$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecac4d27-a7c2-3309-b2d9-13e749d7c50d.roa File: ecac4d27-a7c2-3309-b2d9-13e749d7c50d.roa (raw, json) Hash identifier: WsTITZsi3WY+mpn7HIW19sOoyW6xbhobDRQRJFjFHrM= Subject key identifier: BB:9D:9F:0D:F6:30:F9:B9:2C:55:13:81:FC:87:76:EF:DA:0E:C4:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD246EBD06479E37F4E900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecac4d27-a7c2-3309-b2d9-13e749d7c50d.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.171.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:24:6e:bd:06:47:9e:37:f4:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=8e4af517-bc03-4adb-983a-69722cc64961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:73:fb:27:ff:a5:c2:63:32:8d:c5:66:04: f8:16:37:95:8a:a1:ee:3a:f6:9c:46:1b:45:f1:84: b7:ec:94:dc:06:9d:80:a4:5c:74:b8:43:09:ce:38: 39:b5:e7:dc:54:58:f2:bf:e7:e1:43:82:d9:bc:99: f1:c8:43:15:15:4f:c4:67:25:c7:df:a9:3e:e1:93: fc:14:16:db:99:9e:9c:65:ca:a2:1f:e1:a8:86:19: 55:16:22:c6:22:81:49:75:1f:07:6b:7d:7d:a7:55: 25:4b:6c:67:5f:3c:75:c1:8c:63:8f:90:0f:62:f7: e0:5b:32:05:ef:6c:c9:7c:2f:c5:e9:e2:a9:af:27: b3:30:65:87:1b:f3:50:21:2b:d7:75:ce:9b:82:8e: 5e:7e:b4:75:d1:ce:5e:57:54:9f:c0:75:99:f8:fa: 01:91:40:e1:9e:cb:c5:28:77:46:d4:39:c3:7f:31: 17:ed:12:64:64:bc:92:40:f7:86:63:5d:27:8f:03: 01:c9:97:88:35:05:57:7c:73:d5:c3:f2:c4:65:1f: c3:88:a2:22:cf:7e:73:37:6e:d5:44:27:f8:82:ce: 59:82:74:2b:c2:6b:be:53:d9:d3:cf:09:61:d7:db: 97:09:e7:fa:48:2f:f5:af:7f:4f:55:37:9b:28:d0: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:9F:0D:F6:30:F9:B9:2C:55:13:81:FC:87:76:EF:DA:0E:C4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecac4d27-a7c2-3309-b2d9-13e749d7c50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:88:64:63:1c:ec:1f:09:24:be:4b:b1:4a:f9:73:23:23:7e: 60:dc:3e:47:90:ed:73:cd:84:1c:6b:37:fc:15:1a:9a:a0:c7: 73:dc:3a:e3:2b:9e:15:42:fd:79:d7:5a:17:48:1d:43:27:70: b0:9c:6c:2f:2f:45:d9:81:1e:b2:62:f2:e7:8f:0c:02:d1:04: 55:0f:dd:b7:24:a4:8a:2d:a7:89:92:20:06:57:7f:fb:1b:66: fc:c8:2d:d9:b5:43:01:e7:46:ae:56:ee:48:45:72:b5:57:75: 8a:dc:56:24:e9:e9:c0:04:2b:10:7a:69:0e:62:f4:a3:fb:1d: 82:21:69:f2:8d:f1:d8:e1:18:f0:96:77:16:63:ee:80:1e:e6: 30:cd:94:f0:1e:7b:cd:86:79:8f:45:28:d4:bf:90:34:80:53: 04:0f:a5:44:61:91:3e:b7:ae:49:6d:4b:00:c1:04:d5:d7:83: 5d:93:30:51:30:ce:aa:75:94:1a:7e:fc:50:40:2e:39:28:a5: 57:43:15:86:75:e7:81:91:f8:f1:b1:2d:80:ba:0f:95:ec:92: 64:e5:68:3e:34:e0:46:72:16:88:0d:13:2e:51:cf:40:31:e3: 89:38:2f:7a:69:3e:a6:e8:06:8e:57:0b:a4:a2:d4:c6:4b:b1: d6:ea:fc:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzSRuvQZHnjf06QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk OGU0YWY1MTctYmMwMy00YWRiLTk4M2EtNjk3MjJjYzY0OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Nz+yf/pcJjMo3FZgT4FjeViqHuOvacRhtF 8YS37JTcBp2ApFx0uEMJzjg5tefcVFjyv+fhQ4LZvJnxyEMVFU/EZyXH36k+4ZP8 FBbbmZ6cZcqiH+GohhlVFiLGIoFJdR8Ha319p1UlS2xnXzx1wYxjj5APYvfgWzIF 72zJfC/F6eKpryezMGWHG/NQISvXdc6bgo5efrR10c5eV1SfwHWZ+PoBkUDhnsvF KHdG1DnDfzEX7RJkZLySQPeGY10njwMByZeINQVXfHPVw/LEZR/DiKIiz35zN27V RCf4gs5ZgnQrwmu+U9nTzwlh19uXCef6SC/1r39PVTebKNDCBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLudnw32MPm5LFUTgfyHdu/aDsTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWNhYzRkMjctYTdjMi0z MzA5LWIyZDktMTNlNzQ5ZDdjNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqvnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGIZGMc7B8JJL5LsUr5cyMjfmDcPkeQ7XPNhBxrN/wVGpqgx3PcOuMr nhVC/XnXWhdIHUMncLCcbC8vRdmBHrJi8uePDALRBFUP3bckpIotp4mSIAZXf/sb ZvzILdm1QwHnRq5W7khFcrVXdYrcViTp6cAEKxB6aQ5i9KP7HYIhafKN8djhGPCW dxZj7oAe5jDNlPAee82GeY9FKNS/kDSAUwQPpURhkT63rkltSwDBBNXXg12TMFEw zqp1lBp+/FBALjkopVdDFYZ154GR+PGxLYC6D5XskmTlaD404EZyFogNEy5Rz0Ax 44k4L3ppPqboBo5XC6Si1MZLsdbq/BA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:34 2026 by rpki-client