$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa File: 2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa (raw, json) Hash identifier: RJYcXwbyfgZtAE1PH0UQdNfb6WAiosMqZ1pQaE1sjbY= Subject key identifier: 9C:DD:44:18:9E:5D:81:6D:43:85:3D:D0:A4:D6:EE:65:28:EC:9A:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62548A6FFF9418BB68D080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 152.70.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:8a:6f:ff:94:18:bb:68:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=d54d7fd7-8cfc-4d0f-bb00-353a503dbc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:50:17:60:aa:e7:e8:15:7b:1b:22:f5:e1: 9b:f0:3b:c8:fe:e8:18:d0:68:65:4a:58:86:e8:47: 90:56:41:4c:62:63:40:23:f1:92:1c:4a:a0:4f:8b: 43:99:e4:05:a3:a6:cf:05:ba:11:14:29:74:16:c6: a2:f3:53:a9:91:a3:01:5c:0e:69:00:e8:d9:18:ad: fa:15:85:ef:2a:9c:9a:45:b6:fc:a7:43:71:e7:5c: 18:ed:45:21:9d:7b:f2:bf:32:d9:80:d8:46:96:3d: 13:da:bb:9c:10:3a:aa:8a:99:2d:26:43:b6:64:b5: 11:da:41:c3:8e:28:3e:fa:6d:c0:0b:17:70:47:c0: 16:35:86:7a:88:ed:3c:32:bd:7e:43:af:4e:25:bd: b4:3a:16:af:83:96:16:8d:61:61:42:65:c4:5b:84: 89:fc:9f:0c:19:b4:0d:5c:a1:f6:71:c9:20:47:56: ca:80:81:34:52:f6:00:bc:48:8f:21:85:18:e2:72: 75:7c:5e:a2:66:19:ce:83:bd:b6:5d:72:1b:6e:ba: 90:72:7e:69:40:4e:88:3b:45:0b:db:1b:16:44:2a: 12:5f:b5:89:21:91:29:db:87:75:02:33:4b:89:76: 20:7e:07:f7:fd:35:36:93:cb:0f:04:62:2c:07:02: a5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DD:44:18:9E:5D:81:6D:43:85:3D:D0:A4:D6:EE:65:28:EC:9A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:dd:06:bc:b1:c2:98:c9:37:1f:fc:b9:97:c8:22:45:eb:01: de:e7:1a:cd:27:4f:fd:d9:f8:16:dc:0f:73:07:47:b0:3a:aa: 2f:92:5f:38:34:84:fb:c8:6a:56:01:13:71:90:f5:71:fe:60: 3b:27:f6:1e:23:36:cb:73:78:d1:20:82:b9:90:30:1d:49:78: ab:5a:52:7c:03:fc:ca:5d:c9:36:30:c4:aa:09:8e:07:c0:24: 6d:49:5d:e6:06:86:52:2f:41:64:68:2d:97:ef:62:43:11:f7: 01:15:2d:a7:47:66:ea:59:1e:da:87:71:8a:d3:73:17:25:35: 82:55:bd:b9:66:1f:ad:70:45:d3:5d:50:aa:2b:b5:a9:80:39: b1:4a:6c:3c:51:00:2c:31:40:42:87:5a:19:71:01:6a:9d:3c: fa:18:d1:51:28:bd:e0:c3:bc:63:45:60:63:dd:ea:1d:25:d0: 85:1d:ca:04:e1:84:f5:ab:18:03:4d:a7:b8:b5:c0:42:ad:ea: f3:fd:1d:17:0c:07:93:70:df:ef:7e:30:6a:5f:95:c3:18:9b: 64:ba:6f:e9:08:e7:c1:7b:66:ba:6e:94:28:70:57:82:8e:de: 26:c2:66:3e:74:71:1b:60:98:78:7c:65:7d:ec:88:74:f5:02: fe:a7:d2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlSKb/+UGLto0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDU0ZDdmZDctOGNmYy00ZDBmLWJiMDAtMzUzYTUwM2RiYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXVQF2Cq5+gVexsi9eGb8DvI/ugY0GhlSliG 6EeQVkFMYmNAI/GSHEqgT4tDmeQFo6bPBboRFCl0Fsai81OpkaMBXA5pAOjZGK36 FYXvKpyaRbb8p0Nx51wY7UUhnXvyvzLZgNhGlj0T2rucEDqqipktJkO2ZLUR2kHD jig++m3ACxdwR8AWNYZ6iO08Mr1+Q69OJb20Ohavg5YWjWFhQmXEW4SJ/J8MGbQN XKH2cckgR1bKgIE0UvYAvEiPIYUY4nJ1fF6iZhnOg722XXIbbrqQcn5pQE6IO0UL 2xsWRCoSX7WJIZEp24d1AjNLiXYgfgf3/TU2k8sPBGIsBwKlvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzdRBieXYFtQ4U90KTW7mUo7Jp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU4NDc1MGQtMWU3ZC0z YTQ3LWJhYzMtOTVjMTM5YWI5ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7dBryxwpjJNx/8uZfIIkXrAd7nGs0nT/3Z+BbcD3MHR7A6qi+SXzg0 hPvIalYBE3GQ9XH+YDsn9h4jNstzeNEggrmQMB1JeKtaUnwD/MpdyTYwxKoJjgfA JG1JXeYGhlIvQWRoLZfvYkMR9wEVLadHZupZHtqHcYrTcxclNYJVvblmH61wRdNd UKortamAObFKbDxRACwxQEKHWhlxAWqdPPoY0VEoveDDvGNFYGPd6h0l0IUdygTh hPWrGANNp7i1wEKt6vP9HRcMB5Nw3+9+MGpflcMYm2S6b+kI58F7ZrpulChwV4KO 3ibCZj50cRtgmHh8ZX3siHT1Av6n0qA= -----END CERTIFICATE-----Generated at Tue Sep 22 00:04:59 2026 by rpki-client