$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa File: bb71b347-40c2-37bf-87fd-2057c206cec6.roa (raw, json) Hash identifier: URevESCFCqq6ad4L09xOYXxa8Tw8ULraZ2l//aoQCk0= Subject key identifier: 21:8A:50:FD:0F:5F:50:E2:AD:D6:51:7E:E9:1D:A7:49:45:96:3F:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D7CCFD1843A6D4D60D8E6F9E4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 70.174.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d1:84:3a:6d:4d:60:d8:e6:f9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=12e4b811-4079-44bd-a993-f972dea3d6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:7a:f5:ea:37:fe:8b:47:2e:ae:2c:f8:93: e9:5d:ea:b0:4a:a8:8b:59:36:1d:b8:50:2f:4d:67: b9:d9:30:79:12:b1:1f:a4:98:17:0e:1f:a8:08:f2: dc:69:e0:d5:2a:55:61:37:de:b7:50:3c:73:41:f3: c9:a1:0c:c4:ce:8d:94:dd:2e:03:92:fd:93:da:5e: f1:ce:b7:45:88:0f:2e:e5:ab:b7:73:7a:d1:67:75: 12:53:6c:5a:46:f2:aa:ef:98:83:dd:3b:d8:c9:15: a4:44:2e:d6:3a:25:66:d1:10:8b:8f:0a:ed:ad:2f: c7:8d:a3:52:08:3b:fe:ab:f4:47:fe:68:c2:61:e9: c7:a2:73:e6:58:a0:f8:76:ee:e7:de:81:b1:03:cf: c8:8b:2c:c2:0b:7d:2e:d7:66:b8:0c:2c:46:63:9a: b4:e1:c6:17:5a:0f:33:3f:f3:84:dd:20:d8:90:f8: b7:44:fe:86:c7:b9:e7:af:2b:c8:d1:9f:d9:08:fe: 45:4b:5b:b1:2c:36:81:9f:90:3f:a6:96:b9:13:dd: 96:98:64:8f:22:a2:22:00:e0:32:a0:1f:5c:c6:4d: 72:89:ba:3b:fd:c1:4a:2d:43:3d:84:b0:1c:e1:79: 99:79:b3:c1:88:a6:ed:a2:b4:35:47:fb:4d:b9:0a: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8A:50:FD:0F:5F:50:E2:AD:D6:51:7E:E9:1D:A7:49:45:96:3F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71b347-40c2-37bf-87fd-2057c206cec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8b:e7:7a:80:cd:49:b4:16:f8:50:84:fd:3c:cd:1c:33:7b: 22:74:6c:d5:05:69:42:6a:ee:12:04:99:f1:3c:19:5c:c7:c9: a9:45:3c:e2:9e:ab:7d:39:d3:bd:43:2c:5e:71:4b:cf:a5:0c: 47:fe:68:21:70:14:66:bc:c7:d4:66:cf:5a:43:8d:15:cf:d4: ee:e3:ea:5c:33:f3:55:74:ec:18:00:20:1f:c9:d8:91:b0:86: ac:f3:1a:f4:34:9c:a1:08:a0:68:17:12:78:6a:a4:f1:f6:6e: 7c:3b:1b:54:87:45:79:78:5f:4f:24:04:25:9e:cd:0e:5a:c8: 2d:42:1d:00:dd:64:bd:d7:bf:94:49:3e:65:8e:2b:42:08:ee: 88:e5:a8:cf:e9:cb:ec:73:93:fb:cd:c7:3c:c3:3e:ed:91:ba: d1:17:2d:0f:12:37:83:d0:c5:82:9d:37:69:72:0e:7d:41:0a: b7:f1:22:89:84:08:ee:f9:f4:34:48:ae:93:59:36:7c:10:5e: cd:6c:e4:a5:b0:71:f3:cb:05:da:1c:e7:e5:da:4e:10:00:0d: ec:43:81:2b:97:4a:a6:1b:91:12:4f:13:06:e9:6a:2e:28:67: 57:80:03:bc:96:20:f9:1c:38:8b:76:26:be:e3:12:6e:52:cb: db:63:ba:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9GEOm1NYNjm+eQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk MTJlNGI4MTEtNDA3OS00NGJkLWE5OTMtZjk3MmRlYTNkNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq169eo3/otHLq4s+JPpXeqwSqiLWTYduFAv TWe52TB5ErEfpJgXDh+oCPLcaeDVKlVhN963UDxzQfPJoQzEzo2U3S4Dkv2T2l7x zrdFiA8u5au3c3rRZ3USU2xaRvKq75iD3TvYyRWkRC7WOiVm0RCLjwrtrS/HjaNS CDv+q/RH/mjCYenHonPmWKD4du7n3oGxA8/IiyzCC30u12a4DCxGY5q04cYXWg8z P/OE3SDYkPi3RP6Gx7nnryvI0Z/ZCP5FS1uxLDaBn5A/ppa5E92WmGSPIqIiAOAy oB9cxk1yibo7/cFKLUM9hLAc4XmZebPBiKbtorQ1R/tNuQqiCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGKUP0PX1DirdZRfukdp0lFlj8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI3MWIzNDctNDBjMi0z N2JmLTg3ZmQtMjA1N2MyMDZjZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGL53qAzUm0FvhQhP08zRwzeyJ0bNUFaUJq7hIEmfE8GVzHyalFPOKe q305071DLF5xS8+lDEf+aCFwFGa8x9Rmz1pDjRXP1O7j6lwz81V07BgAIB/J2JGw hqzzGvQ0nKEIoGgXEnhqpPH2bnw7G1SHRXl4X08kBCWezQ5ayC1CHQDdZL3Xv5RJ PmWOK0II7ojlqM/py+xzk/vNxzzDPu2RutEXLQ8SN4PQxYKdN2lyDn1BCrfxIomE CO759DRIrpNZNnwQXs1s5KWwcfPLBdoc5+XaThAADexDgSuXSqYbkRJPEwbpai4o Z1eAA7yWIPkcOIt2Jr7jEm5Sy9tjumc= -----END CERTIFICATE-----Generated at Fri Apr 17 10:28:45 2026 by rpki-client