$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa File: 43c86b8d-9b7a-38ff-8390-f446d737a803.roa (raw, json) Hash identifier: sBEgLEXEtj5GtWZqogR3WFTfFbGWqCUl8UrJvB9Yksk= Subject key identifier: 8B:EE:05:45:9D:57:21:C9:87:78:CE:4F:10:E5:80:F2:D5:68:2D:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112D3A97659215F85826800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 70.172.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:d3:a9:76:59:21:5f:85:82:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=38676a4d-ed47-4334-8d44-c9be0d724114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:8c:05:3c:29:23:35:27:43:a1:23:23:8d: 25:28:d3:c4:86:3f:e5:10:07:4b:f8:84:63:f0:9a: 39:a2:ca:73:b4:1d:68:f5:49:ca:3c:ea:65:60:a4: 85:16:78:cb:3a:d7:d7:7d:6c:81:d6:26:18:95:2b: a1:f1:0d:0b:09:55:2b:a7:75:7e:83:13:b8:80:79: 99:8e:2a:d7:aa:e1:53:da:df:27:fb:19:ae:1a:42: f3:17:7f:39:51:fd:27:bc:e8:10:b5:72:70:20:96: c0:7d:6a:f8:9e:39:a3:e8:8f:64:f2:73:49:ed:a4: 69:a5:11:35:a7:db:e7:3e:3f:80:11:b3:c3:2d:b0: 70:d6:ea:7e:c5:95:e3:be:c8:4c:8f:88:29:ee:4f: 48:a2:27:23:48:ee:9f:e8:4b:39:d8:0a:e7:c4:3c: fb:de:3e:d7:db:d9:61:9b:82:04:4e:a1:19:1c:ab: a7:28:f3:55:79:3b:58:fa:71:0d:9c:78:bc:9e:23: 4e:31:cf:5d:38:51:50:0c:cc:4c:e1:e5:aa:38:c8: c5:03:0e:e5:e6:e0:1d:7a:02:48:ae:22:31:0d:57: 9c:59:a1:3c:11:8b:30:df:e2:45:e7:48:b0:a9:6f: 7e:dd:5f:29:8a:34:9f:dc:84:22:f7:5e:9b:10:19: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:05:45:9D:57:21:C9:87:78:CE:4F:10:E5:80:F2:D5:68:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:64:8e:f5:c5:07:0a:e7:8a:4b:88:a7:e6:c8:a1:c4:04:b7: dc:ba:e4:36:96:6c:3e:63:01:0e:72:c0:cf:e8:2e:29:33:ad: 65:1a:22:b4:b7:75:48:a3:b5:7c:2d:38:09:43:c5:b4:26:1f: 8e:cd:fa:b8:04:f5:96:7c:9f:52:f7:53:55:4d:de:57:0c:90: a9:04:e2:48:12:b2:1b:df:d7:bd:d7:91:eb:87:a8:bc:b1:77: 3b:da:ac:de:f5:4d:6c:e3:2d:7b:fa:dc:4e:a8:49:dc:dd:4d: 1e:0c:16:92:99:80:87:ea:1c:2b:ab:35:65:15:b4:24:a0:2f: 23:3b:16:b3:24:4d:aa:87:0b:3d:a0:31:f0:44:73:9f:dc:63: b5:da:21:07:d8:ad:06:9e:45:6c:8a:35:6a:d2:1b:6b:92:2c: 68:ec:bf:74:d2:fa:62:f1:f8:70:7a:a9:3f:74:6c:91:3c:6f: 60:25:49:fc:a8:9a:6a:3f:c0:d1:09:01:44:92:54:fd:27:2c: e5:28:d9:d8:f3:ea:7b:83:c2:26:11:a9:8c:68:23:9f:4b:88: 77:98:f9:8d:27:50:d1:9e:ef:32:40:a3:f0:14:df:10:31:39: 53:23:0a:81:95:c2:ec:38:7c:26:ce:a5:e1:35:fb:6a:da:d9: 8c:3e:d5:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEtOpdlkhX4WCaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk Mzg2NzZhNGQtZWQ0Ny00MzM0LThkNDQtYzliZTBkNzI0MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26CMBTwpIzUnQ6EjI40lKNPEhj/lEAdL+IRj 8Jo5ospztB1o9UnKPOplYKSFFnjLOtfXfWyB1iYYlSuh8Q0LCVUrp3V+gxO4gHmZ jirXquFT2t8n+xmuGkLzF385Uf0nvOgQtXJwIJbAfWr4njmj6I9k8nNJ7aRppRE1 p9vnPj+AEbPDLbBw1up+xZXjvshMj4gp7k9IoicjSO6f6Es52ArnxDz73j7X29lh m4IETqEZHKunKPNVeTtY+nENnHi8niNOMc9dOFFQDMxM4eWqOMjFAw7l5uAdegJI riIxDVecWaE8EYsw3+JF50iwqW9+3V8pijSf3IQi916bEBkBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvuBUWdVyHJh3jOTxDlgPLVaC3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNjODZiOGQtOWI3YS0z OGZmLTgzOTAtZjQ0NmQ3MzdhODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERkjvXFBwrnikuIp+bIocQEt9y65DaWbD5jAQ5ywM/oLikzrWUaIrS3 dUijtXwtOAlDxbQmH47N+rgE9ZZ8n1L3U1VN3lcMkKkE4kgSshvf173XkeuHqLyx dzvarN71TWzjLXv63E6oSdzdTR4MFpKZgIfqHCurNWUVtCSgLyM7FrMkTaqHCz2g MfBEc5/cY7XaIQfYrQaeRWyKNWrSG2uSLGjsv3TS+mLx+HB6qT90bJE8b2AlSfyo mmo/wNEJAUSSVP0nLOUo2djz6nuDwiYRqYxoI59LiHeY+Y0nUNGe7zJAo/AU3xAx OVMjCoGVwuw4fCbOpeE1+2ra2Yw+1Q8= -----END CERTIFICATE-----Generated at Mon Sep 28 23:21:52 2026 by rpki-client