$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa File: 2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa (raw, json) Hash identifier: Hvh8L26kflYDYbSX4FzZDulGEGqeFP0zIbfLMpxyWw8= Subject key identifier: 5F:EC:46:57:6A:06:68:7D:0A:86:D8:4A:86:A1:7D:99:C2:D5:62:6B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86954EA5D967AAF6F7461480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 152.70.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4e:a5:d9:67:aa:f6:f7:46:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=47b71fc6-a0a1-40fd-a199-47aa832cc26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:7f:9d:6e:bf:17:2f:8f:72:5f:e9:59:96: 7d:d8:cc:60:9d:45:a3:52:10:88:80:21:70:ea:79: 04:e5:09:47:2e:8b:e0:2a:38:22:60:12:88:e5:17: 9c:fa:5f:95:36:b1:d3:b1:e4:7c:e6:d1:ed:2a:64: 9b:d2:09:bc:a6:89:d9:fe:60:b9:d9:9a:5b:a6:12: 20:d2:34:16:74:64:f4:21:df:e1:03:7d:28:ff:f5: 5a:75:cd:8e:07:ec:53:7b:ac:f3:47:68:4c:0d:bb: 7d:55:da:f7:71:dc:0d:36:8f:ea:28:5f:81:77:57: 70:f2:49:00:4e:07:d0:57:59:c6:34:b0:a3:cb:64: 4d:d7:4a:78:00:91:84:da:a7:eb:56:fa:e8:67:43: 8d:34:16:d0:ab:a4:24:6b:06:c2:58:72:3f:54:e9: 0b:47:41:f6:1e:1f:0e:b6:56:97:5c:b9:f0:59:40: 74:81:90:4a:53:d2:a1:38:29:cc:81:a8:1e:01:f3: 5e:f1:21:6e:ac:f1:b8:b7:2c:c1:02:7e:3d:b7:09: f4:22:68:99:e0:09:f5:c1:05:6c:11:3b:1a:76:06: 3b:a1:99:61:70:e6:87:b7:ae:24:cb:88:eb:c0:f4: e9:69:db:e5:42:ad:0e:fc:63:18:f9:2e:f2:dd:f2: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:46:57:6A:06:68:7D:0A:86:D8:4A:86:A1:7D:99:C2:D5:62:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:af:e7:d4:81:56:00:f2:f2:48:1c:0a:3a:0a:3e:2f:05:8c: b3:d5:0e:55:3d:45:d4:65:e8:89:22:cf:29:73:9f:68:e0:1a: 6f:d9:86:b4:e4:96:b9:17:73:6c:27:8e:b6:c9:96:c0:87:d6: b6:a7:33:d4:fd:f0:42:f3:b1:05:7b:71:b4:c0:24:d0:2a:80: 3b:e5:ac:1f:23:c6:47:83:17:f6:c1:7b:79:22:86:d0:be:de: 19:0b:3f:ca:04:93:1d:6a:5d:ef:2b:2d:72:49:26:25:a8:d8: 88:a9:53:7b:d3:c2:ca:6c:d3:8b:f9:f4:96:45:60:8a:7d:8d: 94:92:eb:44:60:d5:a1:68:2b:a3:95:6e:2d:9b:4c:c8:df:40: af:71:33:ab:b7:8f:02:d4:4f:01:e4:cd:80:f6:87:d9:56:45: b0:c3:94:31:db:28:40:bf:04:93:b6:f5:07:25:2b:62:c0:6c: 82:2c:8a:0d:45:f7:29:08:d5:aa:6b:35:90:19:2b:e6:7c:c0: 7e:8e:68:7e:32:84:6a:89:14:ed:2e:79:2e:72:0c:c6:fd:6d: 50:0d:df:0c:91:fe:ea:9f:de:03:91:6b:9c:a0:66:eb:fb:a6: 58:ac:54:2a:4d:31:aa:b4:88:34:dc:80:9d:63:97:e4:aa:a9: e8:9f:c6:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlU6l2Weq9vdGFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NDdiNzFmYzYtYTBhMS00MGZkLWExOTktNDdhYTgzMmNjMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VJ/nW6/Fy+Pcl/pWZZ92MxgnUWjUhCIgCFw 6nkE5QlHLovgKjgiYBKI5Rec+l+VNrHTseR85tHtKmSb0gm8ponZ/mC52ZpbphIg 0jQWdGT0Id/hA30o//Vadc2OB+xTe6zzR2hMDbt9Vdr3cdwNNo/qKF+Bd1dw8kkA TgfQV1nGNLCjy2RN10p4AJGE2qfrVvroZ0ONNBbQq6QkawbCWHI/VOkLR0H2Hh8O tlaXXLnwWUB0gZBKU9KhOCnMgageAfNe8SFurPG4tyzBAn49twn0ImiZ4An1wQVs ETsadgY7oZlhcOaHt64ky4jrwPTpadvlQq0O/GMY+S7y3fLRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/sRldqBmh9CobYSoahfZnC1WJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmI2ZjY3NzAtZTQ2YS0z NTM0LWJmZWUtMjNmMmQ5YWRmM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+v59SBVgDy8kgcCjoKPi8FjLPVDlU9RdRl6Ikizylzn2jgGm/ZhrTk lrkXc2wnjrbJlsCH1ranM9T98ELzsQV7cbTAJNAqgDvlrB8jxkeDF/bBe3kihtC+ 3hkLP8oEkx1qXe8rLXJJJiWo2IipU3vTwsps04v59JZFYIp9jZSS60Rg1aFoK6OV bi2bTMjfQK9xM6u3jwLUTwHkzYD2h9lWRbDDlDHbKEC/BJO29QclK2LAbIIsig1F 9ykI1aprNZAZK+Z8wH6OaH4yhGqJFO0ueS5yDMb9bVAN3wyR/uqf3gORa5ygZuv7 plisVCpNMaq0iDTcgJ1jl+Sqqeifxqc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:40 2026 by rpki-client