$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1700255c-3a17-34da-ba4f-56235991c507.roa File: 1700255c-3a17-34da-ba4f-56235991c507.roa (raw, json) Hash identifier: gpVzpCZYkYxkcKsVGcjm3UEggK9Dsz6NDz791djpKYM= Subject key identifier: 36:9E:6A:90:B0:16:37:F4:F2:F4:A2:EC:24:28:6B:FF:44:7B:45:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0977A3F0EC3EBAE1E9F21E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1700255c-3a17-34da-ba4f-56235991c507.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.173.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:7a:3f:0e:c3:eb:ae:1e:9f:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=5846c848-d61f-4bde-8216-19a8e6179cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:01:3d:5f:a8:e1:31:5d:e7:03:65:85:17: 3c:c0:8d:38:8e:6c:b6:29:a6:da:ca:fe:d0:bc:eb: f8:fd:15:e8:37:f6:23:22:04:03:11:53:5f:86:2d: f7:94:95:fe:5d:7a:6a:f4:38:2b:21:60:63:6d:6f: 09:d7:6f:89:6e:bd:9b:c0:af:07:40:b8:52:09:ca: 5c:e0:e3:ab:34:00:73:3d:5b:09:e0:fd:cb:34:a9: 8d:28:0d:1b:51:01:ed:39:3b:d7:32:60:fd:c5:95: 6f:4a:cd:0b:b9:96:58:90:30:45:59:37:2c:22:11: ef:d3:7b:ba:69:52:ba:79:91:16:b9:a3:da:c5:1c: 66:0f:79:df:5c:c4:48:ec:37:e2:0b:81:19:7d:37: 8e:05:03:f6:ad:af:13:27:b8:78:7e:fa:46:f6:96: ba:80:da:1f:ed:54:cf:7e:44:f6:58:df:68:c1:63: 6a:f1:f3:84:f0:42:7d:2a:24:ab:aa:c7:9a:4a:90: 99:b2:11:0b:6b:a4:f8:39:09:e8:b9:41:01:0a:c9: e5:92:d6:90:2a:0a:f1:3f:27:8c:b4:00:ba:e8:d7: 95:ea:2b:44:12:cd:45:7f:63:a0:50:64:41:2e:c8: ea:10:a8:ac:06:9a:29:ae:3a:db:e6:c2:6e:dc:6b: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:6A:90:B0:16:37:F4:F2:F4:A2:EC:24:28:6B:FF:44:7B:45:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1700255c-3a17-34da-ba4f-56235991c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:13:94:e9:ae:6b:c6:7c:b5:55:99:5c:da:e4:ff:ec:e0:02: 58:f9:f2:a4:5e:59:0c:09:b7:9b:e0:68:de:d3:3c:fe:81:28: 5c:a8:74:89:72:a1:1f:53:27:29:a5:c5:fd:5a:ed:ea:fa:9c: 11:eb:53:bb:6e:52:cf:10:04:5a:ab:3d:a6:0d:f0:0b:03:21: e8:83:20:ca:6b:3f:92:91:f5:9d:96:a6:ba:04:90:b6:7e:cb: 6f:62:50:eb:56:07:66:52:68:89:e6:29:31:75:91:d6:ca:66: e6:5d:13:a1:10:52:1a:07:4b:dd:03:7a:18:e4:f6:67:a3:34: 45:d5:27:e3:a1:4e:7c:0e:ea:13:ed:36:dd:d2:e2:08:1e:0c: 92:7a:86:80:d9:e6:09:18:4b:5e:48:26:52:52:f8:d9:f2:c3: 45:3c:4d:dc:8d:8f:a3:4b:d6:1e:42:1c:9f:af:9c:b2:62:0e: 0c:05:71:0e:54:45:fe:90:a7:ef:83:82:d1:13:55:59:42:7a: 22:fd:93:ff:6d:8e:ba:5c:48:e3:c2:45:a1:72:d4:44:cb:03: ea:6f:36:6a:11:ef:d8:6c:47:3c:a5:81:5a:f7:84:cd:7e:c3: 51:a5:10:41:68:57:da:bd:70:4d:ba:ba:eb:e7:aa:37:f8:f1: 64:45:f9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3o/DsPrrh6fIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NTg0NmM4NDgtZDYxZi00YmRlLTgyMTYtMTlhOGU2MTc5Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY4BPV+o4TFd5wNlhRc8wI04jmy2Kabayv7Q vOv4/RXoN/YjIgQDEVNfhi33lJX+XXpq9DgrIWBjbW8J12+Jbr2bwK8HQLhSCcpc 4OOrNABzPVsJ4P3LNKmNKA0bUQHtOTvXMmD9xZVvSs0LuZZYkDBFWTcsIhHv03u6 aVK6eZEWuaPaxRxmD3nfXMRI7DfiC4EZfTeOBQP2ra8TJ7h4fvpG9pa6gNof7VTP fkT2WN9owWNq8fOE8EJ9KiSrqseaSpCZshELa6T4OQnouUEBCsnlktaQKgrxPyeM tAC66NeV6itEEs1Ff2OgUGRBLsjqEKisBpoprjrb5sJu3Gu6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaeapCwFjf08vSi7CQoa/9Ee0X7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcwMDI1NWMtM2ExNy0z NGRhLWJhNGYtNTYyMzU5OTFjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKATlOmua8Z8tVWZXNrk/+zgAlj58qReWQwJt5vgaN7TPP6BKFyodIly oR9TJymlxf1a7er6nBHrU7tuUs8QBFqrPaYN8AsDIeiDIMprP5KR9Z2WproEkLZ+ y29iUOtWB2ZSaInmKTF1kdbKZuZdE6EQUhoHS90Dehjk9mejNEXVJ+OhTnwO6hPt Nt3S4ggeDJJ6hoDZ5gkYS15IJlJS+Nnyw0U8TdyNj6NL1h5CHJ+vnLJiDgwFcQ5U Rf6Qp++DgtETVVlCeiL9k/9tjrpcSOPCRaFy1ETLA+pvNmoR79hsRzylgVr3hM1+ w1GlEEFoV9q9cE26uuvnqjf48WRF+dA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:39 2026 by rpki-client