
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa
File: 40f708c4-1a86-3068-95d7-34df5e65fcc4.roa (raw, json)
Hash identifier: DrIum/IozBtegNx9bNWUYcGfasogzYMS0OdEO+ELTu0=
Subject key identifier: 52:2B:2D:EA:3C:26:A6:A0:C6:A1:06:E9:D4:05:61:3A:01:DC:A6:BC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4112E57B379069EC35D5C180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 22773
IP address blocks: 70.162.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:e5:7b:37:90:69:ec:35:d5:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=1fdbd2bf-02c9-476e-b9fa-75d2ce30c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:e7:6e:e3:ae:c1:2a:2b:2e:bf:b1:38:3d:
fd:8c:be:0a:e0:7b:ca:f6:dc:1d:c0:8c:7a:dc:8b:
4b:9c:2c:4a:7f:0f:84:c4:ab:f5:b3:0a:0d:c3:b6:
e7:f8:a8:a3:ae:a5:03:96:dc:8e:64:33:6b:53:26:
43:73:1e:1b:07:b8:1f:b6:53:6f:e8:06:e5:45:d1:
33:12:27:eb:55:fe:0d:87:08:e2:7f:de:f6:82:4b:
f3:5d:fe:7e:b3:20:78:03:d8:57:e1:63:28:80:36:
54:88:9c:1d:c3:0e:11:ad:06:b0:33:0c:23:a5:2f:
c2:7d:5b:54:b8:45:d9:70:24:b9:d5:16:96:bf:14:
1f:76:25:60:03:6d:31:b7:f5:bd:3a:75:3c:b4:76:
01:06:94:fc:ac:ab:7e:b8:f1:80:03:06:6b:71:8c:
6d:48:ab:bc:0c:3b:7c:98:86:49:82:d4:6a:bb:79:
58:f2:2c:33:99:96:e3:e2:e3:db:dc:4f:a4:9f:30:
81:2b:6d:97:1e:8b:9f:d4:84:cf:db:32:92:86:8d:
08:c2:c8:7d:45:5c:cc:9f:42:06:0b:46:02:97:c7:
f7:21:d2:6f:21:26:00:2a:49:c9:68:fc:bd:ee:ec:
39:7b:e7:02:fb:3b:ea:b3:93:0a:8b:ae:7b:84:d2:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:2D:EA:3C:26:A6:A0:C6:A1:06:E9:D4:05:61:3A:01:DC:A6:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.162.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e3:4b:06:41:a7:7c:61:fc:e4:31:4c:7f:e4:10:97:4f:5e:
89:a2:4e:2a:f9:6c:5c:a5:ed:83:b1:a8:4e:f6:83:1b:4d:18:
29:50:0d:a0:43:c0:25:ac:fc:7f:53:92:82:98:11:34:68:4a:
5e:c7:32:3a:d4:58:49:36:b7:70:4d:80:f9:47:43:a2:74:55:
47:7c:d3:18:5c:0b:50:51:55:7f:fc:ed:4e:26:fa:77:06:6a:
a4:9f:8b:38:f0:d6:99:12:a9:20:a6:f6:2b:71:ea:f6:1f:3d:
e1:3b:92:90:23:ab:8d:7d:06:1d:dd:c8:72:d0:d9:a6:3f:0d:
61:18:7d:41:14:c7:29:59:d8:46:70:1a:63:10:6f:70:b5:9b:
ac:f8:51:6e:d7:b4:cb:44:9c:70:e7:b0:f9:06:53:a8:ec:3b:
ba:06:fb:06:f7:d3:73:bf:29:94:ae:26:68:98:8a:13:40:8e:
d5:f4:91:3e:2d:d8:dc:05:e1:25:52:c8:0a:08:1a:ea:42:20:
5a:f4:62:54:59:fb:cd:89:4b:f0:6b:8b:f4:bc:48:56:65:3f:
44:81:79:fa:ca:a4:15:df:ca:4c:42:2d:c4:cc:1d:dc:73:92:
7a:a1:fc:97:f8:77:45:f1:20:22:a3:a9:85:e5:f9:c3:b0:ce:
ab:07:64:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEuV7N5Bp7DXVwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MWZkYmQyYmYtMDJjOS00NzZlLWI5ZmEtNzVkMmNlMzBjNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBbnbuOuwSorLr+xOD39jL4K4HvK9twdwIx6
3ItLnCxKfw+ExKv1swoNw7bn+KijrqUDltyOZDNrUyZDcx4bB7gftlNv6AblRdEz
EifrVf4Nhwjif972gkvzXf5+syB4A9hX4WMogDZUiJwdww4RrQawMwwjpS/CfVtU
uEXZcCS51RaWvxQfdiVgA20xt/W9OnU8tHYBBpT8rKt+uPGAAwZrcYxtSKu8DDt8
mIZJgtRqu3lY8iwzmZbj4uPb3E+knzCBK22XHouf1ITP2zKSho0Iwsh9RVzMn0IG
C0YCl8f3IdJvISYAKknJaPy97uw5e+cC+zvqs5MKi657hNL+jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIrLeo8JqagxqEG6dQFYToB3Ka8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDBmNzA4YzQtMWE4Ni0z
MDY4LTk1ZDctMzRkZjVlNjVmY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqKcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTjSwZBp3xh/OQxTH/kEJdPXomiTir5bFyl7YOxqE72gxtNGClQDaBD
wCWs/H9TkoKYETRoSl7HMjrUWEk2t3BNgPlHQ6J0VUd80xhcC1BRVX/87U4m+ncG
aqSfizjw1pkSqSCm9itx6vYfPeE7kpAjq419Bh3dyHLQ2aY/DWEYfUEUxylZ2EZw
GmMQb3C1m6z4UW7XtMtEnHDnsPkGU6jsO7oG+wb303O/KZSuJmiYihNAjtX0kT4t
2NwF4SVSyAoIGupCIFr0YlRZ+82JS/Bri/S8SFZlP0SBefrKpBXfykxCLcTMHdxz
knqh/Jf4d0XxICKjqYXl+cOwzqsHZM4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:37:23 2026 by rpki-client