn7CY95LjpJb6dNC7U6+ q7qxWb7cbsJFxJ00eWH0GJXOlsMFD2dmjwYEqI1DWNAY4uVZuwTuxJiu+huthuSu UEZ1YekDJK3WcHjyvbOH8i6gP1uaAHYtElnbNe7rIBFPJ87w4BekHexYtFcuk1Ga HS5DIhTfkC0lzcCKSuOWK1af/7PIOU33MsW1IUfrurNKoAueWNGrMUJfnMNp2x0w Akz3TjyGQSa1MlHeU9fJBnKmxzu6Bn1QtGj/Rfiuf58zzwzhSmhukvg4ky8Uwbkb MIGvbheeeVkTNDdZnc7mnI4sywdn49TuvxYoFFQpz47Z+7YUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPISaJyGEc5o9qVzNUPsa/wOTIqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTZjMjQzMTktM2I5Ny0z MjQyLWI3ZjItYTQzZjUxMzc3ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGoc5WqXqJCtOuUyAe/YXyx/61yeAkhnZMTKHlNJlp3vVlUIhzse9z5 dB83iGK2cDmE3RI+y6eM/RMe9P6ucmj5JgDF8MqEhJ0QceWOVI3h/WNxQeDcsGSf uq33L75UOFd8JwgGRAKPzKrC9/DL8efzmYF+Vh2l4323JRfmGqEcUf7UI/01/EyU 1T+n1AYIOIwXQp0fsw4SVRSrKcoOcCtH/4+KkpE/FFFRzh7Yq7ZTgTOWW8b0/WIY 3KDG5fOTSIn4CqWTNC72GzKT+/Y53L+nz1do1kwBvbyW0hhqRBpQaTWGTnLkIP+f wm9xs/Mi68QsdNOmojolq+9h2iN8dKg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:25:21 2026 by rpki-client