$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa File: 36cdd71c-e6e4-373c-9924-21f004f01e6a.roa (raw, json) Hash identifier: WrwdgRjS2NktXaUA/DamKFxVJs49W5vJzn+9Nc43EH4= Subject key identifier: 24:A6:BA:05:3D:48:84:E0:08:3B:B7:99:D1:24:DE:26:59:50:26:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFC7CA42AB68DB63DCC860 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 70.172.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:c7:ca:42:ab:68:db:63:dc:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=85a5e06d-39ea-47c5-bfc0-c8d4b851ea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:16:56:cc:d4:e4:75:1c:ce:22:86:e5:98: 9f:17:86:9b:af:ab:70:50:bb:b5:86:e6:d1:75:e5: c6:f6:7c:87:9c:ac:68:7e:ec:b7:48:02:75:54:76: 29:14:7c:f8:3c:ff:12:1e:1e:f3:86:58:70:c3:b2: ae:8e:90:9b:87:a5:82:d0:14:6b:41:cd:24:4a:2c: 34:88:fd:c1:95:a7:dc:3e:b5:96:7a:b4:cb:0a:23: 0a:d0:2f:6d:6c:16:04:40:01:92:73:31:f2:06:b9: ae:24:71:95:f4:5e:e4:af:c1:50:43:4e:a4:51:1b: e1:76:71:2a:fa:8b:53:9f:5a:f4:ad:8c:7f:ae:78: 2a:7d:68:12:10:49:3b:7c:cc:e6:83:59:76:a7:29: d0:d2:f2:61:97:21:9d:18:f1:3f:84:fc:dc:da:a1: ac:49:c1:ed:76:ab:63:e3:65:19:cb:0c:2a:16:76: 1a:69:38:22:78:1e:9e:53:50:17:25:58:cf:93:1c: ed:09:31:0a:97:d7:ed:19:25:49:b5:bb:75:ee:99: b4:18:c2:3e:8f:fe:68:b2:c1:33:fd:50:76:49:22: 21:05:4e:d5:50:7d:8d:bd:13:36:b4:cd:04:40:6b: fb:1d:06:a6:36:ed:f6:f9:fa:1f:c3:75:de:79:dd: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:BA:05:3D:48:84:E0:08:3B:B7:99:D1:24:DE:26:59:50:26:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:43:a7:72:4e:da:41:c2:e1:e7:66:a2:16:5a:44:eb:93:d0: 45:ca:ee:16:e7:3a:cd:c8:a2:fb:85:e5:e4:c6:ae:ad:91:48: bb:fa:b2:a9:3a:74:36:58:6d:f2:d1:e6:99:40:47:ce:5a:e7: bf:08:bb:02:5e:1c:c7:f5:33:b1:75:45:e4:32:18:d1:73:fe: 4f:e1:6c:41:15:9b:df:6d:7f:4d:a8:32:84:4a:68:eb:ae:b9: 4c:ad:d5:79:1d:f8:e5:a3:05:b4:e2:ab:c7:59:0d:69:63:7f: ac:9a:06:7b:b3:9d:05:cc:e0:c9:65:47:04:98:18:ca:12:b4: 85:86:47:99:f3:44:63:87:ef:7e:34:ca:98:f9:19:61:cf:49: f9:93:36:d3:c5:d7:cc:bd:f8:1f:be:21:f8:78:82:2d:c4:0a: 02:54:f2:57:66:49:f7:63:47:ad:89:00:9b:e4:2b:65:01:4a: b3:98:2d:48:95:ba:36:17:9d:6d:39:6a:4a:02:61:14:c7:1e: 84:57:93:b5:58:74:dd:c1:5d:5a:d6:01:16:ba:52:d2:a4:e4: 8c:a1:6d:97:67:08:f5:f9:77:6f:dc:b1:b3:9e:a0:75:a5:b4: 3b:a3:da:6a:8c:12:b3:bf:4d:d3:b8:eb:d8:e1:22:b2:9b:b9: 82:4d:7c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8fKQqto22PcyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ODVhNWUwNmQtMzllYS00N2M1LWJmYzAtYzhkNGI4NTFlYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloIWVszU5HUcziKG5ZifF4abr6twULu1hubR deXG9nyHnKxofuy3SAJ1VHYpFHz4PP8SHh7zhlhww7KujpCbh6WC0BRrQc0kSiw0 iP3BlafcPrWWerTLCiMK0C9tbBYEQAGSczHyBrmuJHGV9F7kr8FQQ06kURvhdnEq +otTn1r0rYx/rngqfWgSEEk7fMzmg1l2pynQ0vJhlyGdGPE/hPzc2qGsScHtdqtj 42UZywwqFnYaaTgieB6eU1AXJVjPkxztCTEKl9ftGSVJtbt17pm0GMI+j/5ossEz /VB2SSIhBU7VUH2NvRM2tM0EQGv7HQamNu32+fofw3Xeed26LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSmugU9SITgCDu3mdEk3iZZUCaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZjZGQ3MWMtZTZlNC0z NzNjLTk5MjQtMjFmMDA0ZjAxZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpDp3JO2kHC4edmohZaROuT0EXK7hbnOs3IovuF5eTGrq2RSLv6sqk6 dDZYbfLR5plAR85a578IuwJeHMf1M7F1ReQyGNFz/k/hbEEVm99tf02oMoRKaOuu uUyt1Xkd+OWjBbTiq8dZDWljf6yaBnuznQXM4MllRwSYGMoStIWGR5nzRGOH7340 ypj5GWHPSfmTNtPF18y9+B++Ifh4gi3ECgJU8ldmSfdjR62JAJvkK2UBSrOYLUiV ujYXnW05akoCYRTHHoRXk7VYdN3BXVrWARa6UtKk5IyhbZdnCPX5d2/csbOeoHWl tDuj2mqMErO/TdO469jhIrKbuYJNfN8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:09 2026 by rpki-client