$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3948ee1b-ff25-3334-83f6-3172a4d90912.roa File: 3948ee1b-ff25-3334-83f6-3172a4d90912.roa (raw, json) Hash identifier: MAUlmX6zlg4Jsfxh55rzt4+p5heKjLucsOqX4z9P9l4= Subject key identifier: B8:D6:81:DF:01:30:98:D7:0E:05:2F:78:B7:A9:57:94:35:59:63:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A7FD9711033CD3A28AC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3948ee1b-ff25-3334-83f6-3172a4d90912.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 70.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:7f:d9:71:10:33:cd:3a:28:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=a50d9f1d-ed97-495d-b906-efb193e611eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:f1:d2:7f:ac:6d:66:65:d6:f6:f4:6f:14: 13:dc:71:ac:98:05:57:93:b6:be:34:f3:f1:03:7b: f7:04:19:7c:98:7a:67:f1:ea:bf:e8:0c:a3:09:5e: e9:3d:a0:fd:ab:63:b1:95:b7:9b:14:d7:85:14:a5: 71:fd:44:ce:50:5a:1e:0f:ff:3f:d4:2f:07:b7:47: ec:16:96:e8:43:20:a7:0a:b8:7c:51:2e:2d:c1:2f: e5:fa:d7:80:67:62:c5:98:a8:60:a4:a0:fc:77:dc: 84:af:75:3a:42:bd:b0:56:bf:51:69:8d:54:1e:4b: 8d:ab:b2:57:3e:f0:6e:82:c4:f2:6a:b2:31:44:24: 66:9b:bd:46:15:6b:8b:b2:cb:61:9c:b7:b1:aa:8b: c8:18:43:69:36:23:a8:b4:c2:1b:73:81:ea:48:c5: de:4c:66:cc:c4:1c:ed:e8:56:b8:8e:94:ed:ac:e6: e2:6e:1e:3e:a6:85:af:bc:e4:4e:8a:1c:7e:53:f8: 09:48:b2:18:46:18:aa:40:fc:e5:2c:0c:02:d0:c7: 13:52:9e:99:aa:2b:af:93:17:13:53:57:e8:79:73: 7a:68:ad:94:52:f2:2a:10:ba:e5:87:6d:6b:cc:0b: cd:08:90:82:00:4e:55:b6:92:ea:a3:e0:3c:79:29: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:81:DF:01:30:98:D7:0E:05:2F:78:B7:A9:57:94:35:59:63:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3948ee1b-ff25-3334-83f6-3172a4d90912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d5:a4:8c:75:0b:67:d9:f3:45:a9:6d:23:55:a5:56:82:da: 06:41:ee:1c:a1:07:fd:81:87:70:8a:31:d6:21:38:db:ed:e1: db:12:b8:0e:c5:a4:84:16:f6:53:a0:ab:39:9e:2e:95:32:8a: e1:dc:ba:30:05:9d:50:7b:f4:eb:f9:bd:92:ae:c7:69:8e:29: 8a:e8:74:85:f7:08:ff:96:0e:22:d9:56:25:b6:1c:1e:3b:00: 0a:13:ee:ef:a3:9d:da:55:c1:7c:da:a5:41:03:fc:72:ec:da: 56:c7:48:21:e1:a6:63:91:54:07:44:29:23:16:51:d4:22:0f: af:ed:d0:4f:66:21:a7:82:5f:f1:47:3d:02:3f:59:82:b2:87: d7:5f:1a:f9:13:05:b6:9e:77:45:1d:fa:e9:af:55:c3:25:81: f8:f3:f0:66:3b:16:15:31:32:e3:0d:d4:9d:3d:73:43:e4:e9: 7a:67:47:82:9a:9b:8d:15:ba:2f:dd:93:9c:8a:77:ab:1a:e6: 3d:a6:fc:66:a1:e9:e2:48:ab:3d:d0:27:54:df:73:6a:71:42: b3:4e:ec:6a:ee:91:8e:d2:21:c3:28:b3:82:2b:d0:ca:4f:24: f7:09:5d:81:58:1b:2d:9b:1e:74:96:e6:61:1e:fa:fa:20:51: 83:ba:8c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hen/ZcRAzzToorIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YTUwZDlmMWQtZWQ5Ny00OTVkLWI5MDYtZWZiMTkzZTYxMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3bx0n+sbWZl1vb0bxQT3HGsmAVXk7a+NPPx A3v3BBl8mHpn8eq/6AyjCV7pPaD9q2OxlbebFNeFFKVx/UTOUFoeD/8/1C8Ht0fs FpboQyCnCrh8US4twS/l+teAZ2LFmKhgpKD8d9yEr3U6Qr2wVr9RaY1UHkuNq7JX PvBugsTyarIxRCRmm71GFWuLssthnLexqovIGENpNiOotMIbc4HqSMXeTGbMxBzt 6Fa4jpTtrObibh4+poWvvOROihx+U/gJSLIYRhiqQPzlLAwC0McTUp6ZqiuvkxcT U1foeXN6aK2UUvIqELrlh21rzAvNCJCCAE5VtpLqo+A8eSm9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjWgd8BMJjXDgUveLepV5Q1WWPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzk0OGVlMWItZmYyNS0z MzM0LTgzZjYtMzE3MmE0ZDkwOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqpPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnVpIx1C2fZ80WpbSNVpVaC2gZB7hyhB/2Bh3CKMdYhONvt4dsSuA7F pIQW9lOgqzmeLpUyiuHcujAFnVB79Ov5vZKux2mOKYrodIX3CP+WDiLZViW2HB47 AAoT7u+jndpVwXzapUED/HLs2lbHSCHhpmORVAdEKSMWUdQiD6/t0E9mIaeCX/FH PQI/WYKyh9dfGvkTBbaed0Ud+umvVcMlgfjz8GY7FhUxMuMN1J09c0Pk6XpnR4Ka m40Vui/dk5yKd6sa5j2m/Gah6eJIqz3QJ1Tfc2pxQrNO7GrukY7SIcMos4Ir0MpP JPcJXYFYGy2bHnSW5mEe+vogUYO6jJ4= -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:18 2026 by rpki-client